[2025-09-09 00:00:04][354432550998147][1 ms][INFO] === Request start === [2025-09-09 00:00:04][354432550998147][2 ms][DEBUG] START check_scloud [2025-09-09 00:00:04][354432550998147][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:00:05][354432550998147][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 5496 1773 24709864 140100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:00:05][354432550998147][310 ms][DEBUG] targetPkg: running [2025-09-09 00:00:05][354432550998147][311 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 00:00:05][354432550998147][311 ms][DEBUG] START check_boot_completed [2025-09-09 00:00:05][354432550998147][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:00:05][354432550998147][341 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 00:00:05][354432550998147][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:00:05][354432550998147][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:00:05][354432550998147][388 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 00:00:05][354432550998147][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:00:05][354432550998147][513 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1385\nsuccessfulTxPacketsPerSecond: 0.05370805279013334\nretriedTxPackets: 267\nretriedTxPacketsPerSecond: 0.048825502536484856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1355\nsuccessfulRxPacketsPerSecond: 0.0341778517755394\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:00:05][354432550998147][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:00:06][354432550998147][1763 ms][DEBUG] SU: done in 1250 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.367/202.367/202.367/0.000 ms\n [2025-09-09 00:00:06][354432550998147][1763 ms][DEBUG] check_internet: online [2025-09-09 00:00:06][354432550998147][1763 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:00:06][354432550998147][1763 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432550998147\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2134\"}'\'' -e'"" [2025-09-09 00:00:06][354432550998147][1763 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:00:06][354432550998147][1763 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432550998147\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2134\"}'\'' -e'"" [2025-09-09 00:00:12][354432550998147][7214 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9b73645-de76-4ccb-b594-be7a9e869b0e","id":"QR_e9b73645-de76-4ccb-b594-be7a9e869b0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:00:12][354432550998147][7371 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-09 00:00:12][354432550998147][7371 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 00:00:12][354432550998147][7371 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:00:15][354432550998147][1 ms][INFO] === Request start === [2025-09-09 00:00:15][354432550998147][1 ms][DEBUG] START check_scloud [2025-09-09 00:00:15][354432550998147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:00:16][354432550998147][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 5496 1773 24868848 151764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:00:16][354432550998147][313 ms][DEBUG] targetPkg: running [2025-09-09 00:00:16][354432550998147][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 00:00:16][354432550998147][313 ms][DEBUG] START check_boot_completed [2025-09-09 00:00:16][354432550998147][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:00:16][354432550998147][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:00:16][354432550998147][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:00:16][354432550998147][422 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 00:00:16][354432550998147][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 00:00:16][354432550998147][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:00:16][354432550998147][547 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1385\nsuccessfulTxPacketsPerSecond: 0.05370805279013334\nretriedTxPackets: 267\nretriedTxPacketsPerSecond: 0.048825502536484856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1355\nsuccessfulRxPacketsPerSecond: 0.0341778517755394\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:00:16][354432550998147][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:00:16][354432550998147][891 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.347/206.347/206.347/0.000 ms\n [2025-09-09 00:00:16][354432550998147][891 ms][DEBUG] check_internet: online [2025-09-09 00:00:16][354432550998147][891 ms][DEBUG] rawBody.length=1150 [2025-09-09 00:00:16][354432550998147][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432550998147\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5270\"}'\'' -e'"" [2025-09-09 00:00:16][354432550998147][891 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:00:16][354432550998147][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432550998147\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5270\"}'\'' -e'"" [2025-09-09 00:00:20][354432550998147][4468 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1109f733-1a9c-4b00-ac39-04e0817e8747","id":"QR_1109f733-1a9c-4b00-ac39-04e0817e8747","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:00:20][354432550998147][4624 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 00:00:20][354432550998147][4624 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 00:00:20][354432550998147][4624 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:12:03][351600131499925][1 ms][INFO] === Request start === [2025-09-09 00:12:03][351600131499925][1 ms][DEBUG] START check_scloud [2025-09-09 00:12:03][351600131499925][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:12:03][351600131499925][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 5496 1773 24977508 161296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:12:03][351600131499925][303 ms][DEBUG] targetPkg: running [2025-09-09 00:12:03][351600131499925][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 00:12:03][351600131499925][303 ms][DEBUG] START check_boot_completed [2025-09-09 00:12:03][351600131499925][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:12:03][351600131499925][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 00:12:03][351600131499925][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:12:03][351600131499925][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:12:03][351600131499925][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 00:12:03][351600131499925][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:12:03][351600131499925][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1559\nsuccessfulTxPacketsPerSecond: 0.053132845396703106\nretriedTxPackets: 305\nretriedTxPacketsPerSecond: 0.036528831210233384\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1505\nsuccessfulRxPacketsPerSecond: 0.03984963404752733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:12:03][351600131499925][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:12:05][351600131499925][1756 ms][DEBUG] SU: done in 1265 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.166/202.166/202.166/0.000 ms\n [2025-09-09 00:12:05][351600131499925][1756 ms][DEBUG] check_internet: online [2025-09-09 00:12:05][351600131499925][1756 ms][DEBUG] rawBody.length=1150 [2025-09-09 00:12:05][351600131499925][1756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600131499925\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6455\"}'\'' -e'"" [2025-09-09 00:12:05][351600131499925][1756 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:12:05][351600131499925][1756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600131499925\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6455\"}'\'' -e'"" [2025-09-09 00:12:08][351600131499925][5599 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_380947d2-f55d-414b-afcb-f60d68369f35","id":"QR_380947d2-f55d-414b-afcb-f60d68369f35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:12:09][351600131499925][5755 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-09 00:12:09][351600131499925][5755 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-09 00:12:09][351600131499925][5755 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:12:11][351600131499925][1 ms][INFO] === Request start === [2025-09-09 00:12:11][351600131499925][1 ms][DEBUG] START check_scloud [2025-09-09 00:12:11][351600131499925][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:12:11][351600131499925][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 5496 1773 25121212 169852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:12:11][351600131499925][317 ms][DEBUG] targetPkg: running [2025-09-09 00:12:11][351600131499925][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 00:12:11][351600131499925][317 ms][DEBUG] START check_boot_completed [2025-09-09 00:12:11][351600131499925][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:12:11][351600131499925][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 00:12:11][351600131499925][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:12:11][351600131499925][396 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 00:12:11][351600131499925][396 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 00:12:11][351600131499925][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:12:11][351600131499925][536 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1559\nsuccessfulTxPacketsPerSecond: 0.053132845396703106\nretriedTxPackets: 305\nretriedTxPacketsPerSecond: 0.036528831210233384\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1505\nsuccessfulRxPacketsPerSecond: 0.03984963404752733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:12:11][351600131499925][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:12:12][351600131499925][942 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.286/273.286/273.286/0.000 ms\n [2025-09-09 00:12:12][351600131499925][942 ms][DEBUG] check_internet: online [2025-09-09 00:12:12][351600131499925][942 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:12:12][351600131499925][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600131499925\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3302\"}'\'' -e'"" [2025-09-09 00:12:12][351600131499925][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:12:12][351600131499925][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600131499925\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3302\"}'\'' -e'"" [2025-09-09 00:12:16][351600131499925][5332 ms][DEBUG] proc_open done in 4390 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 00:12:16][351600131499925][5332 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-09-09 00:12:16][351600131499925][5332 ms][WARN] Detected error: Process with pid 5496 either refused to load frida-agent, or terminated during injectionProcess with pid 5496 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 00:12:16][351600131499925][5332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 00:12:17][351600131499925][5628 ms][DEBUG] SU: done in 297 ms; outsystem 2152 1773 12946436 220708 ep_poll 0 S system_server\n [2025-09-09 00:12:17][351600131499925][5628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 00:12:17][351600131499925][5769 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 00:12:17][351600131499925][5769 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 00:12:17][351600131499925][5769 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 00:12:17][351600131499925][5894 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 00:12:17][351600131499925][5894 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 00:12:17][351600131499925][6129 ms][DEBUG] SU: done in 235 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 00:12:19][351600131499925][8143 ms][DEBUG] START check_boot_completed [2025-09-09 00:12:19][351600131499925][8143 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:12:19][351600131499925][8190 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 00:12:19][351600131499925][8190 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:12:19][351600131499925][8237 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:12:19][351600131499925][8237 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 00:12:22][351600131499925][11252 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 00:12:22][351600131499925][11252 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600131499925\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3302\"}'\'' -e'"" [2025-09-09 00:12:27][351600131499925][16532 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d7ac8e8-0482-439e-bfe8-24486eeedad1","id":"QR_4d7ac8e8-0482-439e-bfe8-24486eeedad1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:12:28][351600131499925][16688 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-09 00:12:28][351600131499925][16688 ms][DEBUG] END runCmdUntilRes#2 in 5436 ms [2025-09-09 00:12:28][351600131499925][16688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:16:04][351904850001114][0 ms][INFO] === Request start === [2025-09-09 00:16:04][351904850001114][0 ms][DEBUG] START check_scloud [2025-09-09 00:16:04][351904850001114][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:16:05][351904850001114][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 17231 1773 23847400 127788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:16:05][351904850001114][246 ms][DEBUG] targetPkg: running [2025-09-09 00:16:05][351904850001114][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-09 00:16:05][351904850001114][247 ms][DEBUG] START check_boot_completed [2025-09-09 00:16:05][351904850001114][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:16:05][351904850001114][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:16:05][351904850001114][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:16:05][351904850001114][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:16:05][351904850001114][340 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 00:16:05][351904850001114][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:16:05][351904850001114][465 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1623\nsuccessfulTxPacketsPerSecond: 0.21255326285864212\nretriedTxPackets: 327\nretriedTxPacketsPerSecond: 0.07306518410765822\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1563\nsuccessfulRxPacketsPerSecond: 0.19262639446564442\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:16:05][351904850001114][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:16:06][351904850001114][1762 ms][DEBUG] SU: done in 1296 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.653/201.653/201.653/0.000 ms\n [2025-09-09 00:16:06][351904850001114][1762 ms][DEBUG] check_internet: online [2025-09-09 00:16:06][351904850001114][1762 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:16:06][351904850001114][1762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351904850001114\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7290\"}'\'' -e'"" [2025-09-09 00:16:06][351904850001114][1762 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:16:06][351904850001114][1762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351904850001114\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7290\"}'\'' -e'"" [2025-09-09 00:16:11][351904850001114][7119 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3eadce9-9d01-4178-893f-d7e3162197bb","id":"QR_f3eadce9-9d01-4178-893f-d7e3162197bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:16:12][351904850001114][7276 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-09 00:16:12][351904850001114][7276 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-09 00:16:12][351904850001114][7276 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:16:15][351904850001114][0 ms][INFO] === Request start === [2025-09-09 00:16:15][351904850001114][1 ms][DEBUG] START check_scloud [2025-09-09 00:16:15][351904850001114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:16:15][351904850001114][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 17231 1773 24006256 138792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:16:15][351904850001114][280 ms][DEBUG] targetPkg: running [2025-09-09 00:16:15][351904850001114][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 00:16:15][351904850001114][280 ms][DEBUG] START check_boot_completed [2025-09-09 00:16:15][351904850001114][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:16:15][351904850001114][327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 00:16:15][351904850001114][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:16:15][351904850001114][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 00:16:15][351904850001114][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 00:16:15][351904850001114][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:16:16][351904850001114][546 ms][DEBUG] SU: done in 157 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1623\nsuccessfulTxPacketsPerSecond: 0.21255326285864212\nretriedTxPackets: 327\nretriedTxPacketsPerSecond: 0.07306518410765822\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1563\nsuccessfulRxPacketsPerSecond: 0.19262639446564442\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:16:16][351904850001114][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:16:16][351904850001114][874 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.539/223.539/223.539/0.000 ms\n [2025-09-09 00:16:16][351904850001114][874 ms][DEBUG] check_internet: online [2025-09-09 00:16:16][351904850001114][874 ms][DEBUG] rawBody.length=1150 [2025-09-09 00:16:16][351904850001114][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351904850001114\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2624\"}'\'' -e'"" [2025-09-09 00:16:16][351904850001114][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:16:16][351904850001114][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351904850001114\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2624\"}'\'' -e'"" [2025-09-09 00:16:20][351904850001114][4638 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_226187fa-e405-4523-a75e-2708d708436a","id":"QR_226187fa-e405-4523-a75e-2708d708436a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:16:20][351904850001114][4794 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-09 00:16:20][351904850001114][4794 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-09 00:16:20][351904850001114][4794 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:19:04][351596890486444][1 ms][INFO] === Request start === [2025-09-09 00:19:04][351596890486444][1 ms][DEBUG] START check_scloud [2025-09-09 00:19:04][351596890486444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:19:04][351596890486444][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 17231 1773 24146672 150872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:19:04][351596890486444][301 ms][DEBUG] targetPkg: running [2025-09-09 00:19:04][351596890486444][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 00:19:04][351596890486444][301 ms][DEBUG] START check_boot_completed [2025-09-09 00:19:04][351596890486444][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:19:04][351596890486444][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 00:19:04][351596890486444][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:19:04][351596890486444][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 00:19:04][351596890486444][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 00:19:04][351596890486444][411 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:19:04][351596890486444][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351596890486444\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6918\"}'\'' -e'"" [2025-09-09 00:19:04][351596890486444][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:19:04][351596890486444][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351596890486444\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6918\"}'\'' -e'"" [2025-09-09 00:19:10][351596890486444][6315 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26a98134-7efc-4b50-ac0d-507bcf762049","id":"QR_26a98134-7efc-4b50-ac0d-507bcf762049","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:19:10][351596890486444][6471 ms][DEBUG] proc_open done in 6060 ms; code=255; res.len=3343 [2025-09-09 00:19:10][351596890486444][6471 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-09-09 00:19:10][351596890486444][6472 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:19:14][351596890486444][0 ms][INFO] === Request start === [2025-09-09 00:19:14][351596890486444][1 ms][DEBUG] START check_scloud [2025-09-09 00:19:14][351596890486444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:19:14][351596890486444][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 17231 1773 24319544 161456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:19:14][351596890486444][244 ms][DEBUG] targetPkg: running [2025-09-09 00:19:14][351596890486444][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-09 00:19:14][351596890486444][244 ms][DEBUG] START check_boot_completed [2025-09-09 00:19:14][351596890486444][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:19:14][351596890486444][289 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:19:14][351596890486444][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:19:14][351596890486444][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:19:14][351596890486444][336 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 00:19:14][351596890486444][336 ms][DEBUG] rawBody.length=1150 [2025-09-09 00:19:14][351596890486444][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351596890486444\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4548\"}'\'' -e'"" [2025-09-09 00:19:14][351596890486444][336 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:19:14][351596890486444][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351596890486444\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4548\"}'\'' -e'"" [2025-09-09 00:19:18][351596890486444][4210 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c44613e5-2ae5-47f7-a55b-15561c996c35","id":"QR_c44613e5-2ae5-47f7-a55b-15561c996c35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:19:18][351596890486444][4367 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 00:19:18][351596890486444][4367 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 00:19:18][351596890486444][4367 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:38:04][351064275054675][1 ms][INFO] === Request start === [2025-09-09 00:38:04][351064275054675][1 ms][DEBUG] START check_scloud [2025-09-09 00:38:04][351064275054675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:38:04][351064275054675][348 ms][DEBUG] SU: done in 347 ms; outu0_a118 17231 1773 24393388 161892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:38:04][351064275054675][348 ms][DEBUG] targetPkg: running [2025-09-09 00:38:04][351064275054675][348 ms][DEBUG] END check_scloud in 347 ms [2025-09-09 00:38:04][351064275054675][348 ms][DEBUG] START check_boot_completed [2025-09-09 00:38:04][351064275054675][348 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:38:04][351064275054675][394 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:38:04][351064275054675][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:38:04][351064275054675][441 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:38:04][351064275054675][441 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 00:38:04][351064275054675][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:38:04][351064275054675][567 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1779\nsuccessfulTxPacketsPerSecond: 0.03164106377256403\nretriedTxPackets: 397\nretriedTxPacketsPerSecond: 0.03164106377256403\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1688\nsuccessfulRxPacketsPerSecond: 0.03164106377256403\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:38:04][351064275054675][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:38:05][351064275054675][1847 ms][DEBUG] SU: done in 1281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.609/199.609/199.609/0.000 ms\n [2025-09-09 00:38:05][351064275054675][1848 ms][DEBUG] check_internet: online [2025-09-09 00:38:05][351064275054675][1848 ms][DEBUG] rawBody.length=1150 [2025-09-09 00:38:05][351064275054675][1848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-09-09 00:38:05][351064275054675][1848 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:38:05][351064275054675][1848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-09-09 00:38:09][351064275054675][5924 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 00:38:10][351064275054675][6081 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=115 [2025-09-09 00:38:10][351064275054675][6081 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 00:38:10][351064275054675][6081 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 00:38:10][][0 ms][INFO] === Request start === [2025-09-09 00:38:10][][1 ms][DEBUG] START check_scloud [2025-09-09 00:38:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:38:10][][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 17231 1773 24563712 145216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:38:10][][323 ms][DEBUG] targetPkg: running [2025-09-09 00:38:10][][323 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 00:38:10][][323 ms][DEBUG] START check_boot_completed [2025-09-09 00:38:10][][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:38:10][][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:38:10][][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:38:10][][432 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 00:38:10][][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 00:38:10][][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:38:10][][557 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1779\nsuccessfulTxPacketsPerSecond: 0.03164106377256403\nretriedTxPackets: 397\nretriedTxPacketsPerSecond: 0.03164106377256403\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1688\nsuccessfulRxPacketsPerSecond: 0.03164106377256403\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:38:10][][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:38:11][][823 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.563/163.563/163.563/0.000 ms\n [2025-09-09 00:38:11][][823 ms][DEBUG] check_internet: online [2025-09-09 00:38:11][][823 ms][DEBUG] rawBody.length=1131 [2025-09-09 00:38:11][][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB0NKWTK\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7788\"}'\'' -e'"" [2025-09-09 00:38:11][][823 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:38:11][][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB0NKWTK\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7788\"}'\'' -e'"" [2025-09-09 00:38:14][][3963 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 00:38:14][][4119 ms][DEBUG] proc_open done in 3296 ms; code=255; res.len=115 [2025-09-09 00:38:14][][4119 ms][DEBUG] END runCmdUntilRes#1 in 3296 ms [2025-09-09 00:38:14][][4119 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 00:38:16][351064275054675][0 ms][INFO] === Request start === [2025-09-09 00:38:16][351064275054675][1 ms][DEBUG] START check_scloud [2025-09-09 00:38:16][351064275054675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:38:16][351064275054675][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 17231 1773 24736904 144920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:38:16][351064275054675][324 ms][DEBUG] targetPkg: running [2025-09-09 00:38:16][351064275054675][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 00:38:16][351064275054675][324 ms][DEBUG] START check_boot_completed [2025-09-09 00:38:16][351064275054675][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:38:16][351064275054675][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:38:16][351064275054675][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:38:16][351064275054675][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 00:38:16][351064275054675][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 00:38:16][351064275054675][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:38:16][351064275054675][558 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1779\nsuccessfulTxPacketsPerSecond: 0.03164106377256403\nretriedTxPackets: 397\nretriedTxPacketsPerSecond: 0.03164106377256403\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1688\nsuccessfulRxPacketsPerSecond: 0.03164106377256403\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:38:16][351064275054675][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:38:16][351064275054675][840 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.019/164.019/164.019/0.000 ms\n [2025-09-09 00:38:16][351064275054675][840 ms][DEBUG] check_internet: online [2025-09-09 00:38:16][351064275054675][840 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:38:16][351064275054675][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2658\"}'\'' -e'"" [2025-09-09 00:38:16][351064275054675][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:38:16][351064275054675][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2658\"}'\'' -e'"" [2025-09-09 00:38:22][351064275054675][6057 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25dc576e-7039-4246-9de1-e3512a896f65","id":"QR_25dc576e-7039-4246-9de1-e3512a896f65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:38:22][351064275054675][6213 ms][DEBUG] proc_open done in 5374 ms; code=255; res.len=3343 [2025-09-09 00:38:22][351064275054675][6213 ms][DEBUG] END runCmdUntilRes#1 in 5374 ms [2025-09-09 00:38:22][351064275054675][6213 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:48:05][359797451743932][1 ms][INFO] === Request start === [2025-09-09 00:48:05][359797451743932][1 ms][DEBUG] START check_scloud [2025-09-09 00:48:05][359797451743932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:48:05][359797451743932][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 17231 1773 24829016 156444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:48:05][359797451743932][274 ms][DEBUG] targetPkg: running [2025-09-09 00:48:05][359797451743932][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-09 00:48:05][359797451743932][274 ms][DEBUG] START check_boot_completed [2025-09-09 00:48:05][359797451743932][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:48:05][359797451743932][305 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 00:48:05][359797451743932][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:48:05][359797451743932][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:48:05][359797451743932][352 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 00:48:05][359797451743932][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:48:05][359797451743932][461 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1989\nsuccessfulTxPacketsPerSecond: 0.0697535375008304\nretriedTxPackets: 454\nretriedTxPacketsPerSecond: 0.04650235833388693\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1872\nsuccessfulRxPacketsPerSecond: 0.04318076131003787\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:48:05][359797451743932][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:48:06][359797451743932][1775 ms][DEBUG] SU: done in 1313 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.266/201.266/201.266/0.000 ms\n [2025-09-09 00:48:06][359797451743932][1775 ms][DEBUG] check_internet: online [2025-09-09 00:48:06][359797451743932][1775 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:48:06][359797451743932][1775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451743932\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9690\"}'\'' -e'"" [2025-09-09 00:48:06][359797451743932][1775 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:48:06][359797451743932][1775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451743932\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9690\"}'\'' -e'"" [2025-09-09 00:48:11][359797451743932][6725 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da142f8b-b29d-4864-85d2-edb50a62a798","id":"QR_da142f8b-b29d-4864-85d2-edb50a62a798","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:48:12][359797451743932][6881 ms][DEBUG] proc_open done in 5106 ms; code=255; res.len=3343 [2025-09-09 00:48:12][359797451743932][6882 ms][DEBUG] END runCmdUntilRes#1 in 5106 ms [2025-09-09 00:48:12][359797451743932][6882 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:52:05][356479635018472][0 ms][INFO] === Request start === [2025-09-09 00:52:05][356479635018472][0 ms][DEBUG] START check_scloud [2025-09-09 00:52:05][356479635018472][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:52:05][356479635018472][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 17231 1773 24954248 167440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:52:05][356479635018472][316 ms][DEBUG] targetPkg: running [2025-09-09 00:52:05][356479635018472][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 00:52:05][356479635018472][316 ms][DEBUG] START check_boot_completed [2025-09-09 00:52:05][356479635018472][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:52:05][356479635018472][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:52:05][356479635018472][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:52:05][356479635018472][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 00:52:05][356479635018472][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 00:52:05][356479635018472][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:52:05][356479635018472][581 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2296\nsuccessfulTxPacketsPerSecond: 0.029576173434683047\nretriedTxPackets: 488\nretriedTxPacketsPerSecond: 0.019717448956454192\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2154\nsuccessfulRxPacketsPerSecond: 0.0197174489564559\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:52:05][356479635018472][582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:52:06][356479635018472][1862 ms][DEBUG] SU: done in 1281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.159/199.159/199.159/0.000 ms\n [2025-09-09 00:52:06][356479635018472][1862 ms][DEBUG] check_internet: online [2025-09-09 00:52:06][356479635018472][1862 ms][DEBUG] rawBody.length=1159 [2025-09-09 00:52:06][356479635018472][1862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635018472\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5269\"}'\'' -e'"" [2025-09-09 00:52:06][356479635018472][1862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:52:06][356479635018472][1862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635018472\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5269\"}'\'' -e'"" [2025-09-09 00:52:11][356479635018472][6908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee308b92-c162-40df-971c-b196e8cc1c11","id":"QR_ee308b92-c162-40df-971c-b196e8cc1c11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:52:12][356479635018472][7064 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 00:52:12][356479635018472][7064 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 00:52:12][356479635018472][7064 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:52:15][356479635018472][0 ms][INFO] === Request start === [2025-09-09 00:52:15][356479635018472][1 ms][DEBUG] START check_scloud [2025-09-09 00:52:15][356479635018472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:52:15][356479635018472][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 17231 1773 25129616 177952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:52:15][356479635018472][277 ms][DEBUG] targetPkg: running [2025-09-09 00:52:15][356479635018472][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 00:52:15][356479635018472][277 ms][DEBUG] START check_boot_completed [2025-09-09 00:52:15][356479635018472][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:52:15][356479635018472][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 00:52:15][356479635018472][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:52:15][356479635018472][401 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 00:52:15][356479635018472][401 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 00:52:15][356479635018472][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:52:16][356479635018472][511 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2296\nsuccessfulTxPacketsPerSecond: 0.029576173434683047\nretriedTxPackets: 488\nretriedTxPacketsPerSecond: 0.019717448956454192\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2154\nsuccessfulRxPacketsPerSecond: 0.0197174489564559\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:52:16][356479635018472][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:52:16][356479635018472][841 ms][DEBUG] SU: done in 330 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.981/229.981/229.981/0.000 ms\n [2025-09-09 00:52:16][356479635018472][841 ms][DEBUG] check_internet: online [2025-09-09 00:52:16][356479635018472][841 ms][DEBUG] rawBody.length=1149 [2025-09-09 00:52:16][356479635018472][841 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635018472\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9628\"}'\'' -e'"" [2025-09-09 00:52:16][356479635018472][841 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:52:16][356479635018472][841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635018472\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9628\"}'\'' -e'"" [2025-09-09 00:52:20][356479635018472][4541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72b12ad2-dbf4-4c06-be54-e87ed7fb49ab","id":"QR_72b12ad2-dbf4-4c06-be54-e87ed7fb49ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:52:20][356479635018472][4697 ms][DEBUG] proc_open done in 3856 ms; code=255; res.len=3343 [2025-09-09 00:52:20][356479635018472][4697 ms][DEBUG] END runCmdUntilRes#1 in 3856 ms [2025-09-09 00:52:20][356479635018472][4697 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:54:04][351104340169189][0 ms][INFO] === Request start === [2025-09-09 00:54:04][351104340169189][1 ms][DEBUG] START check_scloud [2025-09-09 00:54:04][351104340169189][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:54:04][351104340169189][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 17231 1773 25259856 189512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:54:04][351104340169189][312 ms][DEBUG] targetPkg: running [2025-09-09 00:54:04][351104340169189][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 00:54:04][351104340169189][312 ms][DEBUG] START check_boot_completed [2025-09-09 00:54:04][351104340169189][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:54:04][351104340169189][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 00:54:04][351104340169189][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:54:04][351104340169189][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:54:04][351104340169189][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 00:54:04][351104340169189][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:54:04][351104340169189][501 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2296\nsuccessfulTxPacketsPerSecond: 0.029576173434683047\nretriedTxPackets: 488\nretriedTxPacketsPerSecond: 0.019717448956454192\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2154\nsuccessfulRxPacketsPerSecond: 0.0197174489564559\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:54:04][351104340169189][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:54:05][351104340169189][937 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.215/308.215/308.215/0.000 ms\n [2025-09-09 00:54:05][351104340169189][937 ms][DEBUG] check_internet: online [2025-09-09 00:54:05][351104340169189][937 ms][DEBUG] rawBody.length=1150 [2025-09-09 00:54:05][351104340169189][937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340169189\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3203\"}'\'' -e'"" [2025-09-09 00:54:05][351104340169189][937 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:54:05][351104340169189][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340169189\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3203\"}'\'' -e'"" [2025-09-09 00:54:09][351104340169189][5217 ms][DEBUG] proc_open done in 4280 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 00:54:09][351104340169189][5217 ms][DEBUG] END runCmdUntilRes#1 in 4281 ms [2025-09-09 00:54:09][351104340169189][5217 ms][WARN] Detected error: Process with pid 17231 either refused to load frida-agent, or terminated during injectionProcess with pid 17231 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 00:54:09][351104340169189][5217 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 00:54:09][351104340169189][5498 ms][DEBUG] SU: done in 281 ms; outsystem 2152 1773 12968892 195516 ep_poll 0 S system_server\n [2025-09-09 00:54:09][351104340169189][5498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 00:54:09][351104340169189][5654 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 00:54:09][351104340169189][5654 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 00:54:09][351104340169189][5654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 00:54:09][351104340169189][5795 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 00:54:09][351104340169189][5795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 00:54:10][351104340169189][6061 ms][DEBUG] SU: done in 266 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 00:54:12][351104340169189][8076 ms][DEBUG] START check_boot_completed [2025-09-09 00:54:12][351104340169189][8076 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:54:12][351104340169189][8123 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 00:54:12][351104340169189][8123 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:54:12][351104340169189][8169 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:54:12][351104340169189][8169 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 00:54:15][351104340169189][11184 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 00:54:15][351104340169189][11184 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340169189\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3203\"}'\'' -e'"" [2025-09-09 00:54:18][351104340169189][14762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33268477-f8e6-49f6-bf22-6a18f55a7ca5","id":"QR_33268477-f8e6-49f6-bf22-6a18f55a7ca5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:54:19][351104340169189][14918 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 00:54:19][351104340169189][14918 ms][DEBUG] END runCmdUntilRes#2 in 3734 ms [2025-09-09 00:54:19][351104340169189][14918 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:54:21][351104340169189][1 ms][INFO] === Request start === [2025-09-09 00:54:21][351104340169189][1 ms][DEBUG] START check_scloud [2025-09-09 00:54:21][351104340169189][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:54:21][351104340169189][248 ms][DEBUG] SU: done in 246 ms; outu0_a118 20691 1773 23876000 125028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:54:21][351104340169189][248 ms][DEBUG] targetPkg: running [2025-09-09 00:54:21][351104340169189][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-09 00:54:21][351104340169189][248 ms][DEBUG] START check_boot_completed [2025-09-09 00:54:21][351104340169189][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:54:21][351104340169189][295 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 00:54:21][351104340169189][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:54:21][351104340169189][357 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 00:54:21][351104340169189][357 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 00:54:21][351104340169189][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 00:54:21][351104340169189][482 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2296\nsuccessfulTxPacketsPerSecond: 0.029576173434683047\nretriedTxPackets: 488\nretriedTxPacketsPerSecond: 0.019717448956454192\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2154\nsuccessfulRxPacketsPerSecond: 0.0197174489564559\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 00:54:21][351104340169189][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 00:54:22][351104340169189][857 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=271 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 271.310/271.310/271.310/0.000 ms\n [2025-09-09 00:54:22][351104340169189][857 ms][DEBUG] check_internet: online [2025-09-09 00:54:22][351104340169189][857 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:54:22][351104340169189][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340169189\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9911\"}'\'' -e'"" [2025-09-09 00:54:22][351104340169189][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:54:22][351104340169189][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340169189\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9911\"}'\'' -e'"" [2025-09-09 00:54:28][351104340169189][6918 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb80b1c3-dca2-46a2-a3d8-5a4095e5f0f8","id":"QR_bb80b1c3-dca2-46a2-a3d8-5a4095e5f0f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:54:28][351104340169189][7074 ms][DEBUG] proc_open done in 6216 ms; code=255; res.len=3343 [2025-09-09 00:54:28][351104340169189][7074 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-09-09 00:54:28][351104340169189][7074 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:55:04][357800557384064][0 ms][INFO] === Request start === [2025-09-09 00:55:04][357800557384064][1 ms][DEBUG] START check_scloud [2025-09-09 00:55:04][357800557384064][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:55:05][357800557384064][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 20691 1773 23957244 139024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:55:05][357800557384064][316 ms][DEBUG] targetPkg: running [2025-09-09 00:55:05][357800557384064][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 00:55:05][357800557384064][316 ms][DEBUG] START check_boot_completed [2025-09-09 00:55:05][357800557384064][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:55:05][357800557384064][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 00:55:05][357800557384064][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:55:05][357800557384064][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 00:55:05][357800557384064][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 00:55:05][357800557384064][394 ms][DEBUG] rawBody.length=1160 [2025-09-09 00:55:05][357800557384064][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557384064\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-09 00:55:05][357800557384064][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:55:05][357800557384064][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557384064\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-09 00:55:10][357800557384064][5143 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27ca794c-8114-4867-a7fb-52a2381c43b2","id":"QR_27ca794c-8114-4867-a7fb-52a2381c43b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:55:10][357800557384064][5299 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 00:55:10][357800557384064][5299 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 00:55:10][357800557384064][5300 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 00:55:14][357800557384064][0 ms][INFO] === Request start === [2025-09-09 00:55:14][357800557384064][1 ms][DEBUG] START check_scloud [2025-09-09 00:55:14][357800557384064][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 00:55:14][357800557384064][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 20691 1773 24097668 150488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 00:55:14][357800557384064][305 ms][DEBUG] targetPkg: running [2025-09-09 00:55:14][357800557384064][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 00:55:14][357800557384064][305 ms][DEBUG] START check_boot_completed [2025-09-09 00:55:14][357800557384064][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 00:55:14][357800557384064][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 00:55:14][357800557384064][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 00:55:14][357800557384064][430 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 00:55:14][357800557384064][430 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 00:55:14][357800557384064][430 ms][DEBUG] rawBody.length=1150 [2025-09-09 00:55:14][357800557384064][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557384064\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4380\"}'\'' -e'"" [2025-09-09 00:55:14][357800557384064][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 00:55:14][357800557384064][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557384064\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4380\"}'\'' -e'"" [2025-09-09 00:55:18][357800557384064][3866 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d020e4f-1e89-48d8-9245-b284522ababa","id":"QR_7d020e4f-1e89-48d8-9245-b284522ababa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 00:55:18][357800557384064][4022 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-09 00:55:18][357800557384064][4022 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-09 00:55:18][357800557384064][4023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:08:03][353910110956649][1 ms][INFO] === Request start === [2025-09-09 01:08:03][353910110956649][1 ms][DEBUG] START check_scloud [2025-09-09 01:08:03][353910110956649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:08:03][353910110956649][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 20691 1773 24195976 162700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:08:03][353910110956649][294 ms][DEBUG] targetPkg: running [2025-09-09 01:08:03][353910110956649][295 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 01:08:03][353910110956649][295 ms][DEBUG] START check_boot_completed [2025-09-09 01:08:03][353910110956649][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:08:03][353910110956649][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:08:03][353910110956649][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:08:03][353910110956649][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:08:03][353910110956649][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 01:08:03][353910110956649][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:08:03][353910110956649][482 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2543\nsuccessfulTxPacketsPerSecond: 0.02643891749062216\nretriedTxPackets: 571\nretriedTxPacketsPerSecond: 6.6692482523091E-8\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2362\nsuccessfulRxPacketsPerSecond: 6.6692482523091E-8\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:08:03][353910110956649][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:08:04][353910110956649][1747 ms][DEBUG] SU: done in 1265 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.663/202.663/202.663/0.000 ms\n [2025-09-09 01:08:04][353910110956649][1747 ms][DEBUG] check_internet: online [2025-09-09 01:08:04][353910110956649][1747 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:08:04][353910110956649][1747 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910110956649\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6701\"}'\'' -e'"" [2025-09-09 01:08:04][353910110956649][1747 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:08:04][353910110956649][1747 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910110956649\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6701\"}'\'' -e'"" [2025-09-09 01:08:08][353910110956649][5762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9d19c9d-e10d-46db-904f-03b6657b9f47","id":"QR_e9d19c9d-e10d-46db-904f-03b6657b9f47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:08:09][353910110956649][5918 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-09 01:08:09][353910110956649][5918 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-09 01:08:09][353910110956649][5918 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:08:11][353910110956649][0 ms][INFO] === Request start === [2025-09-09 01:08:11][353910110956649][1 ms][DEBUG] START check_scloud [2025-09-09 01:08:11][353910110956649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:08:11][353910110956649][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20691 1773 24339484 174356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:08:11][353910110956649][299 ms][DEBUG] targetPkg: running [2025-09-09 01:08:11][353910110956649][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 01:08:11][353910110956649][299 ms][DEBUG] START check_boot_completed [2025-09-09 01:08:11][353910110956649][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:08:11][353910110956649][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:08:11][353910110956649][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:08:11][353910110956649][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:08:11][353910110956649][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 01:08:11][353910110956649][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:08:11][353910110956649][518 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2543\nsuccessfulTxPacketsPerSecond: 0.02643891749062216\nretriedTxPackets: 571\nretriedTxPacketsPerSecond: 6.6692482523091E-8\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2362\nsuccessfulRxPacketsPerSecond: 6.6692482523091E-8\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:08:11][353910110956649][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:08:12][353910110956649][784 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.282/162.282/162.282/0.000 ms\n [2025-09-09 01:08:12][353910110956649][784 ms][DEBUG] check_internet: online [2025-09-09 01:08:12][353910110956649][784 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:08:12][353910110956649][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910110956649\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9681\"}'\'' -e'"" [2025-09-09 01:08:12][353910110956649][784 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:08:12][353910110956649][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910110956649\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9681\"}'\'' -e'"" [2025-09-09 01:08:17][353910110956649][5891 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73fb8498-2bdd-498e-a93c-3157ae754180","id":"QR_73fb8498-2bdd-498e-a93c-3157ae754180","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:08:17][353910110956649][6048 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-09 01:08:17][353910110956649][6048 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-09 01:08:17][353910110956649][6048 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:12:05][350792528704057][1 ms][INFO] === Request start === [2025-09-09 01:12:05][350792528704057][1 ms][DEBUG] START check_scloud [2025-09-09 01:12:05][350792528704057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:12:05][350792528704057][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20691 1773 24485980 186296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:12:05][350792528704057][308 ms][DEBUG] targetPkg: running [2025-09-09 01:12:05][350792528704057][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 01:12:05][350792528704057][308 ms][DEBUG] START check_boot_completed [2025-09-09 01:12:05][350792528704057][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:12:05][350792528704057][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:12:05][350792528704057][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:12:05][350792528704057][402 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 01:12:05][350792528704057][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 01:12:05][350792528704057][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:12:05][350792528704057][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2605\nsuccessfulTxPacketsPerSecond: 0.23551846350793354\nretriedTxPackets: 591\nretriedTxPacketsPerSecond: 0.07597369790578502\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2419\nsuccessfulRxPacketsPerSecond: 0.2165250390314873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:12:05][350792528704057][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:12:07][350792528704057][1839 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.105/189.105/189.105/0.000 ms\n [2025-09-09 01:12:07][350792528704057][1839 ms][DEBUG] check_internet: online [2025-09-09 01:12:07][350792528704057][1839 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:12:07][350792528704057][1839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528704057\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7947\"}'\'' -e'"" [2025-09-09 01:12:07][350792528704057][1839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:12:07][350792528704057][1839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528704057\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7947\"}'\'' -e'"" [2025-09-09 01:12:12][350792528704057][6978 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e83b0944-d652-450b-9a64-1a667c121fa4","id":"QR_e83b0944-d652-450b-9a64-1a667c121fa4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:12:12][350792528704057][7134 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 01:12:12][350792528704057][7134 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-09 01:12:12][350792528704057][7134 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:12:15][350792528704057][0 ms][INFO] === Request start === [2025-09-09 01:12:15][350792528704057][1 ms][DEBUG] START check_scloud [2025-09-09 01:12:15][350792528704057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:12:16][350792528704057][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 20691 1773 24636772 198144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:12:16][350792528704057][258 ms][DEBUG] targetPkg: running [2025-09-09 01:12:16][350792528704057][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 01:12:16][350792528704057][259 ms][DEBUG] START check_boot_completed [2025-09-09 01:12:16][350792528704057][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:12:16][350792528704057][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 01:12:16][350792528704057][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:12:16][350792528704057][383 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 01:12:16][350792528704057][383 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 01:12:16][350792528704057][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:12:16][350792528704057][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2605\nsuccessfulTxPacketsPerSecond: 0.23551846350793354\nretriedTxPackets: 591\nretriedTxPacketsPerSecond: 0.07597369790578502\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2419\nsuccessfulRxPacketsPerSecond: 0.2165250390314873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:12:16][350792528704057][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:12:16][350792528704057][836 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.379/209.379/209.379/0.000 ms\n [2025-09-09 01:12:16][350792528704057][836 ms][DEBUG] check_internet: online [2025-09-09 01:12:16][350792528704057][836 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:12:16][350792528704057][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528704057\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7570\"}'\'' -e'"" [2025-09-09 01:12:16][350792528704057][836 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:12:16][350792528704057][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528704057\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7570\"}'\'' -e'"" [2025-09-09 01:12:20][350792528704057][4476 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4511f991-adc5-42a0-859e-c5aa5bbb0871","id":"QR_4511f991-adc5-42a0-859e-c5aa5bbb0871","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:12:20][350792528704057][4632 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-09-09 01:12:20][350792528704057][4632 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-09 01:12:20][350792528704057][4632 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:13:04][352749387295922][0 ms][INFO] === Request start === [2025-09-09 01:13:04][352749387295922][1 ms][DEBUG] START check_scloud [2025-09-09 01:13:04][352749387295922][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:13:05][352749387295922][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 20691 1773 24787492 210432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:13:05][352749387295922][317 ms][DEBUG] targetPkg: running [2025-09-09 01:13:05][352749387295922][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 01:13:05][352749387295922][317 ms][DEBUG] START check_boot_completed [2025-09-09 01:13:05][352749387295922][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:13:05][352749387295922][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 01:13:05][352749387295922][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:13:05][352749387295922][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 01:13:05][352749387295922][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 01:13:05][352749387295922][426 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:13:05][352749387295922][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749387295922\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8831\"}'\'' -e'"" [2025-09-09 01:13:05][352749387295922][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:13:05][352749387295922][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749387295922\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8831\"}'\'' -e'"" [2025-09-09 01:13:10][352749387295922][5299 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f357646-c085-48c9-b666-506989aa3ccb","id":"QR_3f357646-c085-48c9-b666-506989aa3ccb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:13:10][352749387295922][5456 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-09-09 01:13:10][352749387295922][5456 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-09 01:13:10][352749387295922][5456 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:13:13][352749387295922][0 ms][INFO] === Request start === [2025-09-09 01:13:13][352749387295922][1 ms][DEBUG] START check_scloud [2025-09-09 01:13:13][352749387295922][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:13:14][352749387295922][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 20691 1773 24930092 218988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:13:14][352749387295922][321 ms][DEBUG] targetPkg: running [2025-09-09 01:13:14][352749387295922][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 01:13:14][352749387295922][322 ms][DEBUG] START check_boot_completed [2025-09-09 01:13:14][352749387295922][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:13:14][352749387295922][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 01:13:14][352749387295922][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:13:14][352749387295922][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 01:13:14][352749387295922][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 01:13:14][352749387295922][431 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:13:14][352749387295922][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749387295922\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9505\"}'\'' -e'"" [2025-09-09 01:13:14][352749387295922][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:13:14][352749387295922][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749387295922\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9505\"}'\'' -e'"" [2025-09-09 01:13:17][352749387295922][3789 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0f6c613-7735-48ab-8ed0-7a2e92f2b1fd","id":"QR_c0f6c613-7735-48ab-8ed0-7a2e92f2b1fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:13:17][352749387295922][3945 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-09 01:13:17][352749387295922][3945 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-09 01:13:17][352749387295922][3945 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:19:10][351064275054675][1 ms][INFO] === Request start === [2025-09-09 01:19:10][351064275054675][1 ms][DEBUG] START check_scloud [2025-09-09 01:19:10][351064275054675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:19:10][351064275054675][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 20691 1773 25033708 231436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:19:10][351064275054675][297 ms][DEBUG] targetPkg: running [2025-09-09 01:19:10][351064275054675][297 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 01:19:10][351064275054675][297 ms][DEBUG] START check_boot_completed [2025-09-09 01:19:10][351064275054675][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:19:10][351064275054675][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:19:10][351064275054675][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:19:10][351064275054675][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:19:10][351064275054675][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 01:19:10][351064275054675][375 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:19:10][351064275054675][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8686\"}'\'' -e'"" [2025-09-09 01:19:10][351064275054675][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:19:10][351064275054675][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8686\"}'\'' -e'"" [2025-09-09 01:19:14][351064275054675][4452 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 01:19:14][351064275054675][4608 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=115 [2025-09-09 01:19:14][351064275054675][4608 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 01:19:14][351064275054675][4608 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 01:19:15][][0 ms][INFO] === Request start === [2025-09-09 01:19:15][][1 ms][DEBUG] START check_scloud [2025-09-09 01:19:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:19:15][][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 20691 1773 25204792 242156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:19:15][][286 ms][DEBUG] targetPkg: running [2025-09-09 01:19:15][][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-09 01:19:15][][286 ms][DEBUG] START check_boot_completed [2025-09-09 01:19:15][][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:19:15][][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:19:15][][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:19:15][][380 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 01:19:15][][380 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 01:19:15][][380 ms][DEBUG] rawBody.length=1131 [2025-09-09 01:19:15][][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB0NKWTK\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8026\"}'\'' -e'"" [2025-09-09 01:19:15][][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:19:15][][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB0NKWTK\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8026\"}'\'' -e'"" [2025-09-09 01:19:19][][4301 ms][DEBUG] proc_open done in 3921 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 01:19:19][][4301 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-09 01:19:19][][4301 ms][WARN] Detected error: Process with pid 20691 either refused to load frida-agent, or terminated during injectionProcess with pid 20691 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 01:19:19][][4301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 01:19:19][][4599 ms][DEBUG] SU: done in 297 ms; outsystem 2152 1773 12966840 197012 ep_poll 0 S system_server\n [2025-09-09 01:19:19][][4599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 01:19:19][][4738 ms][DEBUG] SU: done in 139 ms; out [2025-09-09 01:19:19][][4738 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 01:19:19][][4738 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 01:19:20][][4863 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 01:19:20][][4863 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 01:19:20][][5035 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 01:19:22][][7050 ms][DEBUG] START check_boot_completed [2025-09-09 01:19:22][][7050 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:19:22][][7097 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 01:19:22][][7097 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:19:22][][7159 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 01:19:22][][7160 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 01:19:25][][10174 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 01:19:25][][10174 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB0NKWTK\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8026\"}'\'' -e'"" [2025-09-09 01:19:28][][13173 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 01:19:28][][13330 ms][DEBUG] proc_open done in 3156 ms; code=255; res.len=115 [2025-09-09 01:19:28][][13330 ms][DEBUG] END runCmdUntilRes#2 in 3156 ms [2025-09-09 01:19:28][][13330 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 01:19:30][351064275054675][0 ms][INFO] === Request start === [2025-09-09 01:19:30][351064275054675][1 ms][DEBUG] START check_scloud [2025-09-09 01:19:30][351064275054675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:19:30][351064275054675][245 ms][DEBUG] SU: done in 245 ms; outu0_a118 22265 1773 23792516 124884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:19:30][351064275054675][245 ms][DEBUG] targetPkg: running [2025-09-09 01:19:30][351064275054675][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 01:19:30][351064275054675][246 ms][DEBUG] START check_boot_completed [2025-09-09 01:19:30][351064275054675][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:19:30][351064275054675][276 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 01:19:30][351064275054675][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:19:30][351064275054675][323 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:19:30][351064275054675][323 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 01:19:30][351064275054675][323 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:19:30][351064275054675][323 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3047\"}'\'' -e'"" [2025-09-09 01:19:30][351064275054675][323 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:19:30][351064275054675][323 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275054675\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3047\"}'\'' -e'"" [2025-09-09 01:19:35][351064275054675][5353 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f46cb4d-1cce-4717-b2f4-ea664b3e861f","id":"QR_8f46cb4d-1cce-4717-b2f4-ea664b3e861f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:19:35][351064275054675][5509 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-09 01:19:35][351064275054675][5509 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-09 01:19:35][351064275054675][5509 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:20:04][356626350573491][0 ms][INFO] === Request start === [2025-09-09 01:20:04][356626350573491][1 ms][DEBUG] START check_scloud [2025-09-09 01:20:04][356626350573491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:20:04][356626350573491][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22265 1773 23887612 139164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:20:04][356626350573491][308 ms][DEBUG] targetPkg: running [2025-09-09 01:20:04][356626350573491][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 01:20:04][356626350573491][308 ms][DEBUG] START check_boot_completed [2025-09-09 01:20:04][356626350573491][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:20:04][356626350573491][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:20:04][356626350573491][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:20:04][356626350573491][387 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 01:20:04][356626350573491][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 01:20:04][356626350573491][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:20:05][356626350573491][511 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2711\nsuccessfulTxPacketsPerSecond: 0.3518940865194687\nretriedTxPackets: 626\nretriedTxPacketsPerSecond: 0.11619144366208872\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2510\nsuccessfulRxPacketsPerSecond: 0.3020977535214307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:20:05][356626350573491][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:20:06][356626350573491][1824 ms][DEBUG] SU: done in 1312 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.586/201.586/201.586/0.000 ms\n [2025-09-09 01:20:06][356626350573491][1824 ms][DEBUG] check_internet: online [2025-09-09 01:20:06][356626350573491][1824 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:20:06][356626350573491][1824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356626350573491\",\"model\":\"SM-F711U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5014\"}'\'' -e'"" [2025-09-09 01:20:06][356626350573491][1824 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:20:06][356626350573491][1824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356626350573491\",\"model\":\"SM-F711U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5014\"}'\'' -e'"" [2025-09-09 01:20:11][356626350573491][6650 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_633d6a2d-d513-4850-9c2f-c14203ff77ac","id":"QR_633d6a2d-d513-4850-9c2f-c14203ff77ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:20:11][356626350573491][6806 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-09 01:20:11][356626350573491][6807 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-09 01:20:11][356626350573491][6807 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:20:14][356626350573491][0 ms][INFO] === Request start === [2025-09-09 01:20:14][356626350573491][1 ms][DEBUG] START check_scloud [2025-09-09 01:20:14][356626350573491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:20:15][356626350573491][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 22265 1773 24046596 150744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:20:15][356626350573491][288 ms][DEBUG] targetPkg: running [2025-09-09 01:20:15][356626350573491][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 01:20:15][356626350573491][288 ms][DEBUG] START check_boot_completed [2025-09-09 01:20:15][356626350573491][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:20:15][356626350573491][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 01:20:15][356626350573491][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:20:15][356626350573491][444 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 01:20:15][356626350573491][444 ms][DEBUG] END check_boot_completed in 156 ms [2025-09-09 01:20:15][356626350573491][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:20:15][356626350573491][600 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2711\nsuccessfulTxPacketsPerSecond: 0.3518940865194687\nretriedTxPackets: 626\nretriedTxPacketsPerSecond: 0.11619144366208872\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2510\nsuccessfulRxPacketsPerSecond: 0.3020977535214307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:20:15][356626350573491][600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:20:15][356626350573491][944 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.873/244.873/244.873/0.000 ms\n [2025-09-09 01:20:15][356626350573491][944 ms][DEBUG] check_internet: online [2025-09-09 01:20:15][356626350573491][944 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:20:15][356626350573491][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356626350573491\",\"model\":\"SM-F711U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7805\"}'\'' -e'"" [2025-09-09 01:20:15][356626350573491][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:20:15][356626350573491][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356626350573491\",\"model\":\"SM-F711U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7805\"}'\'' -e'"" [2025-09-09 01:20:19][356626350573491][4880 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5980dd2-3352-48d6-853d-81b4c5c46e79","id":"QR_c5980dd2-3352-48d6-853d-81b4c5c46e79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:20:19][356626350573491][5036 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-09 01:20:19][356626350573491][5036 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-09 01:20:19][356626350573491][5036 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:25:04][355221175155186][1 ms][INFO] === Request start === [2025-09-09 01:25:04][355221175155186][1 ms][DEBUG] START check_scloud [2025-09-09 01:25:04][355221175155186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:25:04][355221175155186][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 22265 1773 24148180 161740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:25:04][355221175155186][278 ms][DEBUG] targetPkg: running [2025-09-09 01:25:04][355221175155186][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 01:25:04][355221175155186][278 ms][DEBUG] START check_boot_completed [2025-09-09 01:25:04][355221175155186][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:25:04][355221175155186][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:25:04][355221175155186][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:25:04][355221175155186][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:25:04][355221175155186][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 01:25:04][355221175155186][356 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:25:04][355221175155186][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221175155186\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2809\"}'\'' -e'"" [2025-09-09 01:25:04][355221175155186][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:25:04][355221175155186][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221175155186\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2809\"}'\'' -e'"" [2025-09-09 01:25:08][355221175155186][4683 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88b0d012-c512-4035-9250-b0c3a439ec1e","id":"QR_88b0d012-c512-4035-9250-b0c3a439ec1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:25:08][355221175155186][4840 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 01:25:08][355221175155186][4840 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 01:25:08][355221175155186][4840 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:25:11][355221175155186][0 ms][INFO] === Request start === [2025-09-09 01:25:11][355221175155186][1 ms][DEBUG] START check_scloud [2025-09-09 01:25:11][355221175155186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:25:11][355221175155186][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22265 1773 24292828 172592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:25:11][355221175155186][314 ms][DEBUG] targetPkg: running [2025-09-09 01:25:11][355221175155186][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 01:25:11][355221175155186][314 ms][DEBUG] START check_boot_completed [2025-09-09 01:25:11][355221175155186][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:25:11][355221175155186][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 01:25:11][355221175155186][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:25:11][355221175155186][455 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 01:25:11][355221175155186][455 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 01:25:11][355221175155186][455 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:25:11][355221175155186][455 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221175155186\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3298\"}'\'' -e'"" [2025-09-09 01:25:11][355221175155186][455 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:25:11][355221175155186][455 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221175155186\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3298\"}'\'' -e'"" [2025-09-09 01:25:16][355221175155186][5563 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17c58115-37fe-4a20-aff3-7e4c644f1feb","id":"QR_17c58115-37fe-4a20-aff3-7e4c644f1feb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:25:17][355221175155186][5719 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-09 01:25:17][355221175155186][5719 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-09 01:25:17][355221175155186][5719 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:26:04][355035111487754][0 ms][INFO] === Request start === [2025-09-09 01:26:04][355035111487754][1 ms][DEBUG] START check_scloud [2025-09-09 01:26:04][355035111487754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:26:05][355035111487754][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 22265 1773 24435356 184652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:26:05][355035111487754][298 ms][DEBUG] targetPkg: running [2025-09-09 01:26:05][355035111487754][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 01:26:05][355035111487754][298 ms][DEBUG] START check_boot_completed [2025-09-09 01:26:05][355035111487754][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:26:05][355035111487754][343 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 01:26:05][355035111487754][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:26:05][355035111487754][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:26:05][355035111487754][390 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 01:26:05][355035111487754][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:26:05][355035111487754][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2854\nsuccessfulTxPacketsPerSecond: 0.020725961339173447\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.013817307559448965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2623\nsuccessfulRxPacketsPerSecond: 0.013817307559448965\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:26:05][355035111487754][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:26:06][355035111487754][1765 ms][DEBUG] SU: done in 1265 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.817/203.817/203.817/0.000 ms\n [2025-09-09 01:26:06][355035111487754][1765 ms][DEBUG] check_internet: online [2025-09-09 01:26:06][355035111487754][1765 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:26:06][355035111487754][1765 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355035111487754\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2141\"}'\'' -e'"" [2025-09-09 01:26:06][355035111487754][1765 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:26:06][355035111487754][1765 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355035111487754\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2141\"}'\'' -e'"" [2025-09-09 01:26:11][355035111487754][6716 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f18b4aec-8039-462f-a92c-91e1b9e74ed7","id":"QR_f18b4aec-8039-462f-a92c-91e1b9e74ed7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:26:11][355035111487754][6873 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-09 01:26:11][355035111487754][6873 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 01:26:11][355035111487754][6873 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:26:15][355035111487754][0 ms][INFO] === Request start === [2025-09-09 01:26:15][355035111487754][1 ms][DEBUG] START check_scloud [2025-09-09 01:26:15][355035111487754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:26:15][355035111487754][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 22265 1773 24606500 195744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:26:15][355035111487754][301 ms][DEBUG] targetPkg: running [2025-09-09 01:26:15][355035111487754][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 01:26:15][355035111487754][301 ms][DEBUG] START check_boot_completed [2025-09-09 01:26:15][355035111487754][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:26:15][355035111487754][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 01:26:15][355035111487754][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:26:15][355035111487754][425 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 01:26:15][355035111487754][425 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 01:26:15][355035111487754][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 01:26:15][355035111487754][552 ms][DEBUG] SU: done in 127 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2854\nsuccessfulTxPacketsPerSecond: 0.020725961339173447\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.013817307559448965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2623\nsuccessfulRxPacketsPerSecond: 0.013817307559448965\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 01:26:15][355035111487754][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 01:26:16][355035111487754][925 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.967/252.967/252.967/0.000 ms\n [2025-09-09 01:26:16][355035111487754][926 ms][DEBUG] check_internet: online [2025-09-09 01:26:16][355035111487754][926 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:26:16][355035111487754][926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355035111487754\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9425\"}'\'' -e'"" [2025-09-09 01:26:16][355035111487754][926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:26:16][355035111487754][926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355035111487754\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9425\"}'\'' -e'"" [2025-09-09 01:26:20][355035111487754][5018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70344a33-a008-4f73-97db-aeccb8371f1d","id":"QR_70344a33-a008-4f73-97db-aeccb8371f1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:26:20][355035111487754][5174 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-09 01:26:20][355035111487754][5174 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-09-09 01:26:20][355035111487754][5174 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:31:03][351089965965518][1 ms][INFO] === Request start === [2025-09-09 01:31:03][351089965965518][1 ms][DEBUG] START check_scloud [2025-09-09 01:31:03][351089965965518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:31:03][351089965965518][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 22265 1773 24730404 208108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:31:03][351089965965518][296 ms][DEBUG] targetPkg: running [2025-09-09 01:31:03][351089965965518][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 01:31:03][351089965965518][296 ms][DEBUG] START check_boot_completed [2025-09-09 01:31:03][351089965965518][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:31:03][351089965965518][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 01:31:03][351089965965518][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:31:03][351089965965518][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 01:31:03][351089965965518][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 01:31:03][351089965965518][405 ms][DEBUG] rawBody.length=1149 [2025-09-09 01:31:03][351089965965518][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089965965518\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1123\"}'\'' -e'"" [2025-09-09 01:31:03][351089965965518][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:31:03][351089965965518][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089965965518\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1123\"}'\'' -e'"" [2025-09-09 01:31:08][351089965965518][4889 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37dffe0e-240a-404a-a82c-0032525dfcab","id":"QR_37dffe0e-240a-404a-a82c-0032525dfcab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:31:08][351089965965518][5045 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 01:31:08][351089965965518][5045 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-09 01:31:08][351089965965518][5045 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:31:10][351089965965518][1 ms][INFO] === Request start === [2025-09-09 01:31:10][351089965965518][1 ms][DEBUG] START check_scloud [2025-09-09 01:31:10][351089965965518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:31:10][351089965965518][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 22265 1773 24888484 218696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:31:10][351089965965518][292 ms][DEBUG] targetPkg: running [2025-09-09 01:31:10][351089965965518][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 01:31:10][351089965965518][292 ms][DEBUG] START check_boot_completed [2025-09-09 01:31:10][351089965965518][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:31:10][351089965965518][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 01:31:10][351089965965518][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:31:10][351089965965518][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:31:10][351089965965518][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 01:31:10][351089965965518][385 ms][DEBUG] rawBody.length=1159 [2025-09-09 01:31:10][351089965965518][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089965965518\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8998\"}'\'' -e'"" [2025-09-09 01:31:10][351089965965518][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:31:10][351089965965518][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089965965518\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8998\"}'\'' -e'"" [2025-09-09 01:31:16][351089965965518][5556 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e15e77e-392e-4756-827c-7736e5a4068b","id":"QR_6e15e77e-392e-4756-827c-7736e5a4068b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:31:16][351089965965518][5712 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-09 01:31:16][351089965965518][5712 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-09 01:31:16][351089965965518][5712 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:47:04][354818251330483][1 ms][INFO] === Request start === [2025-09-09 01:47:04][354818251330483][1 ms][DEBUG] START check_scloud [2025-09-09 01:47:04][354818251330483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:47:04][354818251330483][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 22265 1773 24974488 219428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:47:04][354818251330483][321 ms][DEBUG] targetPkg: running [2025-09-09 01:47:04][354818251330483][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 01:47:04][354818251330483][321 ms][DEBUG] START check_boot_completed [2025-09-09 01:47:04][354818251330483][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:47:04][354818251330483][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:47:04][354818251330483][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:47:04][354818251330483][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 01:47:04][354818251330483][401 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 01:47:04][354818251330483][401 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:47:04][354818251330483][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818251330483\",\"model\":\"SM-S901W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-09-09 01:47:04][354818251330483][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:47:04][354818251330483][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818251330483\",\"model\":\"SM-S901W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-09-09 01:47:11][354818251330483][6804 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78f9d6da-cca9-42ce-86d5-43f6aaef47b6","id":"QR_78f9d6da-cca9-42ce-86d5-43f6aaef47b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:47:11][354818251330483][6961 ms][DEBUG] proc_open done in 6560 ms; code=255; res.len=3343 [2025-09-09 01:47:11][354818251330483][6961 ms][DEBUG] END runCmdUntilRes#1 in 6560 ms [2025-09-09 01:47:11][354818251330483][6961 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:47:14][354818251330483][0 ms][INFO] === Request start === [2025-09-09 01:47:14][354818251330483][0 ms][DEBUG] START check_scloud [2025-09-09 01:47:14][354818251330483][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:47:15][354818251330483][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 22265 1773 25124208 163780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:47:15][354818251330483][316 ms][DEBUG] targetPkg: running [2025-09-09 01:47:15][354818251330483][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 01:47:15][354818251330483][316 ms][DEBUG] START check_boot_completed [2025-09-09 01:47:15][354818251330483][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:47:15][354818251330483][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 01:47:15][354818251330483][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:47:15][354818251330483][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:47:15][354818251330483][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 01:47:15][354818251330483][410 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:47:15][354818251330483][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818251330483\",\"model\":\"SM-S901W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9528\"}'\'' -e'"" [2025-09-09 01:47:15][354818251330483][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:47:15][354818251330483][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818251330483\",\"model\":\"SM-S901W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9528\"}'\'' -e'"" [2025-09-09 01:47:19][354818251330483][4534 ms][DEBUG] proc_open done in 4124 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 01:47:19][354818251330483][4534 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-09 01:47:19][354818251330483][4534 ms][WARN] Detected error: Process with pid 22265 either refused to load frida-agent, or terminated during injectionProcess with pid 22265 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 01:47:19][354818251330483][4534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 01:47:19][354818251330483][4815 ms][DEBUG] SU: done in 281 ms; outsystem 2152 1773 12970488 205916 ep_poll 0 S system_server\n [2025-09-09 01:47:19][354818251330483][4815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 01:47:19][354818251330483][4956 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 01:47:19][354818251330483][4956 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 01:47:19][354818251330483][4956 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 01:47:19][354818251330483][5096 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 01:47:19][354818251330483][5096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 01:47:20][354818251330483][5330 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 01:47:22][354818251330483][7345 ms][DEBUG] START check_boot_completed [2025-09-09 01:47:22][354818251330483][7346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:47:22][354818251330483][7392 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 01:47:22][354818251330483][7392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:47:22][354818251330483][7440 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 01:47:22][354818251330483][7440 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 01:47:25][354818251330483][10454 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 01:47:25][354818251330483][10454 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818251330483\",\"model\":\"SM-S901W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9528\"}'\'' -e'"" [2025-09-09 01:47:29][354818251330483][14297 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_895b0f71-3afb-47a9-ac6c-565d615d7f46","id":"QR_895b0f71-3afb-47a9-ac6c-565d615d7f46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:47:29][354818251330483][14453 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-09 01:47:29][354818251330483][14453 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-09-09 01:47:29][354818251330483][14454 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:51:03][351978521479149][1 ms][INFO] === Request start === [2025-09-09 01:51:03][351978521479149][1 ms][DEBUG] START check_scloud [2025-09-09 01:51:03][351978521479149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:51:03][351978521479149][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 24814 1773 23779816 128384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:51:03][351978521479149][259 ms][DEBUG] targetPkg: running [2025-09-09 01:51:03][351978521479149][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 01:51:03][351978521479149][260 ms][DEBUG] START check_boot_completed [2025-09-09 01:51:03][351978521479149][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:51:03][351978521479149][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 01:51:03][351978521479149][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:51:03][351978521479149][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:51:03][351978521479149][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 01:51:03][351978521479149][337 ms][DEBUG] rawBody.length=1150 [2025-09-09 01:51:03][351978521479149][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521479149\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3369\"}'\'' -e'"" [2025-09-09 01:51:03][351978521479149][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:51:03][351978521479149][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521479149\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3369\"}'\'' -e'"" [2025-09-09 01:51:08][351978521479149][4696 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5057fbf-cb9d-49af-b93c-fe177541c54a","id":"QR_a5057fbf-cb9d-49af-b93c-fe177541c54a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:51:08][351978521479149][4852 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-09 01:51:08][351978521479149][4852 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-09 01:51:08][351978521479149][4852 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 01:51:10][351978521479149][0 ms][INFO] === Request start === [2025-09-09 01:51:10][351978521479149][1 ms][DEBUG] START check_scloud [2025-09-09 01:51:10][351978521479149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 01:51:10][351978521479149][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 24814 1773 23959152 139372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 01:51:10][351978521479149][319 ms][DEBUG] targetPkg: running [2025-09-09 01:51:10][351978521479149][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 01:51:10][351978521479149][319 ms][DEBUG] START check_boot_completed [2025-09-09 01:51:10][351978521479149][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 01:51:10][351978521479149][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 01:51:10][351978521479149][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 01:51:10][351978521479149][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 01:51:10][351978521479149][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 01:51:10][351978521479149][413 ms][DEBUG] rawBody.length=1160 [2025-09-09 01:51:10][351978521479149][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521479149\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VFJ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4791\"}'\'' -e'"" [2025-09-09 01:51:10][351978521479149][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 01:51:10][351978521479149][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521479149\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VFJ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4791\"}'\'' -e'"" [2025-09-09 01:51:16][351978521479149][5755 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d19ee8a-f45a-412a-82bc-2422ea51fe5b","id":"QR_6d19ee8a-f45a-412a-82bc-2422ea51fe5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 01:51:16][351978521479149][5911 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-09 01:51:16][351978521479149][5911 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-09 01:51:16][351978521479149][5911 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 02:08:04][354291425325765][1 ms][INFO] === Request start === [2025-09-09 02:08:04][354291425325765][1 ms][DEBUG] START check_scloud [2025-09-09 02:08:04][354291425325765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 02:08:04][354291425325765][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 24814 1773 24039012 151168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 02:08:04][354291425325765][331 ms][DEBUG] targetPkg: running [2025-09-09 02:08:04][354291425325765][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-09 02:08:04][354291425325765][331 ms][DEBUG] START check_boot_completed [2025-09-09 02:08:04][354291425325765][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 02:08:04][354291425325765][378 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 02:08:04][354291425325765][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 02:08:05][354291425325765][425 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 02:08:05][354291425325765][425 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 02:08:05][354291425325765][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 02:08:05][354291425325765][565 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3417\nsuccessfulTxPacketsPerSecond: 0.013293011199361935\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.013293011199361935\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3128\nsuccessfulRxPacketsPerSecond: 0.013293011199361935\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 02:08:05][354291425325765][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 02:08:06][354291425325765][1784 ms][DEBUG] SU: done in 1219 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.879/199.879/199.879/0.000 ms\n [2025-09-09 02:08:06][354291425325765][1784 ms][DEBUG] check_internet: online [2025-09-09 02:08:06][354291425325765][1784 ms][DEBUG] rawBody.length=1160 [2025-09-09 02:08:06][354291425325765][1784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425325765\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6550\"}'\'' -e'"" [2025-09-09 02:08:06][354291425325765][1784 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 02:08:06][354291425325765][1784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425325765\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6550\"}'\'' -e'"" [2025-09-09 02:08:11][354291425325765][6939 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0e0506d-54f7-4b85-8018-ac078f9e5daf","id":"QR_d0e0506d-54f7-4b85-8018-ac078f9e5daf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 02:08:11][354291425325765][7095 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-09 02:08:11][354291425325765][7095 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 02:08:11][354291425325765][7095 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 02:08:15][354291425325765][0 ms][INFO] === Request start === [2025-09-09 02:08:15][354291425325765][1 ms][DEBUG] START check_scloud [2025-09-09 02:08:15][354291425325765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 02:08:15][354291425325765][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 24814 1773 24224688 163192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 02:08:15][354291425325765][325 ms][DEBUG] targetPkg: running [2025-09-09 02:08:15][354291425325765][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-09 02:08:15][354291425325765][325 ms][DEBUG] START check_boot_completed [2025-09-09 02:08:15][354291425325765][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 02:08:15][354291425325765][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 02:08:15][354291425325765][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 02:08:15][354291425325765][420 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 02:08:15][354291425325765][420 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 02:08:15][354291425325765][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 02:08:15][354291425325765][559 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3417\nsuccessfulTxPacketsPerSecond: 0.013293011199361935\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.013293011199361935\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3128\nsuccessfulRxPacketsPerSecond: 0.013293011199361935\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 02:08:15][354291425325765][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 02:08:16][354291425325765][919 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.611/219.611/219.611/0.000 ms\n [2025-09-09 02:08:16][354291425325765][919 ms][DEBUG] check_internet: online [2025-09-09 02:08:16][354291425325765][919 ms][DEBUG] rawBody.length=1150 [2025-09-09 02:08:16][354291425325765][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425325765\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3614\"}'\'' -e'"" [2025-09-09 02:08:16][354291425325765][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 02:08:16][354291425325765][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425325765\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3614\"}'\'' -e'"" [2025-09-09 02:08:20][354291425325765][4871 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca8bf126-6361-43a9-9950-9e1d93f16f8b","id":"QR_ca8bf126-6361-43a9-9950-9e1d93f16f8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 02:08:20][354291425325765][5027 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-09 02:08:20][354291425325765][5027 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-09 02:08:20][354291425325765][5027 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 02:38:08][350824194705405][1 ms][INFO] === Request start === [2025-09-09 02:38:08][350824194705405][1 ms][DEBUG] START check_scloud [2025-09-09 02:38:08][350824194705405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 02:38:08][350824194705405][326 ms][DEBUG] SU: done in 324 ms; outu0_a118 24814 1773 24333156 135584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 02:38:08][350824194705405][326 ms][DEBUG] targetPkg: running [2025-09-09 02:38:08][350824194705405][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-09 02:38:08][350824194705405][326 ms][DEBUG] START check_boot_completed [2025-09-09 02:38:08][350824194705405][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 02:38:08][350824194705405][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 02:38:08][350824194705405][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 02:38:08][350824194705405][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 02:38:08][350824194705405][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 02:38:08][350824194705405][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 02:38:08][350824194705405][529 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3610\nsuccessfulTxPacketsPerSecond: 0.1419803679872992\nretriedTxPackets: 931\nretriedTxPacketsPerSecond: 0.05485605126782015\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3307\nsuccessfulRxPacketsPerSecond: 0.13229988835180154\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 02:38:08][350824194705405][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 02:38:10][350824194705405][1794 ms][DEBUG] SU: done in 1265 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.158/199.158/199.158/0.000 ms\n [2025-09-09 02:38:10][350824194705405][1794 ms][DEBUG] check_internet: online [2025-09-09 02:38:10][350824194705405][1794 ms][DEBUG] rawBody.length=1150 [2025-09-09 02:38:10][350824194705405][1794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824194705405\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9388\"}'\'' -e'"" [2025-09-09 02:38:10][350824194705405][1794 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 02:38:10][350824194705405][1794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824194705405\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9388\"}'\'' -e'"" [2025-09-09 02:38:13][350824194705405][5215 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6c991cc-5ee0-492d-8265-6a65cacc195a","id":"QR_f6c991cc-5ee0-492d-8265-6a65cacc195a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 02:38:13][350824194705405][5371 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-09 02:38:13][350824194705405][5371 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 02:38:13][350824194705405][5371 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:03:03][357633720053245][1 ms][INFO] === Request start === [2025-09-09 03:03:03][357633720053245][1 ms][DEBUG] START check_scloud [2025-09-09 03:03:03][357633720053245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:03:03][357633720053245][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 24814 1773 24453000 132976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:03:03][357633720053245][314 ms][DEBUG] targetPkg: running [2025-09-09 03:03:03][357633720053245][315 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 03:03:03][357633720053245][315 ms][DEBUG] START check_boot_completed [2025-09-09 03:03:03][357633720053245][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:03:04][357633720053245][345 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 03:03:04][357633720053245][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:03:04][357633720053245][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:03:04][357633720053245][392 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 03:03:04][357633720053245][392 ms][DEBUG] rawBody.length=1149 [2025-09-09 03:03:04][357633720053245][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357633720053245\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9842\"}'\'' -e'"" [2025-09-09 03:03:04][357633720053245][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:03:04][357633720053245][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357633720053245\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9842\"}'\'' -e'"" [2025-09-09 03:03:08][357633720053245][5031 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8625fc5f-00b8-4651-b93b-963dfe353ad3","id":"QR_8625fc5f-00b8-4651-b93b-963dfe353ad3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:03:08][357633720053245][5187 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-09 03:03:08][357633720053245][5187 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-09 03:03:08][357633720053245][5187 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:03:11][357633720053245][0 ms][INFO] === Request start === [2025-09-09 03:03:11][357633720053245][1 ms][DEBUG] START check_scloud [2025-09-09 03:03:11][357633720053245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:03:11][357633720053245][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 24814 1773 24613084 145100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:03:11][357633720053245][254 ms][DEBUG] targetPkg: running [2025-09-09 03:03:11][357633720053245][254 ms][DEBUG] END check_scloud in 254 ms [2025-09-09 03:03:11][357633720053245][254 ms][DEBUG] START check_boot_completed [2025-09-09 03:03:11][357633720053245][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:03:11][357633720053245][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 03:03:11][357633720053245][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:03:11][357633720053245][363 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 03:03:11][357633720053245][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 03:03:11][357633720053245][363 ms][DEBUG] rawBody.length=1159 [2025-09-09 03:03:11][357633720053245][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357633720053245\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2615\"}'\'' -e'"" [2025-09-09 03:03:11][357633720053245][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:03:11][357633720053245][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357633720053245\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2615\"}'\'' -e'"" [2025-09-09 03:03:16][357633720053245][5628 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e889917-e88f-4f83-b73d-b74a9b995fd4","id":"QR_0e889917-e88f-4f83-b73d-b74a9b995fd4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:03:17][357633720053245][5784 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-09 03:03:17][357633720053245][5784 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-09 03:03:17][357633720053245][5784 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:25:03][359350290657580][1 ms][INFO] === Request start === [2025-09-09 03:25:03][359350290657580][1 ms][DEBUG] START check_scloud [2025-09-09 03:25:03][359350290657580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:25:04][359350290657580][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 24814 1773 24740176 135632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:25:04][359350290657580][308 ms][DEBUG] targetPkg: running [2025-09-09 03:25:04][359350290657580][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 03:25:04][359350290657580][308 ms][DEBUG] START check_boot_completed [2025-09-09 03:25:04][359350290657580][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:25:04][359350290657580][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 03:25:04][359350290657580][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:25:04][359350290657580][448 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 03:25:04][359350290657580][448 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 03:25:04][359350290657580][448 ms][DEBUG] rawBody.length=1149 [2025-09-09 03:25:04][359350290657580][448 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359350290657580\",\"model\":\"SM-T975\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8503\"}'\'' -e'"" [2025-09-09 03:25:04][359350290657580][449 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:25:04][359350290657580][449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359350290657580\",\"model\":\"SM-T975\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8503\"}'\'' -e'"" [2025-09-09 03:25:09][359350290657580][5197 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b80a145-7142-4500-9a8f-fa9d62ac7645","id":"QR_0b80a145-7142-4500-9a8f-fa9d62ac7645","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:25:09][359350290657580][5353 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 03:25:09][359350290657580][5353 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-09 03:25:09][359350290657580][5353 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:25:11][359350290657580][0 ms][INFO] === Request start === [2025-09-09 03:25:11][359350290657580][1 ms][DEBUG] START check_scloud [2025-09-09 03:25:11][359350290657580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:25:11][359350290657580][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 24814 1773 24924836 145256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:25:11][359350290657580][311 ms][DEBUG] targetPkg: running [2025-09-09 03:25:11][359350290657580][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 03:25:11][359350290657580][311 ms][DEBUG] START check_boot_completed [2025-09-09 03:25:11][359350290657580][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:25:11][359350290657580][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:25:11][359350290657580][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:25:12][359350290657580][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:25:12][359350290657580][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 03:25:12][359350290657580][404 ms][DEBUG] rawBody.length=1159 [2025-09-09 03:25:12][359350290657580][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359350290657580\",\"model\":\"SM-T975\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3028\"}'\'' -e'"" [2025-09-09 03:25:12][359350290657580][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:25:12][359350290657580][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359350290657580\",\"model\":\"SM-T975\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3028\"}'\'' -e'"" [2025-09-09 03:25:17][359350290657580][5543 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6818377-a981-4545-ad84-3b72d0f6881c","id":"QR_f6818377-a981-4545-ad84-3b72d0f6881c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:25:17][359350290657580][5700 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 03:25:17][359350290657580][5700 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-09 03:25:17][359350290657580][5700 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:25:22][359797451208068][0 ms][INFO] === Request start === [2025-09-09 03:25:22][359797451208068][1 ms][DEBUG] START check_scloud [2025-09-09 03:25:22][359797451208068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:25:22][359797451208068][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 24814 1773 25046052 144328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:25:22][359797451208068][305 ms][DEBUG] targetPkg: running [2025-09-09 03:25:22][359797451208068][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 03:25:22][359797451208068][305 ms][DEBUG] START check_boot_completed [2025-09-09 03:25:22][359797451208068][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:25:23][359797451208068][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:25:23][359797451208068][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:25:23][359797451208068][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:25:23][359797451208068][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 03:25:23][359797451208068][398 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:25:23][359797451208068][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451208068\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1201\"}'\'' -e'"" [2025-09-09 03:25:23][359797451208068][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:25:23][359797451208068][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451208068\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1201\"}'\'' -e'"" [2025-09-09 03:25:27][359797451208068][5147 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_674ff81e-a1a4-4c13-904a-3d34789037a5","id":"QR_674ff81e-a1a4-4c13-904a-3d34789037a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:25:27][359797451208068][5303 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 03:25:27][359797451208068][5303 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 03:25:27][359797451208068][5303 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:25:31][359797451208068][0 ms][INFO] === Request start === [2025-09-09 03:25:31][359797451208068][1 ms][DEBUG] START check_scloud [2025-09-09 03:25:31][359797451208068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:25:31][359797451208068][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 24814 1773 25174220 155372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:25:31][359797451208068][298 ms][DEBUG] targetPkg: running [2025-09-09 03:25:31][359797451208068][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 03:25:31][359797451208068][298 ms][DEBUG] START check_boot_completed [2025-09-09 03:25:31][359797451208068][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:25:31][359797451208068][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 03:25:31][359797451208068][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:25:31][359797451208068][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 03:25:31][359797451208068][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 03:25:31][359797451208068][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:25:31][359797451208068][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451208068\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1967\"}'\'' -e'"" [2025-09-09 03:25:31][359797451208068][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:25:31][359797451208068][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451208068\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1967\"}'\'' -e'"" [2025-09-09 03:25:36][359797451208068][4890 ms][DEBUG] proc_open done in 4483 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 03:25:36][359797451208068][4890 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 03:25:36][359797451208068][4890 ms][WARN] Detected error: Process with pid 24814 either refused to load frida-agent, or terminated during injectionProcess with pid 24814 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 03:25:36][359797451208068][4890 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 03:25:36][359797451208068][5172 ms][DEBUG] SU: done in 281 ms; outsystem 2152 1773 12988908 199312 ep_poll 0 S system_server\n [2025-09-09 03:25:36][359797451208068][5172 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 03:25:36][359797451208068][5312 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 03:25:36][359797451208068][5312 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 03:25:36][359797451208068][5312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 03:25:36][359797451208068][5437 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 03:25:36][359797451208068][5437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 03:25:37][359797451208068][5720 ms][DEBUG] SU: done in 283 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 03:25:39][359797451208068][7733 ms][DEBUG] START check_boot_completed [2025-09-09 03:25:39][359797451208068][7733 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:25:39][359797451208068][7780 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 03:25:39][359797451208068][7780 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:25:39][359797451208068][7828 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 03:25:39][359797451208068][7828 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 03:25:42][359797451208068][10842 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 03:25:42][359797451208068][10842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797451208068\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1967\"}'\'' -e'"" [2025-09-09 03:25:45][359797451208068][14138 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f8dc8b9-a9f7-47fe-9aed-4847f5c1f377","id":"QR_2f8dc8b9-a9f7-47fe-9aed-4847f5c1f377","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:25:45][359797451208068][14294 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-09 03:25:45][359797451208068][14294 ms][DEBUG] END runCmdUntilRes#2 in 3452 ms [2025-09-09 03:25:45][359797451208068][14294 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:28:05][353138602116023][1 ms][INFO] === Request start === [2025-09-09 03:28:05][353138602116023][1 ms][DEBUG] START check_scloud [2025-09-09 03:28:05][353138602116023][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:28:05][353138602116023][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 29777 1773 23758796 127996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:28:05][353138602116023][318 ms][DEBUG] targetPkg: running [2025-09-09 03:28:05][353138602116023][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 03:28:05][353138602116023][318 ms][DEBUG] START check_boot_completed [2025-09-09 03:28:05][353138602116023][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:28:05][353138602116023][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 03:28:05][353138602116023][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:28:05][353138602116023][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:28:05][353138602116023][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 03:28:05][353138602116023][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 03:28:05][353138602116023][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4075\nsuccessfulTxPacketsPerSecond: 0.9116172383879079\nretriedTxPackets: 1064\nretriedTxPacketsPerSecond: 0.18379379806207818\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3778\nsuccessfulRxPacketsPerSecond: 1.0071900133801885\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 03:28:05][353138602116023][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 03:28:06][353138602116023][1802 ms][DEBUG] SU: done in 1281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.530/201.530/201.530/0.000 ms\n [2025-09-09 03:28:06][353138602116023][1802 ms][DEBUG] check_internet: online [2025-09-09 03:28:06][353138602116023][1803 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:28:06][353138602116023][1803 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353138602116023\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2599\"}'\'' -e'"" [2025-09-09 03:28:06][353138602116023][1803 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:28:06][353138602116023][1803 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353138602116023\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2599\"}'\'' -e'"" [2025-09-09 03:28:12][353138602116023][7051 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd922393-afcd-48d1-a7ab-8d4dfe5f26e1","id":"QR_dd922393-afcd-48d1-a7ab-8d4dfe5f26e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:28:12][353138602116023][7207 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-09 03:28:12][353138602116023][7207 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-09 03:28:12][353138602116023][7207 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:28:15][353138602116023][0 ms][INFO] === Request start === [2025-09-09 03:28:15][353138602116023][1 ms][DEBUG] START check_scloud [2025-09-09 03:28:15][353138602116023][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:28:16][353138602116023][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 29777 1773 23884884 138728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:28:16][353138602116023][287 ms][DEBUG] targetPkg: running [2025-09-09 03:28:16][353138602116023][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 03:28:16][353138602116023][287 ms][DEBUG] START check_boot_completed [2025-09-09 03:28:16][353138602116023][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:28:16][353138602116023][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:28:16][353138602116023][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:28:16][353138602116023][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:28:16][353138602116023][380 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 03:28:16][353138602116023][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 03:28:16][353138602116023][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4075\nsuccessfulTxPacketsPerSecond: 0.9116172383879079\nretriedTxPackets: 1064\nretriedTxPacketsPerSecond: 0.18379379806207818\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3778\nsuccessfulRxPacketsPerSecond: 1.0071900133801885\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 03:28:16][353138602116023][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 03:28:16][353138602116023][833 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.903/228.903/228.903/0.000 ms\n [2025-09-09 03:28:16][353138602116023][833 ms][DEBUG] check_internet: online [2025-09-09 03:28:16][353138602116023][833 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:28:16][353138602116023][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353138602116023\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1769\"}'\'' -e'"" [2025-09-09 03:28:16][353138602116023][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:28:16][353138602116023][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353138602116023\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1769\"}'\'' -e'"" [2025-09-09 03:28:20][353138602116023][4535 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34bdb35a-3fc6-437c-93bf-4fe9c8c66681","id":"QR_34bdb35a-3fc6-437c-93bf-4fe9c8c66681","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:28:20][353138602116023][4691 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-09 03:28:20][353138602116023][4691 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 03:28:20][353138602116023][4691 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:37:04][351007062056197][1 ms][INFO] === Request start === [2025-09-09 03:37:04][351007062056197][1 ms][DEBUG] START check_scloud [2025-09-09 03:37:04][351007062056197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:37:04][351007062056197][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 29777 1773 23987272 150696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:37:04][351007062056197][313 ms][DEBUG] targetPkg: running [2025-09-09 03:37:04][351007062056197][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 03:37:04][351007062056197][313 ms][DEBUG] START check_boot_completed [2025-09-09 03:37:04][351007062056197][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:37:04][351007062056197][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 03:37:04][351007062056197][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:37:04][351007062056197][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:37:04][351007062056197][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 03:37:04][351007062056197][391 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:37:04][351007062056197][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062056197\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5362\"}'\'' -e'"" [2025-09-09 03:37:04][351007062056197][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:37:04][351007062056197][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062056197\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5362\"}'\'' -e'"" [2025-09-09 03:37:10][351007062056197][6374 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d8de1c3-331b-43c0-9b41-5d54bcd0f062","id":"QR_4d8de1c3-331b-43c0-9b41-5d54bcd0f062","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:37:11][351007062056197][6530 ms][DEBUG] proc_open done in 6139 ms; code=255; res.len=3343 [2025-09-09 03:37:11][351007062056197][6530 ms][DEBUG] END runCmdUntilRes#1 in 6139 ms [2025-09-09 03:37:11][351007062056197][6530 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:37:14][351007062056197][0 ms][INFO] === Request start === [2025-09-09 03:37:14][351007062056197][1 ms][DEBUG] START check_scloud [2025-09-09 03:37:14][351007062056197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:37:15][351007062056197][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 29777 1773 24190356 161796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:37:15][351007062056197][337 ms][DEBUG] targetPkg: running [2025-09-09 03:37:15][351007062056197][337 ms][DEBUG] END check_scloud in 336 ms [2025-09-09 03:37:15][351007062056197][337 ms][DEBUG] START check_boot_completed [2025-09-09 03:37:15][351007062056197][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:37:15][351007062056197][384 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:37:15][351007062056197][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:37:15][351007062056197][430 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:37:15][351007062056197][430 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 03:37:15][351007062056197][430 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:37:15][351007062056197][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062056197\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7060\"}'\'' -e'"" [2025-09-09 03:37:15][351007062056197][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:37:15][351007062056197][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062056197\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7060\"}'\'' -e'"" [2025-09-09 03:37:19][351007062056197][4289 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acf30a3a-fda3-4d59-94a7-5dc5bad1c0b5","id":"QR_acf30a3a-fda3-4d59-94a7-5dc5bad1c0b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:37:19][351007062056197][4445 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-09-09 03:37:19][351007062056197][4445 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-09 03:37:19][351007062056197][4445 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:39:05][352218222203749][1 ms][INFO] === Request start === [2025-09-09 03:39:05][352218222203749][1 ms][DEBUG] START check_scloud [2025-09-09 03:39:05][352218222203749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:39:05][352218222203749][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 29777 1773 24283668 172472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:39:05][352218222203749][315 ms][DEBUG] targetPkg: running [2025-09-09 03:39:05][352218222203749][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 03:39:05][352218222203749][315 ms][DEBUG] START check_boot_completed [2025-09-09 03:39:05][352218222203749][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:39:05][352218222203749][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 03:39:05][352218222203749][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:39:05][352218222203749][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 03:39:05][352218222203749][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 03:39:05][352218222203749][424 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:39:05][352218222203749][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352218222203749\",\"model\":\"SM-F946W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4089\"}'\'' -e'"" [2025-09-09 03:39:05][352218222203749][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:39:05][352218222203749][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352218222203749\",\"model\":\"SM-F946W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4089\"}'\'' -e'"" [2025-09-09 03:39:11][352218222203749][6423 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86bb4e1a-cfca-4ec8-a33b-9194d73da219","id":"QR_86bb4e1a-cfca-4ec8-a33b-9194d73da219","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:39:11][352218222203749][6579 ms][DEBUG] proc_open done in 6155 ms; code=255; res.len=3343 [2025-09-09 03:39:11][352218222203749][6579 ms][DEBUG] END runCmdUntilRes#1 in 6155 ms [2025-09-09 03:39:11][352218222203749][6579 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:39:15][352218222203749][0 ms][INFO] === Request start === [2025-09-09 03:39:15][352218222203749][1 ms][DEBUG] START check_scloud [2025-09-09 03:39:15][352218222203749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:39:15][352218222203749][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 29777 1773 24466716 176108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:39:15][352218222203749][273 ms][DEBUG] targetPkg: running [2025-09-09 03:39:15][352218222203749][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 03:39:15][352218222203749][273 ms][DEBUG] START check_boot_completed [2025-09-09 03:39:15][352218222203749][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:39:15][352218222203749][318 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 03:39:15][352218222203749][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:39:15][352218222203749][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:39:15][352218222203749][365 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 03:39:15][352218222203749][365 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:39:15][352218222203749][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352218222203749\",\"model\":\"SM-F946W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7531\"}'\'' -e'"" [2025-09-09 03:39:15][352218222203749][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:39:15][352218222203749][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352218222203749\",\"model\":\"SM-F946W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7531\"}'\'' -e'"" [2025-09-09 03:39:19][352218222203749][4395 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26d5bc95-1019-4c97-b83e-8e11f9f8fea3","id":"QR_26d5bc95-1019-4c97-b83e-8e11f9f8fea3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:39:19][352218222203749][4551 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-09 03:39:19][352218222203749][4551 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-09 03:39:19][352218222203749][4551 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:44:03][350637542482307][1 ms][INFO] === Request start === [2025-09-09 03:44:03][350637542482307][1 ms][DEBUG] START check_scloud [2025-09-09 03:44:03][350637542482307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:44:03][350637542482307][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 29777 1773 24612316 175460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:44:03][350637542482307][304 ms][DEBUG] targetPkg: running [2025-09-09 03:44:03][350637542482307][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 03:44:03][350637542482307][304 ms][DEBUG] START check_boot_completed [2025-09-09 03:44:03][350637542482307][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:44:03][350637542482307][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 03:44:03][350637542482307][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:44:03][350637542482307][383 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 03:44:03][350637542482307][383 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 03:44:03][350637542482307][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 03:44:04][350637542482307][507 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4333\nsuccessfulTxPacketsPerSecond: 0.43889312592635227\nretriedTxPackets: 1152\nretriedTxPacketsPerSecond: 0.1474968701883643\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.3921258256227246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 03:44:04][350637542482307][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 03:44:05][350637542482307][1836 ms][DEBUG] SU: done in 1329 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.343/199.343/199.343/0.000 ms\n [2025-09-09 03:44:05][350637542482307][1836 ms][DEBUG] check_internet: online [2025-09-09 03:44:05][350637542482307][1836 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:44:05][350637542482307][1836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542482307\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6455\"}'\'' -e'"" [2025-09-09 03:44:05][350637542482307][1837 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:44:05][350637542482307][1837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542482307\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6455\"}'\'' -e'"" [2025-09-09 03:44:09][350637542482307][5693 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6bc165f-2c70-4841-a2fc-2cddb726ae1c","id":"QR_b6bc165f-2c70-4841-a2fc-2cddb726ae1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:44:09][350637542482307][5850 ms][DEBUG] proc_open done in 4013 ms; code=255; res.len=3343 [2025-09-09 03:44:09][350637542482307][5850 ms][DEBUG] END runCmdUntilRes#1 in 4013 ms [2025-09-09 03:44:09][350637542482307][5850 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:44:11][350637542482307][0 ms][INFO] === Request start === [2025-09-09 03:44:11][350637542482307][1 ms][DEBUG] START check_scloud [2025-09-09 03:44:11][350637542482307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:44:11][350637542482307][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 29777 1773 24781412 187260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:44:11][350637542482307][296 ms][DEBUG] targetPkg: running [2025-09-09 03:44:11][350637542482307][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 03:44:11][350637542482307][296 ms][DEBUG] START check_boot_completed [2025-09-09 03:44:11][350637542482307][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:44:12][350637542482307][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 03:44:12][350637542482307][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:44:12][350637542482307][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:44:12][350637542482307][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 03:44:12][350637542482307][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 03:44:12][350637542482307][483 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4333\nsuccessfulTxPacketsPerSecond: 0.43889312592635227\nretriedTxPackets: 1152\nretriedTxPacketsPerSecond: 0.1474968701883643\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.3921258256227246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 03:44:12][350637542482307][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 03:44:12][350637542482307][842 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.951/232.951/232.951/0.000 ms\n [2025-09-09 03:44:12][350637542482307][842 ms][DEBUG] check_internet: online [2025-09-09 03:44:12][350637542482307][842 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:44:12][350637542482307][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542482307\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7832\"}'\'' -e'"" [2025-09-09 03:44:12][350637542482307][843 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:44:12][350637542482307][843 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542482307\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7832\"}'\'' -e'"" [2025-09-09 03:44:17][350637542482307][5997 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c32879d9-b216-4d33-84e2-f550d15d4c61","id":"QR_c32879d9-b216-4d33-84e2-f550d15d4c61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:44:17][350637542482307][6153 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 03:44:17][350637542482307][6153 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 03:44:17][350637542482307][6153 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:44:23][357873775140287][0 ms][INFO] === Request start === [2025-09-09 03:44:23][357873775140287][1 ms][DEBUG] START check_scloud [2025-09-09 03:44:23][357873775140287][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:44:23][357873775140287][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 29777 1773 24903404 185384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:44:23][357873775140287][313 ms][DEBUG] targetPkg: running [2025-09-09 03:44:23][357873775140287][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 03:44:23][357873775140287][313 ms][DEBUG] START check_boot_completed [2025-09-09 03:44:23][357873775140287][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:44:23][357873775140287][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 03:44:23][357873775140287][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:44:23][357873775140287][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:44:23][357873775140287][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 03:44:23][357873775140287][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 03:44:23][357873775140287][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4333\nsuccessfulTxPacketsPerSecond: 0.43889312592635227\nretriedTxPackets: 1152\nretriedTxPacketsPerSecond: 0.1474968701883643\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.3921258256227246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 03:44:23][357873775140287][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 03:44:24][357873775140287][845 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.006/183.006/183.006/0.000 ms\n [2025-09-09 03:44:24][357873775140287][845 ms][DEBUG] check_internet: online [2025-09-09 03:44:24][357873775140287][845 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:44:24][357873775140287][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873775140287\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2491\"}'\'' -e'"" [2025-09-09 03:44:24][357873775140287][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:44:24][357873775140287][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873775140287\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2491\"}'\'' -e'"" [2025-09-09 03:44:28][357873775140287][5172 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8642049-52e3-410e-a18c-33ecbe2b7324","id":"QR_e8642049-52e3-410e-a18c-33ecbe2b7324","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:44:28][357873775140287][5328 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 03:44:28][357873775140287][5328 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 03:44:28][357873775140287][5328 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:44:32][357873775140287][0 ms][INFO] === Request start === [2025-09-09 03:44:32][357873775140287][1 ms][DEBUG] START check_scloud [2025-09-09 03:44:32][357873775140287][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:44:32][357873775140287][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 29777 1773 25037648 197224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:44:32][357873775140287][259 ms][DEBUG] targetPkg: running [2025-09-09 03:44:32][357873775140287][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 03:44:32][357873775140287][259 ms][DEBUG] START check_boot_completed [2025-09-09 03:44:32][357873775140287][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:44:32][357873775140287][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 03:44:32][357873775140287][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:44:32][357873775140287][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:44:32][357873775140287][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 03:44:32][357873775140287][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 03:44:32][357873775140287][447 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4333\nsuccessfulTxPacketsPerSecond: 0.43889312592635227\nretriedTxPackets: 1152\nretriedTxPacketsPerSecond: 0.1474968701883643\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.3921258256227246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 03:44:32][357873775140287][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 03:44:32][357873775140287][759 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=213 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 213.334/213.334/213.334/0.000 ms\n [2025-09-09 03:44:32][357873775140287][759 ms][DEBUG] check_internet: online [2025-09-09 03:44:32][357873775140287][759 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:44:32][357873775140287][759 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873775140287\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1320\"}'\'' -e'"" [2025-09-09 03:44:32][357873775140287][759 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:44:32][357873775140287][759 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873775140287\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1320\"}'\'' -e'"" [2025-09-09 03:44:36][357873775140287][4820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e05c479-82d0-4b5f-ba50-d2c99f592825","id":"QR_0e05c479-82d0-4b5f-ba50-d2c99f592825","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:44:37][357873775140287][4977 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-09 03:44:37][357873775140287][4977 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-09 03:44:37][357873775140287][4977 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:45:04][351736901229637][0 ms][INFO] === Request start === [2025-09-09 03:45:04][351736901229637][1 ms][DEBUG] START check_scloud [2025-09-09 03:45:04][351736901229637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:45:04][351736901229637][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 29777 1773 25143280 208240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:45:04][351736901229637][304 ms][DEBUG] targetPkg: running [2025-09-09 03:45:04][351736901229637][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 03:45:04][351736901229637][304 ms][DEBUG] START check_boot_completed [2025-09-09 03:45:04][351736901229637][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:45:04][351736901229637][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:45:04][351736901229637][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:45:04][351736901229637][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 03:45:04][351736901229637][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 03:45:04][351736901229637][413 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:45:04][351736901229637][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901229637\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5252\"}'\'' -e'"" [2025-09-09 03:45:04][351736901229637][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:45:04][351736901229637][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901229637\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5252\"}'\'' -e'"" [2025-09-09 03:45:08][351736901229637][4381 ms][DEBUG] proc_open done in 3968 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 03:45:08][351736901229637][4381 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-09 03:45:08][351736901229637][4381 ms][WARN] Detected error: Process with pid 29777 either refused to load frida-agent, or terminated during injectionProcess with pid 29777 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 03:45:08][351736901229637][4381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 03:45:09][351736901229637][4662 ms][DEBUG] SU: done in 281 ms; outsystem 2152 1773 12977124 205836 ep_poll 0 S system_server\n [2025-09-09 03:45:09][351736901229637][4662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 03:45:09][351736901229637][4802 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 03:45:09][351736901229637][4803 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 03:45:09][351736901229637][4803 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 03:45:09][351736901229637][4958 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 03:45:09][351736901229637][4958 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 03:45:09][351736901229637][5131 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 03:45:11][351736901229637][7146 ms][DEBUG] START check_boot_completed [2025-09-09 03:45:11][351736901229637][7146 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:45:11][351736901229637][7192 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 03:45:11][351736901229637][7192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:45:11][351736901229637][7239 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:45:11][351736901229637][7239 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 03:45:14][351736901229637][10254 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 03:45:14][351736901229637][10254 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901229637\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5252\"}'\'' -e'"" [2025-09-09 03:45:19][351736901229637][15222 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_365ccbc5-d701-4bca-8219-da2744edf009","id":"QR_365ccbc5-d701-4bca-8219-da2744edf009","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:45:19][351736901229637][15378 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-09 03:45:19][351736901229637][15378 ms][DEBUG] END runCmdUntilRes#2 in 5124 ms [2025-09-09 03:45:19][351736901229637][15378 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:57:04][354082113526800][1 ms][INFO] === Request start === [2025-09-09 03:57:04][354082113526800][1 ms][DEBUG] START check_scloud [2025-09-09 03:57:04][354082113526800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:57:04][354082113526800][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 32139 1773 23776792 127120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:57:04][354082113526800][312 ms][DEBUG] targetPkg: running [2025-09-09 03:57:04][354082113526800][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 03:57:04][354082113526800][312 ms][DEBUG] START check_boot_completed [2025-09-09 03:57:04][354082113526800][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:57:04][354082113526800][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 03:57:04][354082113526800][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:57:04][354082113526800][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:57:04][354082113526800][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 03:57:04][354082113526800][390 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:57:04][354082113526800][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354082113526800\",\"model\":\"SM-G988U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3417\"}'\'' -e'"" [2025-09-09 03:57:04][354082113526800][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:57:04][354082113526800][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354082113526800\",\"model\":\"SM-G988U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3417\"}'\'' -e'"" [2025-09-09 03:57:11][354082113526800][6810 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9484efde-f0be-48c0-aa19-3a12316e8d29","id":"QR_9484efde-f0be-48c0-aa19-3a12316e8d29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:57:11][354082113526800][6966 ms][DEBUG] proc_open done in 6576 ms; code=255; res.len=3343 [2025-09-09 03:57:11][354082113526800][6966 ms][DEBUG] END runCmdUntilRes#1 in 6576 ms [2025-09-09 03:57:11][354082113526800][6966 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:57:14][354082113526800][0 ms][INFO] === Request start === [2025-09-09 03:57:14][354082113526800][1 ms][DEBUG] START check_scloud [2025-09-09 03:57:14][354082113526800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:57:15][354082113526800][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 32139 1773 23965292 138668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:57:15][354082113526800][276 ms][DEBUG] targetPkg: running [2025-09-09 03:57:15][354082113526800][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-09 03:57:15][354082113526800][276 ms][DEBUG] START check_boot_completed [2025-09-09 03:57:15][354082113526800][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:57:15][354082113526800][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:57:15][354082113526800][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:57:15][354082113526800][384 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 03:57:15][354082113526800][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 03:57:15][354082113526800][385 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:57:15][354082113526800][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354082113526800\",\"model\":\"SM-G988U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8927\"}'\'' -e'"" [2025-09-09 03:57:15][354082113526800][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:57:15][354082113526800][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354082113526800\",\"model\":\"SM-G988U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8927\"}'\'' -e'"" [2025-09-09 03:57:19][354082113526800][4399 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d41030e9-0224-4e6d-ab5e-211919f56e55","id":"QR_d41030e9-0224-4e6d-ab5e-211919f56e55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:57:19][354082113526800][4555 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-09 03:57:19][354082113526800][4555 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-09 03:57:19][354082113526800][4555 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:57:22][350233972196458][0 ms][INFO] === Request start === [2025-09-09 03:57:22][350233972196458][1 ms][DEBUG] START check_scloud [2025-09-09 03:57:22][350233972196458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:57:22][350233972196458][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 32139 1773 24109812 149420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:57:22][350233972196458][259 ms][DEBUG] targetPkg: running [2025-09-09 03:57:22][350233972196458][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 03:57:22][350233972196458][259 ms][DEBUG] START check_boot_completed [2025-09-09 03:57:22][350233972196458][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:57:22][350233972196458][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:57:22][350233972196458][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:57:22][350233972196458][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 03:57:22][350233972196458][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 03:57:22][350233972196458][352 ms][DEBUG] rawBody.length=1160 [2025-09-09 03:57:22][350233972196458][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233972196458\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5357\"}'\'' -e'"" [2025-09-09 03:57:22][350233972196458][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:57:22][350233972196458][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233972196458\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5357\"}'\'' -e'"" [2025-09-09 03:57:27][350233972196458][5054 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2eb56bab-4ca0-4656-8f1e-878e94b39004","id":"QR_2eb56bab-4ca0-4656-8f1e-878e94b39004","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:57:27][350233972196458][5211 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-09 03:57:27][350233972196458][5211 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-09 03:57:27][350233972196458][5211 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 03:57:31][350233972196458][0 ms][INFO] === Request start === [2025-09-09 03:57:31][350233972196458][1 ms][DEBUG] START check_scloud [2025-09-09 03:57:31][350233972196458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 03:57:31][350233972196458][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 32139 1773 24246296 161280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 03:57:31][350233972196458][304 ms][DEBUG] targetPkg: running [2025-09-09 03:57:31][350233972196458][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 03:57:31][350233972196458][304 ms][DEBUG] START check_boot_completed [2025-09-09 03:57:31][350233972196458][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 03:57:31][350233972196458][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 03:57:31][350233972196458][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 03:57:31][350233972196458][430 ms][DEBUG] SU: done in 79 ms; out [2025-09-09 03:57:31][350233972196458][430 ms][DEBUG] END check_boot_completed in 126 ms [2025-09-09 03:57:31][350233972196458][430 ms][DEBUG] rawBody.length=1150 [2025-09-09 03:57:31][350233972196458][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233972196458\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4146\"}'\'' -e'"" [2025-09-09 03:57:31][350233972196458][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 03:57:31][350233972196458][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233972196458\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4146\"}'\'' -e'"" [2025-09-09 03:57:35][350233972196458][3818 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f65a53b0-aa10-46b6-bbb1-cab9b263b983","id":"QR_f65a53b0-aa10-46b6-bbb1-cab9b263b983","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 03:57:35][350233972196458][3975 ms][DEBUG] proc_open done in 3544 ms; code=255; res.len=3343 [2025-09-09 03:57:35][350233972196458][3975 ms][DEBUG] END runCmdUntilRes#1 in 3544 ms [2025-09-09 03:57:35][350233972196458][3975 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 04:08:04][357994255627781][1 ms][INFO] === Request start === [2025-09-09 04:08:04][357994255627781][1 ms][DEBUG] START check_scloud [2025-09-09 04:08:04][357994255627781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 04:08:05][357994255627781][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 32139 1773 24322156 173200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 04:08:05][357994255627781][299 ms][DEBUG] targetPkg: running [2025-09-09 04:08:05][357994255627781][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 04:08:05][357994255627781][299 ms][DEBUG] START check_boot_completed [2025-09-09 04:08:05][357994255627781][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 04:08:05][357994255627781][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 04:08:05][357994255627781][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 04:08:05][357994255627781][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 04:08:05][357994255627781][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 04:08:05][357994255627781][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 04:08:05][357994255627781][487 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4719\nsuccessfulTxPacketsPerSecond: 0.046509001152758814\nretriedTxPackets: 1277\nretriedTxPacketsPerSecond: 0.039864858130936126\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4337\nsuccessfulRxPacketsPerSecond: 0.019932429065468063\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 04:08:05][357994255627781][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 04:08:06][357994255627781][1736 ms][DEBUG] SU: done in 1249 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.043/202.043/202.043/0.000 ms\n [2025-09-09 04:08:06][357994255627781][1737 ms][DEBUG] check_internet: online [2025-09-09 04:08:06][357994255627781][1737 ms][DEBUG] rawBody.length=1160 [2025-09-09 04:08:06][357994255627781][1737 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994255627781\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3279\"}'\'' -e'"" [2025-09-09 04:08:06][357994255627781][1737 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 04:08:06][357994255627781][1737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994255627781\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3279\"}'\'' -e'"" [2025-09-09 04:08:11][357994255627781][6985 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a329f1d4-112a-4828-8be3-94d807abfdf3","id":"QR_a329f1d4-112a-4828-8be3-94d807abfdf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 04:08:11][357994255627781][7141 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-09 04:08:11][357994255627781][7141 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-09 04:08:11][357994255627781][7141 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 04:28:05][351537275516934][1 ms][INFO] === Request start === [2025-09-09 04:28:05][351537275516934][1 ms][DEBUG] START check_scloud [2025-09-09 04:28:05][351537275516934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 04:28:05][351537275516934][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 32139 1773 24458512 184672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 04:28:05][351537275516934][273 ms][DEBUG] targetPkg: running [2025-09-09 04:28:05][351537275516934][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 04:28:05][351537275516934][273 ms][DEBUG] START check_boot_completed [2025-09-09 04:28:05][351537275516934][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 04:28:05][351537275516934][304 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 04:28:05][351537275516934][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 04:28:05][351537275516934][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 04:28:05][351537275516934][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 04:28:05][351537275516934][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 04:28:05][351537275516934][476 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4781\nsuccessfulTxPacketsPerSecond: 0.017363447338834652\nretriedTxPackets: 1310\nretriedTxPacketsPerSecond: 0.017363447338834652\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4392\nsuccessfulRxPacketsPerSecond: 0.017363447338834652\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 04:28:05][351537275516934][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 04:28:06][351537275516934][1757 ms][DEBUG] SU: done in 1281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.285/199.285/199.285/0.000 ms\n [2025-09-09 04:28:06][351537275516934][1757 ms][DEBUG] check_internet: online [2025-09-09 04:28:06][351537275516934][1757 ms][DEBUG] rawBody.length=1160 [2025-09-09 04:28:06][351537275516934][1757 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275516934\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4419\"}'\'' -e'"" [2025-09-09 04:28:06][351537275516934][1757 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 04:28:06][351537275516934][1758 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275516934\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4419\"}'\'' -e'"" [2025-09-09 04:28:12][351537275516934][7224 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fe420e4-78d3-4ca1-b23c-07adf6b83815","id":"QR_7fe420e4-78d3-4ca1-b23c-07adf6b83815","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 04:28:12][351537275516934][7381 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-09 04:28:12][351537275516934][7381 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-09 04:28:12][351537275516934][7381 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 04:28:16][351537275516934][0 ms][INFO] === Request start === [2025-09-09 04:28:16][351537275516934][1 ms][DEBUG] START check_scloud [2025-09-09 04:28:16][351537275516934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 04:28:16][351537275516934][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 32139 1773 24624612 195184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 04:28:16][351537275516934][303 ms][DEBUG] targetPkg: running [2025-09-09 04:28:16][351537275516934][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 04:28:16][351537275516934][303 ms][DEBUG] START check_boot_completed [2025-09-09 04:28:16][351537275516934][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 04:28:16][351537275516934][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 04:28:16][351537275516934][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 04:28:16][351537275516934][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 04:28:16][351537275516934][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 04:28:16][351537275516934][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 04:28:16][351537275516934][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4781\nsuccessfulTxPacketsPerSecond: 0.017363447338834652\nretriedTxPackets: 1310\nretriedTxPacketsPerSecond: 0.017363447338834652\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4392\nsuccessfulRxPacketsPerSecond: 0.017363447338834652\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 04:28:16][351537275516934][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 04:28:16][351537275516934][818 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.190/164.190/164.190/0.000 ms\n [2025-09-09 04:28:16][351537275516934][818 ms][DEBUG] check_internet: online [2025-09-09 04:28:16][351537275516934][819 ms][DEBUG] rawBody.length=1150 [2025-09-09 04:28:16][351537275516934][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275516934\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5080\"}'\'' -e'"" [2025-09-09 04:28:16][351537275516934][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 04:28:16][351537275516934][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275516934\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5080\"}'\'' -e'"" [2025-09-09 04:28:20][351537275516934][4802 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe23fa9c-08a9-4f7b-8c56-a50e3d4d7d36","id":"QR_fe23fa9c-08a9-4f7b-8c56-a50e3d4d7d36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 04:28:21][351537275516934][4958 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-09 04:28:21][351537275516934][4958 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-09 04:28:21][351537275516934][4958 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 04:40:08][350556394161712][1 ms][INFO] === Request start === [2025-09-09 04:40:08][350556394161712][1 ms][DEBUG] START check_scloud [2025-09-09 04:40:08][350556394161712][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 04:40:08][350556394161712][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 32139 1773 24737368 207724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 04:40:08][350556394161712][301 ms][DEBUG] targetPkg: running [2025-09-09 04:40:08][350556394161712][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 04:40:08][350556394161712][301 ms][DEBUG] START check_boot_completed [2025-09-09 04:40:08][350556394161712][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 04:40:08][350556394161712][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 04:40:08][350556394161712][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 04:40:08][350556394161712][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 04:40:08][350556394161712][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 04:40:08][350556394161712][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 04:40:08][350556394161712][566 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4857\nsuccessfulTxPacketsPerSecond: 0.013292260249163418\nretriedTxPackets: 1345\nretriedTxPacketsPerSecond: 0.013292260249163418\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4458\nsuccessfulRxPacketsPerSecond: 0.013292260249163418\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 04:40:08][350556394161712][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 04:40:10][350556394161712][2222 ms][DEBUG] SU: done in 1656 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.536/302.536/302.536/0.000 ms\n [2025-09-09 04:40:10][350556394161712][2222 ms][DEBUG] check_internet: online [2025-09-09 04:40:10][350556394161712][2223 ms][DEBUG] rawBody.length=1150 [2025-09-09 04:40:10][350556394161712][2223 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394161712\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-09-09 04:40:10][350556394161712][2223 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 04:40:10][350556394161712][2223 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394161712\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-09-09 04:40:14][350556394161712][6112 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbab2efb-d8c4-4754-b5ed-f8a231b25a5f","id":"QR_bbab2efb-d8c4-4754-b5ed-f8a231b25a5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 04:40:14][350556394161712][6268 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-09 04:40:14][350556394161712][6268 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-09 04:40:14][350556394161712][6268 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 04:58:04][350962378824434][1 ms][INFO] === Request start === [2025-09-09 04:58:04][350962378824434][1 ms][DEBUG] START check_scloud [2025-09-09 04:58:04][350962378824434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 04:58:04][350962378824434][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 32139 1773 24859452 198392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 04:58:04][350962378824434][312 ms][DEBUG] targetPkg: running [2025-09-09 04:58:04][350962378824434][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 04:58:04][350962378824434][312 ms][DEBUG] START check_boot_completed [2025-09-09 04:58:04][350962378824434][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 04:58:05][350962378824434][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 04:58:05][350962378824434][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 04:58:05][350962378824434][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 04:58:05][350962378824434][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 04:58:05][350962378824434][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 04:58:05][350962378824434][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5016\nsuccessfulTxPacketsPerSecond: 0.016163967284130217\nretriedTxPackets: 1391\nretriedTxPacketsPerSecond: 0.016163967284130217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4613\nsuccessfulRxPacketsPerSecond: 0.016163967284130217\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 04:58:05][350962378824434][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 04:58:06][350962378824434][2218 ms][DEBUG] SU: done in 1718 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.471/293.471/293.471/0.000 ms\n [2025-09-09 04:58:06][350962378824434][2218 ms][DEBUG] check_internet: online [2025-09-09 04:58:06][350962378824434][2218 ms][DEBUG] rawBody.length=1160 [2025-09-09 04:58:06][350962378824434][2218 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962378824434\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8853\"}'\'' -e'"" [2025-09-09 04:58:06][350962378824434][2218 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 04:58:06][350962378824434][2218 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962378824434\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8853\"}'\'' -e'"" [2025-09-09 04:58:12][350962378824434][7982 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64f66b6b-e02a-49d4-a222-f7d426ddac44","id":"QR_64f66b6b-e02a-49d4-a222-f7d426ddac44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 04:58:12][350962378824434][8138 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-09 04:58:12][350962378824434][8138 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-09 04:58:12][350962378824434][8139 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 04:58:16][350962378824434][0 ms][INFO] === Request start === [2025-09-09 04:58:16][350962378824434][1 ms][DEBUG] START check_scloud [2025-09-09 04:58:16][350962378824434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 04:58:16][350962378824434][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 32139 1773 25050256 200416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 04:58:16][350962378824434][313 ms][DEBUG] targetPkg: running [2025-09-09 04:58:16][350962378824434][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 04:58:16][350962378824434][313 ms][DEBUG] START check_boot_completed [2025-09-09 04:58:16][350962378824434][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 04:58:16][350962378824434][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 04:58:16][350962378824434][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 04:58:16][350962378824434][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 04:58:16][350962378824434][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 04:58:16][350962378824434][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 04:58:16][350962378824434][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5016\nsuccessfulTxPacketsPerSecond: 0.016163967284130217\nretriedTxPackets: 1391\nretriedTxPacketsPerSecond: 0.016163967284130217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4613\nsuccessfulRxPacketsPerSecond: 0.016163967284130217\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 04:58:16][350962378824434][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 04:58:17][350962378824434][953 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.478/305.478/305.478/0.000 ms\n [2025-09-09 04:58:17][350962378824434][953 ms][DEBUG] check_internet: online [2025-09-09 04:58:17][350962378824434][953 ms][DEBUG] rawBody.length=1150 [2025-09-09 04:58:17][350962378824434][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962378824434\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9397\"}'\'' -e'"" [2025-09-09 04:58:17][350962378824434][953 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 04:58:17][350962378824434][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962378824434\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9397\"}'\'' -e'"" [2025-09-09 04:58:20][350962378824434][4546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db86b16c-1be9-4ca8-9a9d-9e9583bd57dc","id":"QR_db86b16c-1be9-4ca8-9a9d-9e9583bd57dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 04:58:20][350962378824434][4702 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-09 04:58:20][350962378824434][4702 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-09 04:58:20][350962378824434][4702 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:03:03][352520441268423][0 ms][INFO] === Request start === [2025-09-09 05:03:03][352520441268423][0 ms][DEBUG] START check_scloud [2025-09-09 05:03:03][352520441268423][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:03:03][352520441268423][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 32139 1773 25143632 181300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:03:03][352520441268423][297 ms][DEBUG] targetPkg: running [2025-09-09 05:03:03][352520441268423][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 05:03:03][352520441268423][297 ms][DEBUG] START check_boot_completed [2025-09-09 05:03:03][352520441268423][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:03:03][352520441268423][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 05:03:03][352520441268423][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:03:03][352520441268423][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:03:03][352520441268423][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 05:03:03][352520441268423][376 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:03:03][352520441268423][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352520441268423\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4960\"}'\'' -e'"" [2025-09-09 05:03:03][352520441268423][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:03:03][352520441268423][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352520441268423\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4960\"}'\'' -e'"" [2025-09-09 05:03:07][352520441268423][4468 ms][DEBUG] proc_open done in 4092 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 05:03:07][352520441268423][4468 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-09 05:03:07][352520441268423][4468 ms][WARN] Detected error: Process with pid 32139 either refused to load frida-agent, or terminated during injectionProcess with pid 32139 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 05:03:07][352520441268423][4468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 05:03:08][352520441268423][4749 ms][DEBUG] SU: done in 281 ms; outsystem 2152 1773 13225296 247748 ep_poll 0 S system_server\n [2025-09-09 05:03:08][352520441268423][4750 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 05:03:08][352520441268423][4890 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 05:03:08][352520441268423][4890 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 05:03:08][352520441268423][4890 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 05:03:08][352520441268423][5046 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 05:03:08][352520441268423][5046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 05:03:08][352520441268423][5234 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 05:03:10][352520441268423][7249 ms][DEBUG] START check_boot_completed [2025-09-09 05:03:10][352520441268423][7249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:03:10][352520441268423][7296 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 05:03:10][352520441268423][7296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:03:10][352520441268423][7342 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:03:10][352520441268423][7342 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 05:03:13][352520441268423][10357 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 05:03:13][352520441268423][10357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352520441268423\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4960\"}'\'' -e'"" [2025-09-09 05:03:17][352520441268423][14091 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e1ed188-fa14-4106-ab7b-a6656327ee48","id":"QR_3e1ed188-fa14-4106-ab7b-a6656327ee48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:03:17][352520441268423][14247 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-09-09 05:03:17][352520441268423][14247 ms][DEBUG] END runCmdUntilRes#2 in 3890 ms [2025-09-09 05:03:17][352520441268423][14247 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:03:19][352520441268423][0 ms][INFO] === Request start === [2025-09-09 05:03:19][352520441268423][1 ms][DEBUG] START check_scloud [2025-09-09 05:03:19][352520441268423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:03:20][352520441268423][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 4121 1773 23924028 124396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:03:20][352520441268423][268 ms][DEBUG] targetPkg: running [2025-09-09 05:03:20][352520441268423][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 05:03:20][352520441268423][268 ms][DEBUG] START check_boot_completed [2025-09-09 05:03:20][352520441268423][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:03:20][352520441268423][314 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 05:03:20][352520441268423][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:03:20][352520441268423][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:03:20][352520441268423][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 05:03:20][352520441268423][361 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:03:20][352520441268423][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352520441268423\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2716\"}'\'' -e'"" [2025-09-09 05:03:20][352520441268423][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:03:20][352520441268423][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352520441268423\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2716\"}'\'' -e'"" [2025-09-09 05:03:26][352520441268423][6360 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa230666-b8cd-4c90-a2ec-46fbf5623b83","id":"QR_fa230666-b8cd-4c90-a2ec-46fbf5623b83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:03:26][352520441268423][6516 ms][DEBUG] proc_open done in 6155 ms; code=255; res.len=3343 [2025-09-09 05:03:26][352520441268423][6516 ms][DEBUG] END runCmdUntilRes#1 in 6155 ms [2025-09-09 05:03:26][352520441268423][6516 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:10:04][355954711250844][1 ms][INFO] === Request start === [2025-09-09 05:10:04][355954711250844][1 ms][DEBUG] START check_scloud [2025-09-09 05:10:04][355954711250844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:10:04][355954711250844][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 4121 1773 23970816 138660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:10:04][355954711250844][307 ms][DEBUG] targetPkg: running [2025-09-09 05:10:04][355954711250844][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 05:10:04][355954711250844][307 ms][DEBUG] START check_boot_completed [2025-09-09 05:10:04][355954711250844][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:10:04][355954711250844][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 05:10:04][355954711250844][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:10:04][355954711250844][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:10:04][355954711250844][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 05:10:04][355954711250844][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 05:10:04][355954711250844][495 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5176\nsuccessfulTxPacketsPerSecond: 0.3168168313790907\nretriedTxPackets: 1439\nretriedTxPacketsPerSecond: 0.07758779543977733\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4752\nsuccessfulRxPacketsPerSecond: 0.26832445922922993\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 05:10:04][355954711250844][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 05:10:05][355954711250844][1838 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.005/301.005/301.005/0.000 ms\n [2025-09-09 05:10:05][355954711250844][1838 ms][DEBUG] check_internet: online [2025-09-09 05:10:05][355954711250844][1839 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:10:05][355954711250844][1839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355954711250844\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6978\"}'\'' -e'"" [2025-09-09 05:10:05][355954711250844][1839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:10:05][355954711250844][1839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355954711250844\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6978\"}'\'' -e'"" [2025-09-09 05:10:09][355954711250844][5634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f59d03bc-0f32-4974-b4a1-e7f698164ef9","id":"QR_f59d03bc-0f32-4974-b4a1-e7f698164ef9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:10:09][355954711250844][5790 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-09 05:10:09][355954711250844][5790 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-09 05:10:09][355954711250844][5790 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:10:12][355954711250844][0 ms][INFO] === Request start === [2025-09-09 05:10:12][355954711250844][1 ms][DEBUG] START check_scloud [2025-09-09 05:10:12][355954711250844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:10:12][355954711250844][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 4121 1773 24143180 150344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:10:12][355954711250844][299 ms][DEBUG] targetPkg: running [2025-09-09 05:10:12][355954711250844][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 05:10:12][355954711250844][299 ms][DEBUG] START check_boot_completed [2025-09-09 05:10:12][355954711250844][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:10:12][355954711250844][345 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 05:10:12][355954711250844][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:10:12][355954711250844][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 05:10:12][355954711250844][407 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 05:10:12][355954711250844][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 05:10:12][355954711250844][516 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5176\nsuccessfulTxPacketsPerSecond: 0.3168168313790907\nretriedTxPackets: 1439\nretriedTxPacketsPerSecond: 0.07758779543977733\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4752\nsuccessfulRxPacketsPerSecond: 0.26832445922922993\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 05:10:12][355954711250844][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 05:10:12][355954711250844][844 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.806/222.806/222.806/0.000 ms\n [2025-09-09 05:10:12][355954711250844][845 ms][DEBUG] check_internet: online [2025-09-09 05:10:12][355954711250844][845 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:10:12][355954711250844][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355954711250844\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9376\"}'\'' -e'"" [2025-09-09 05:10:12][355954711250844][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:10:12][355954711250844][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355954711250844\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9376\"}'\'' -e'"" [2025-09-09 05:10:18][355954711250844][6030 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1062e340-3ab1-4cd1-a9d9-35fdb1f8fb85","id":"QR_1062e340-3ab1-4cd1-a9d9-35fdb1f8fb85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:10:18][355954711250844][6187 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-09 05:10:18][355954711250844][6187 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-09 05:10:18][355954711250844][6187 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:15:04][350753206603656][1 ms][INFO] === Request start === [2025-09-09 05:15:04][350753206603656][1 ms][DEBUG] START check_scloud [2025-09-09 05:15:04][350753206603656][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:15:04][350753206603656][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 4121 1773 24240652 161548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:15:04][350753206603656][302 ms][DEBUG] targetPkg: running [2025-09-09 05:15:04][350753206603656][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 05:15:04][350753206603656][302 ms][DEBUG] START check_boot_completed [2025-09-09 05:15:04][350753206603656][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:15:04][350753206603656][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 05:15:04][350753206603656][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:15:04][350753206603656][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:15:04][350753206603656][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 05:15:04][350753206603656][380 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:15:04][350753206603656][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753206603656\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1170\"}'\'' -e'"" [2025-09-09 05:15:04][350753206603656][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:15:04][350753206603656][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753206603656\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1170\"}'\'' -e'"" [2025-09-09 05:15:09][350753206603656][5785 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e6f0266-748e-4aa1-8fc2-ef1400b8e896","id":"QR_1e6f0266-748e-4aa1-8fc2-ef1400b8e896","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:15:10][350753206603656][5941 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-09 05:15:10][350753206603656][5941 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-09 05:15:10][350753206603656][5941 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:15:12][350753206603656][0 ms][INFO] === Request start === [2025-09-09 05:15:12][350753206603656][1 ms][DEBUG] START check_scloud [2025-09-09 05:15:12][350753206603656][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:15:12][350753206603656][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 4121 1773 24415892 172216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:15:12][350753206603656][259 ms][DEBUG] targetPkg: running [2025-09-09 05:15:12][350753206603656][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 05:15:12][350753206603656][259 ms][DEBUG] START check_boot_completed [2025-09-09 05:15:12][350753206603656][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:15:12][350753206603656][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 05:15:12][350753206603656][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:15:12][350753206603656][399 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 05:15:12][350753206603656][400 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 05:15:12][350753206603656][400 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:15:12][350753206603656][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753206603656\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7673\"}'\'' -e'"" [2025-09-09 05:15:12][350753206603656][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:15:12][350753206603656][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753206603656\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7673\"}'\'' -e'"" [2025-09-09 05:15:18][350753206603656][5804 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d2ebcf0-c8ca-426f-87ff-49a92e14da36","id":"QR_8d2ebcf0-c8ca-426f-87ff-49a92e14da36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:15:18][350753206603656][5960 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-09 05:15:18][350753206603656][5961 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-09 05:15:18][350753206603656][5961 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:19:03][354202962075119][1 ms][INFO] === Request start === [2025-09-09 05:19:03][354202962075119][1 ms][DEBUG] START check_scloud [2025-09-09 05:19:03][354202962075119][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:19:03][354202962075119][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 4121 1773 24539860 184480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:19:03][354202962075119][296 ms][DEBUG] targetPkg: running [2025-09-09 05:19:03][354202962075119][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 05:19:03][354202962075119][296 ms][DEBUG] START check_boot_completed [2025-09-09 05:19:03][354202962075119][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:19:03][354202962075119][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 05:19:03][354202962075119][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:19:03][354202962075119][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:19:03][354202962075119][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 05:19:03][354202962075119][374 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:19:03][354202962075119][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354202962075119\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1317\"}'\'' -e'"" [2025-09-09 05:19:03][354202962075119][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:19:03][354202962075119][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354202962075119\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1317\"}'\'' -e'"" [2025-09-09 05:19:08][354202962075119][4920 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a41fe19-b9d4-4468-baeb-34a2ad5184fa","id":"QR_2a41fe19-b9d4-4468-baeb-34a2ad5184fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:19:08][354202962075119][5076 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 05:19:08][354202962075119][5076 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 05:19:08][354202962075119][5076 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:19:10][354202962075119][0 ms][INFO] === Request start === [2025-09-09 05:19:10][354202962075119][1 ms][DEBUG] START check_scloud [2025-09-09 05:19:10][354202962075119][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:19:10][354202962075119][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 4121 1773 24676316 195420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:19:10][354202962075119][256 ms][DEBUG] targetPkg: running [2025-09-09 05:19:10][354202962075119][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 05:19:10][354202962075119][257 ms][DEBUG] START check_boot_completed [2025-09-09 05:19:10][354202962075119][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:19:10][354202962075119][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 05:19:10][354202962075119][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:19:11][354202962075119][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:19:11][354202962075119][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 05:19:11][354202962075119][350 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:19:11][354202962075119][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354202962075119\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4130\"}'\'' -e'"" [2025-09-09 05:19:11][354202962075119][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:19:11][354202962075119][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354202962075119\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4130\"}'\'' -e'"" [2025-09-09 05:19:16][354202962075119][5677 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd98679f-2a6f-4338-a7f1-309e4db4bb3a","id":"QR_dd98679f-2a6f-4338-a7f1-309e4db4bb3a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:19:16][354202962075119][5833 ms][DEBUG] proc_open done in 5483 ms; code=255; res.len=3343 [2025-09-09 05:19:16][354202962075119][5833 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-09-09 05:19:16][354202962075119][5833 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:21:04][352590520044086][1 ms][INFO] === Request start === [2025-09-09 05:21:04][352590520044086][1 ms][DEBUG] START check_scloud [2025-09-09 05:21:04][352590520044086][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:21:04][352590520044086][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 4121 1773 24824860 207388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:21:04][352590520044086][296 ms][DEBUG] targetPkg: running [2025-09-09 05:21:04][352590520044086][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 05:21:04][352590520044086][296 ms][DEBUG] START check_boot_completed [2025-09-09 05:21:04][352590520044086][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:21:04][352590520044086][343 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 05:21:04][352590520044086][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:21:04][352590520044086][407 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 05:21:04][352590520044086][407 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 05:21:04][352590520044086][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:21:04][352590520044086][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520044086\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2633\"}'\'' -e'"" [2025-09-09 05:21:04][352590520044086][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:21:04][352590520044086][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520044086\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2633\"}'\'' -e'"" [2025-09-09 05:21:09][352590520044086][5264 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0b4e846-fe73-4b32-a1b2-0f24ab0c2143","id":"QR_a0b4e846-fe73-4b32-a1b2-0f24ab0c2143","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:21:09][352590520044086][5420 ms][DEBUG] proc_open done in 5012 ms; code=255; res.len=3343 [2025-09-09 05:21:09][352590520044086][5420 ms][DEBUG] END runCmdUntilRes#1 in 5012 ms [2025-09-09 05:21:09][352590520044086][5420 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:21:11][352590520044086][0 ms][INFO] === Request start === [2025-09-09 05:21:11][352590520044086][1 ms][DEBUG] START check_scloud [2025-09-09 05:21:11][352590520044086][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:21:12][352590520044086][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 4121 1773 24969380 217524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:21:12][352590520044086][262 ms][DEBUG] targetPkg: running [2025-09-09 05:21:12][352590520044086][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 05:21:12][352590520044086][262 ms][DEBUG] START check_boot_completed [2025-09-09 05:21:12][352590520044086][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:21:12][352590520044086][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 05:21:12][352590520044086][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:21:12][352590520044086][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:21:12][352590520044086][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 05:21:12][352590520044086][355 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:21:12][352590520044086][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520044086\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8237\"}'\'' -e'"" [2025-09-09 05:21:12][352590520044086][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:21:12][352590520044086][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520044086\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8237\"}'\'' -e'"" [2025-09-09 05:21:17][352590520044086][5385 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93c7f0f7-a862-41bd-98a7-c7f19814982a","id":"QR_93c7f0f7-a862-41bd-98a7-c7f19814982a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:21:17][352590520044086][5541 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-09 05:21:17][352590520044086][5542 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-09 05:21:17][352590520044086][5542 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:23:03][352698472611750][0 ms][INFO] === Request start === [2025-09-09 05:23:03][352698472611750][1 ms][DEBUG] START check_scloud [2025-09-09 05:23:03][352698472611750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:23:03][352698472611750][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 4121 1773 25113956 229704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:23:03][352698472611750][309 ms][DEBUG] targetPkg: running [2025-09-09 05:23:03][352698472611750][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 05:23:03][352698472611750][309 ms][DEBUG] START check_boot_completed [2025-09-09 05:23:03][352698472611750][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:23:03][352698472611750][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 05:23:03][352698472611750][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:23:03][352698472611750][434 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 05:23:03][352698472611750][434 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 05:23:03][352698472611750][434 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:23:03][352698472611750][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698472611750\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2191\"}'\'' -e'"" [2025-09-09 05:23:03][352698472611750][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:23:03][352698472611750][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698472611750\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2191\"}'\'' -e'"" [2025-09-09 05:23:08][352698472611750][4964 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39d1c0cf-e748-41a5-907b-3fe2bfd2e16a","id":"QR_39d1c0cf-e748-41a5-907b-3fe2bfd2e16a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:23:08][352698472611750][5120 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 05:23:08][352698472611750][5120 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 05:23:08][352698472611750][5120 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:23:10][352698472611750][1 ms][INFO] === Request start === [2025-09-09 05:23:10][352698472611750][1 ms][DEBUG] START check_scloud [2025-09-09 05:23:10][352698472611750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:23:11][352698472611750][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 4121 1773 25274988 240772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:23:11][352698472611750][298 ms][DEBUG] targetPkg: running [2025-09-09 05:23:11][352698472611750][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 05:23:11][352698472611750][298 ms][DEBUG] START check_boot_completed [2025-09-09 05:23:11][352698472611750][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:23:11][352698472611750][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 05:23:11][352698472611750][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:23:11][352698472611750][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:23:11][352698472611750][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 05:23:11][352698472611750][392 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:23:11][352698472611750][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698472611750\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3993\"}'\'' -e'"" [2025-09-09 05:23:11][352698472611750][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:23:11][352698472611750][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698472611750\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3993\"}'\'' -e'"" [2025-09-09 05:23:19][352698472611750][8343 ms][DEBUG] proc_open done in 7951 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 05:23:19][352698472611750][8343 ms][DEBUG] END runCmdUntilRes#1 in 7951 ms [2025-09-09 05:23:19][352698472611750][8343 ms][WARN] Detected error: Process with pid 4121 either refused to load frida-agent, or terminated during injectionProcess with pid 4121 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 05:23:19][352698472611750][8343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 05:23:19][352698472611750][8749 ms][DEBUG] SU: done in 406 ms; out [2025-09-09 05:23:19][352698472611750][8749 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 05:23:19][352698472611750][8999 ms][DEBUG] SU: done in 250 ms; out [2025-09-09 05:23:19][352698472611750][8999 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 05:23:19][352698472611750][8999 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 05:23:20][352698472611750][9358 ms][DEBUG] SU: done in 359 ms; out [2025-09-09 05:23:20][352698472611750][9358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 05:23:20][352698472611750][9655 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 05:23:22][352698472611750][11670 ms][DEBUG] START check_boot_completed [2025-09-09 05:23:22][352698472611750][11670 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:23:22][352698472611750][11717 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 05:23:22][352698472611750][11717 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:23:22][352698472611750][11764 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:23:22][352698472611750][11764 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 05:23:25][352698472611750][14779 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 05:23:25][352698472611750][14779 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698472611750\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3993\"}'\'' -e'"" [2025-09-09 05:23:27][352698472611750][16278 ms][DEBUG] proc_open done in 1500 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 05:23:27][352698472611750][16279 ms][DEBUG] END runCmdUntilRes#2 in 1500 ms [2025-09-09 05:23:27][352698472611750][16279 ms][WARN] Detected error 2; Reboot the device [2025-09-09 05:23:27][352698472611750][16279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 05:23:27][352698472611750][16544 ms][DEBUG] SU: done in 265 ms; outsystem 6365 6026 7202948 121712 0 0 R system_server\n [2025-09-09 05:23:27][352698472611750][16544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 05:23:28][352698472611750][17153 ms][DEBUG] SU: done in 609 ms; out [2025-09-09 05:29:03][355680653396945][1 ms][INFO] === Request start === [2025-09-09 05:29:03][355680653396945][1 ms][DEBUG] START check_scloud [2025-09-09 05:29:03][355680653396945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:29:04][355680653396945][357 ms][DEBUG] SU: done in 356 ms; out [2025-09-09 05:29:04][355680653396945][357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 05:29:04][355680653396945][388 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 05:29:04][355680653396945][388 ms][DEBUG] check_devices: device found [2025-09-09 05:29:04][355680653396945][388 ms][WARN] targetPkg: not running, restarting [2025-09-09 05:29:04][355680653396945][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 05:29:04][355680653396945][497 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 05:29:04][355680653396945][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 05:29:04][355680653396945][716 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 05:29:06][355680653396945][2731 ms][DEBUG] END check_scloud in 2730 ms [2025-09-09 05:29:06][355680653396945][2731 ms][DEBUG] START check_boot_completed [2025-09-09 05:29:06][355680653396945][2731 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:29:06][355680653396945][2778 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 05:29:06][355680653396945][2778 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:29:06][355680653396945][2826 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 05:29:06][355680653396945][2826 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 05:29:06][355680653396945][2826 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:29:06][355680653396945][2826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680653396945\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3216\"}'\'' -e'"" [2025-09-09 05:29:06][355680653396945][2826 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:29:06][355680653396945][2826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680653396945\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3216\"}'\'' -e'"" [2025-09-09 05:29:11][355680653396945][8011 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_428d8968-54e4-4cc1-a261-9ddf67f644a2","id":"QR_428d8968-54e4-4cc1-a261-9ddf67f644a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:29:12][355680653396945][8167 ms][DEBUG] proc_open done in 5341 ms; code=255; res.len=3343 [2025-09-09 05:29:12][355680653396945][8167 ms][DEBUG] END runCmdUntilRes#1 in 5341 ms [2025-09-09 05:29:12][355680653396945][8167 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:29:14][355680653396945][0 ms][INFO] === Request start === [2025-09-09 05:29:14][355680653396945][1 ms][DEBUG] START check_scloud [2025-09-09 05:29:14][355680653396945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:29:14][355680653396945][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 16278 4974 23651488 124376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:29:14][355680653396945][331 ms][DEBUG] targetPkg: running [2025-09-09 05:29:14][355680653396945][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-09 05:29:14][355680653396945][331 ms][DEBUG] START check_boot_completed [2025-09-09 05:29:14][355680653396945][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:29:14][355680653396945][378 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 05:29:14][355680653396945][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:29:14][355680653396945][426 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 05:29:14][355680653396945][426 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 05:29:14][355680653396945][426 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:29:14][355680653396945][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680653396945\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7309\"}'\'' -e'"" [2025-09-09 05:29:14][355680653396945][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:29:14][355680653396945][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680653396945\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7309\"}'\'' -e'"" [2025-09-09 05:29:20][355680653396945][5970 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6ba8209-9aba-4ae3-ad10-5ce315252a9a","id":"QR_d6ba8209-9aba-4ae3-ad10-5ce315252a9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:29:20][355680653396945][6126 ms][DEBUG] proc_open done in 5699 ms; code=255; res.len=3343 [2025-09-09 05:29:20][355680653396945][6126 ms][DEBUG] END runCmdUntilRes#1 in 5700 ms [2025-09-09 05:29:20][355680653396945][6126 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:29:26][354386272854865][0 ms][INFO] === Request start === [2025-09-09 05:29:26][354386272854865][1 ms][DEBUG] START check_scloud [2025-09-09 05:29:26][354386272854865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:29:26][354386272854865][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 16278 4974 23812496 137592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:29:26][354386272854865][316 ms][DEBUG] targetPkg: running [2025-09-09 05:29:26][354386272854865][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 05:29:26][354386272854865][316 ms][DEBUG] START check_boot_completed [2025-09-09 05:29:26][354386272854865][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:29:26][354386272854865][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 05:29:26][354386272854865][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:29:26][354386272854865][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:29:26][354386272854865][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 05:29:26][354386272854865][408 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:29:26][354386272854865][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354386272854865\",\"model\":\"SM-T227U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3422\"}'\'' -e'"" [2025-09-09 05:29:26][354386272854865][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:29:26][354386272854865][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354386272854865\",\"model\":\"SM-T227U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3422\"}'\'' -e'"" [2025-09-09 05:29:31][354386272854865][5063 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08549eac-f6d0-490b-ab44-7e5d75913377","id":"QR_08549eac-f6d0-490b-ab44-7e5d75913377","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:29:31][354386272854865][5220 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 05:29:31][354386272854865][5220 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 05:29:31][354386272854865][5220 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:29:34][354386272854865][0 ms][INFO] === Request start === [2025-09-09 05:29:34][354386272854865][1 ms][DEBUG] START check_scloud [2025-09-09 05:29:34][354386272854865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:29:34][354386272854865][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 16278 4974 23956980 149268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:29:34][354386272854865][293 ms][DEBUG] targetPkg: running [2025-09-09 05:29:34][354386272854865][293 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 05:29:34][354386272854865][293 ms][DEBUG] START check_boot_completed [2025-09-09 05:29:34][354386272854865][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:29:35][354386272854865][356 ms][DEBUG] ADB: done in 62 ms; out [2025-09-09 05:29:35][354386272854865][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:29:35][354386272854865][418 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 05:29:35][354386272854865][418 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 05:29:35][354386272854865][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:29:35][354386272854865][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354386272854865\",\"model\":\"SM-T227U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3054\"}'\'' -e'"" [2025-09-09 05:29:35][354386272854865][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:29:35][354386272854865][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354386272854865\",\"model\":\"SM-T227U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3054\"}'\'' -e'"" [2025-09-09 05:29:38][354386272854865][3792 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_168c54e8-2d81-4bb3-b004-217f0fc469d7","id":"QR_168c54e8-2d81-4bb3-b004-217f0fc469d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:29:38][354386272854865][3948 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 05:29:38][354386272854865][3948 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 05:29:38][354386272854865][3948 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:37:04][358080591483888][1 ms][INFO] === Request start === [2025-09-09 05:37:04][358080591483888][1 ms][DEBUG] START check_scloud [2025-09-09 05:37:04][358080591483888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:37:04][358080591483888][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 16278 4974 23967816 161328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:37:04][358080591483888][287 ms][DEBUG] targetPkg: running [2025-09-09 05:37:04][358080591483888][288 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 05:37:04][358080591483888][288 ms][DEBUG] START check_boot_completed [2025-09-09 05:37:04][358080591483888][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:37:04][358080591483888][334 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 05:37:04][358080591483888][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:37:04][358080591483888][397 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 05:37:04][358080591483888][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 05:37:04][358080591483888][397 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:37:04][358080591483888][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080591483888\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8430\"}'\'' -e'"" [2025-09-09 05:37:04][358080591483888][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:37:04][358080591483888][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080591483888\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8430\"}'\'' -e'"" [2025-09-09 05:37:10][358080591483888][6208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d132944d-2586-4ad9-8eb4-7b5d461146c4","id":"QR_d132944d-2586-4ad9-8eb4-7b5d461146c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:37:10][358080591483888][6364 ms][DEBUG] proc_open done in 5967 ms; code=255; res.len=3343 [2025-09-09 05:37:10][358080591483888][6364 ms][DEBUG] END runCmdUntilRes#1 in 5967 ms [2025-09-09 05:37:10][358080591483888][6364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:37:14][358080591483888][0 ms][INFO] === Request start === [2025-09-09 05:37:14][358080591483888][1 ms][DEBUG] START check_scloud [2025-09-09 05:37:14][358080591483888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:37:14][358080591483888][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 16278 4974 24157588 172212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:37:14][358080591483888][251 ms][DEBUG] targetPkg: running [2025-09-09 05:37:14][358080591483888][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 05:37:14][358080591483888][251 ms][DEBUG] START check_boot_completed [2025-09-09 05:37:14][358080591483888][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:37:14][358080591483888][296 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 05:37:14][358080591483888][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:37:14][358080591483888][345 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 05:37:14][358080591483888][345 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 05:37:14][358080591483888][345 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:37:14][358080591483888][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080591483888\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3787\"}'\'' -e'"" [2025-09-09 05:37:14][358080591483888][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:37:14][358080591483888][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080591483888\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3787\"}'\'' -e'"" [2025-09-09 05:37:18][358080591483888][4685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3e2b9a6-0b64-4410-a432-621addf078bb","id":"QR_b3e2b9a6-0b64-4410-a432-621addf078bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:37:19][358080591483888][4842 ms][DEBUG] proc_open done in 4497 ms; code=255; res.len=3343 [2025-09-09 05:37:19][358080591483888][4842 ms][DEBUG] END runCmdUntilRes#1 in 4497 ms [2025-09-09 05:37:19][358080591483888][4842 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:46:03][352682502474140][1 ms][INFO] === Request start === [2025-09-09 05:46:03][352682502474140][1 ms][DEBUG] START check_scloud [2025-09-09 05:46:03][352682502474140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:46:04][352682502474140][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 16278 4974 24241672 172916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:46:04][352682502474140][269 ms][DEBUG] targetPkg: running [2025-09-09 05:46:04][352682502474140][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 05:46:04][352682502474140][269 ms][DEBUG] START check_boot_completed [2025-09-09 05:46:04][352682502474140][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:46:04][352682502474140][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 05:46:04][352682502474140][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:46:04][352682502474140][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 05:46:04][352682502474140][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 05:46:04][352682502474140][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 05:46:04][352682502474140][503 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1528\nsuccessfulTxPacketsPerSecond: 0.1388856739427328\nretriedTxPackets: 192\nretriedTxPacketsPerSecond: 0.015431741549192534\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1624\nsuccessfulRxPacketsPerSecond: 0.1388856739427328\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 05:46:04][352682502474140][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 05:46:05][352682502474140][1955 ms][DEBUG] SU: done in 1452 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.348/198.348/198.348/0.000 ms\n [2025-09-09 05:46:05][352682502474140][1955 ms][DEBUG] check_internet: online [2025-09-09 05:46:05][352682502474140][1955 ms][DEBUG] rawBody.length=1150 [2025-09-09 05:46:05][352682502474140][1955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502474140\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4220\"}'\'' -e'"" [2025-09-09 05:46:05][352682502474140][1955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:46:05][352682502474140][1955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502474140\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4220\"}'\'' -e'"" [2025-09-09 05:46:09][352682502474140][5829 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_abb4ebaa-0258-4af1-90e0-ae99dc352c50","id":"QR_abb4ebaa-0258-4af1-90e0-ae99dc352c50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:46:09][352682502474140][5986 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 05:46:09][352682502474140][5986 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 05:46:09][352682502474140][5986 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 05:46:12][352682502474140][0 ms][INFO] === Request start === [2025-09-09 05:46:12][352682502474140][1 ms][DEBUG] START check_scloud [2025-09-09 05:46:12][352682502474140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 05:46:12][352682502474140][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 16278 4974 24425692 184152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 05:46:12][352682502474140][314 ms][DEBUG] targetPkg: running [2025-09-09 05:46:12][352682502474140][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 05:46:12][352682502474140][314 ms][DEBUG] START check_boot_completed [2025-09-09 05:46:12][352682502474140][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 05:46:12][352682502474140][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 05:46:12][352682502474140][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 05:46:12][352682502474140][408 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 05:46:12][352682502474140][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 05:46:12][352682502474140][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 05:46:12][352682502474140][564 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1528\nsuccessfulTxPacketsPerSecond: 0.1388856739427328\nretriedTxPackets: 192\nretriedTxPacketsPerSecond: 0.015431741549192534\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1624\nsuccessfulRxPacketsPerSecond: 0.1388856739427328\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 05:46:12][352682502474140][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 05:46:13][352682502474140][923 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.255/259.255/259.255/0.000 ms\n [2025-09-09 05:46:13][352682502474140][924 ms][DEBUG] check_internet: online [2025-09-09 05:46:13][352682502474140][924 ms][DEBUG] rawBody.length=1160 [2025-09-09 05:46:13][352682502474140][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502474140\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6763\"}'\'' -e'"" [2025-09-09 05:46:13][352682502474140][924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 05:46:13][352682502474140][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502474140\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6763\"}'\'' -e'"" [2025-09-09 05:46:17][352682502474140][5875 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_917a31d5-379d-45f7-88c0-7d5ac35952d8","id":"QR_917a31d5-379d-45f7-88c0-7d5ac35952d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 05:46:18][352682502474140][6031 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-09 05:46:18][352682502474140][6032 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 05:46:18][352682502474140][6032 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:00:04][351690514731416][1 ms][INFO] === Request start === [2025-09-09 06:00:04][351690514731416][1 ms][DEBUG] START check_scloud [2025-09-09 06:00:04][351690514731416][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:00:05][351690514731416][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 16278 4974 24521096 173664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:00:05][351690514731416][266 ms][DEBUG] targetPkg: running [2025-09-09 06:00:05][351690514731416][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 06:00:05][351690514731416][266 ms][DEBUG] START check_boot_completed [2025-09-09 06:00:05][351690514731416][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:00:05][351690514731416][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:00:05][351690514731416][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:00:05][351690514731416][375 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:00:05][351690514731416][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:00:05][351690514731416][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:00:05][351690514731416][532 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1850\nsuccessfulTxPacketsPerSecond: 0.1374660426144732\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.013092004058521258\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1911\nsuccessfulRxPacketsPerSecond: 0.1374660426144732\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:00:05][351690514731416][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:00:07][351690514731416][2219 ms][DEBUG] SU: done in 1687 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.205/302.205/302.205/0.000 ms\n [2025-09-09 06:00:07][351690514731416][2219 ms][DEBUG] check_internet: online [2025-09-09 06:00:07][351690514731416][2219 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:00:07][351690514731416][2219 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514731416\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7047\"}'\'' -e'"" [2025-09-09 06:00:07][351690514731416][2219 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:00:07][351690514731416][2219 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514731416\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7047\"}'\'' -e'"" [2025-09-09 06:00:12][351690514731416][7670 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a70d5af5-c563-4d67-8585-17b5e4dbd37b","id":"QR_a70d5af5-c563-4d67-8585-17b5e4dbd37b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:00:12][351690514731416][7827 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-09 06:00:12][351690514731416][7827 ms][DEBUG] END runCmdUntilRes#1 in 5607 ms [2025-09-09 06:00:12][351690514731416][7827 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:00:16][351690514731416][0 ms][INFO] === Request start === [2025-09-09 06:00:16][351690514731416][1 ms][DEBUG] START check_scloud [2025-09-09 06:00:16][351690514731416][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:00:16][351690514731416][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 16278 4974 24681180 175008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:00:16][351690514731416][286 ms][DEBUG] targetPkg: running [2025-09-09 06:00:16][351690514731416][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-09 06:00:16][351690514731416][286 ms][DEBUG] START check_boot_completed [2025-09-09 06:00:16][351690514731416][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:00:16][351690514731416][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:00:16][351690514731416][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:00:16][351690514731416][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 06:00:16][351690514731416][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:00:16][351690514731416][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:00:16][351690514731416][536 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1850\nsuccessfulTxPacketsPerSecond: 0.1374660426144732\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.013092004058521258\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1911\nsuccessfulRxPacketsPerSecond: 0.1374660426144732\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:00:16][351690514731416][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:00:17][351690514731416][912 ms][DEBUG] SU: done in 376 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.253/248.253/248.253/0.000 ms\n [2025-09-09 06:00:17][351690514731416][912 ms][DEBUG] check_internet: online [2025-09-09 06:00:17][351690514731416][912 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:00:17][351690514731416][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514731416\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9216\"}'\'' -e'"" [2025-09-09 06:00:17][351690514731416][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:00:17][351690514731416][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514731416\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9216\"}'\'' -e'"" [2025-09-09 06:00:20][351690514731416][4487 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_721dc3cc-3ab3-4980-a971-be91dff4b456","id":"QR_721dc3cc-3ab3-4980-a971-be91dff4b456","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:00:20][351690514731416][4644 ms][DEBUG] proc_open done in 3731 ms; code=255; res.len=3343 [2025-09-09 06:00:20][351690514731416][4644 ms][DEBUG] END runCmdUntilRes#1 in 3731 ms [2025-09-09 06:00:20][351690514731416][4644 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:02:03][353501841044878][0 ms][INFO] === Request start === [2025-09-09 06:02:03][353501841044878][1 ms][DEBUG] START check_scloud [2025-09-09 06:02:03][353501841044878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:02:03][353501841044878][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 16278 4974 24797084 166932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:02:03][353501841044878][318 ms][DEBUG] targetPkg: running [2025-09-09 06:02:03][353501841044878][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 06:02:03][353501841044878][318 ms][DEBUG] START check_boot_completed [2025-09-09 06:02:03][353501841044878][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:02:03][353501841044878][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:02:03][353501841044878][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:02:03][353501841044878][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:02:03][353501841044878][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:02:03][353501841044878][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:02:03][353501841044878][583 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1921\nsuccessfulTxPacketsPerSecond: 0.6309036139225321\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.1510614286856767\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1977\nsuccessfulRxPacketsPerSecond: 0.5864737819561566\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:02:03][353501841044878][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:02:04][353501841044878][989 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.238/276.238/276.238/0.000 ms\n [2025-09-09 06:02:04][353501841044878][989 ms][DEBUG] check_internet: online [2025-09-09 06:02:04][353501841044878][989 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:02:04][353501841044878][989 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353501841044878\",\"model\":\"SM-F956B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9904\"}'\'' -e'"" [2025-09-09 06:02:04][353501841044878][989 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:02:04][353501841044878][989 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353501841044878\",\"model\":\"SM-F956B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9904\"}'\'' -e'"" [2025-09-09 06:02:09][353501841044878][5832 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_871a7c10-4431-4e07-bc59-7f051e7bf3d7","id":"QR_871a7c10-4431-4e07-bc59-7f051e7bf3d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:02:09][353501841044878][5988 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-09 06:02:09][353501841044878][5988 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 06:02:09][353501841044878][5988 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:02:11][353501841044878][1 ms][INFO] === Request start === [2025-09-09 06:02:11][353501841044878][1 ms][DEBUG] START check_scloud [2025-09-09 06:02:11][353501841044878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:02:12][353501841044878][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 16278 4974 24972452 143700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:02:12][353501841044878][316 ms][DEBUG] targetPkg: running [2025-09-09 06:02:12][353501841044878][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 06:02:12][353501841044878][316 ms][DEBUG] START check_boot_completed [2025-09-09 06:02:12][353501841044878][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:02:12][353501841044878][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:02:12][353501841044878][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:02:12][353501841044878][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:02:12][353501841044878][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 06:02:12][353501841044878][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:02:12][353501841044878][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1921\nsuccessfulTxPacketsPerSecond: 0.6309036139225321\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.1510614286856767\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1977\nsuccessfulRxPacketsPerSecond: 0.5864737819561566\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:02:12][353501841044878][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:02:12][353501841044878][925 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.768/275.768/275.768/0.000 ms\n [2025-09-09 06:02:12][353501841044878][925 ms][DEBUG] check_internet: online [2025-09-09 06:02:12][353501841044878][925 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:02:12][353501841044878][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353501841044878\",\"model\":\"SM-F956B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4726\"}'\'' -e'"" [2025-09-09 06:02:12][353501841044878][925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:02:12][353501841044878][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353501841044878\",\"model\":\"SM-F956B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4726\"}'\'' -e'"" [2025-09-09 06:02:16][353501841044878][5205 ms][DEBUG] proc_open done in 4280 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 06:02:16][353501841044878][5205 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-09 06:02:16][353501841044878][5205 ms][WARN] Detected error: Process with pid 16278 either refused to load frida-agent, or terminated during injectionProcess with pid 16278 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 06:02:16][353501841044878][5205 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 06:02:17][353501841044878][5517 ms][DEBUG] SU: done in 312 ms; outsystem 5388 4974 12472948 229064 ep_poll 0 S system_server\n [2025-09-09 06:02:17][353501841044878][5517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 06:02:17][353501841044878][5674 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 06:02:17][353501841044878][5674 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 06:02:17][353501841044878][5674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 06:02:17][353501841044878][5798 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 06:02:17][353501841044878][5799 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 06:02:17][353501841044878][6001 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 06:02:19][353501841044878][8017 ms][DEBUG] START check_boot_completed [2025-09-09 06:02:19][353501841044878][8017 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:02:19][353501841044878][8064 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:02:19][353501841044878][8064 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:02:19][353501841044878][8110 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:02:19][353501841044878][8110 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 06:02:22][353501841044878][11125 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 06:02:22][353501841044878][11125 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353501841044878\",\"model\":\"SM-F956B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4726\"}'\'' -e'"" [2025-09-09 06:02:28][353501841044878][16296 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36f993bb-0dc1-49c0-818a-48efdcd6fa79","id":"QR_36f993bb-0dc1-49c0-818a-48efdcd6fa79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:02:28][353501841044878][16452 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-09 06:02:28][353501841044878][16452 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-09-09 06:02:28][353501841044878][16452 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:07:04][351617730573033][1 ms][INFO] === Request start === [2025-09-09 06:07:04][351617730573033][1 ms][DEBUG] START check_scloud [2025-09-09 06:07:04][351617730573033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:07:04][351617730573033][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 19554 4974 23488396 127600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:07:04][351617730573033][249 ms][DEBUG] targetPkg: running [2025-09-09 06:07:04][351617730573033][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-09 06:07:04][351617730573033][249 ms][DEBUG] START check_boot_completed [2025-09-09 06:07:04][351617730573033][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:07:04][351617730573033][280 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:07:04][351617730573033][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:07:04][351617730573033][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:07:04][351617730573033][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:07:04][351617730573033][327 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:07:04][351617730573033][327 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617730573033\",\"model\":\"SM-A546W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7942\"}'\'' -e'"" [2025-09-09 06:07:04][351617730573033][327 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:07:04][351617730573033][328 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617730573033\",\"model\":\"SM-A546W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7942\"}'\'' -e'"" [2025-09-09 06:07:11][351617730573033][6388 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd800001-0cfe-4365-afa3-2c25feef2471","id":"QR_dd800001-0cfe-4365-afa3-2c25feef2471","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:07:11][351617730573033][6544 ms][DEBUG] proc_open done in 6217 ms; code=255; res.len=3343 [2025-09-09 06:07:11][351617730573033][6544 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-09-09 06:07:11][351617730573033][6544 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:07:14][351617730573033][0 ms][INFO] === Request start === [2025-09-09 06:07:14][351617730573033][1 ms][DEBUG] START check_scloud [2025-09-09 06:07:14][351617730573033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:07:15][351617730573033][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 19554 4974 23620564 138296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:07:15][351617730573033][308 ms][DEBUG] targetPkg: running [2025-09-09 06:07:15][351617730573033][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 06:07:15][351617730573033][309 ms][DEBUG] START check_boot_completed [2025-09-09 06:07:15][351617730573033][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:07:15][351617730573033][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:07:15][351617730573033][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:07:15][351617730573033][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:07:15][351617730573033][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:07:15][351617730573033][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:07:15][351617730573033][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617730573033\",\"model\":\"SM-A546W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4987\"}'\'' -e'"" [2025-09-09 06:07:15][351617730573033][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:07:15][351617730573033][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617730573033\",\"model\":\"SM-A546W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4987\"}'\'' -e'"" [2025-09-09 06:07:19][351617730573033][4354 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8477a066-049f-4628-b19a-e40c74bc4f31","id":"QR_8477a066-049f-4628-b19a-e40c74bc4f31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:07:19][351617730573033][4510 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-09 06:07:19][351617730573033][4510 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-09 06:07:19][351617730573033][4510 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:19:03][355731677864945][1 ms][INFO] === Request start === [2025-09-09 06:19:03][355731677864945][1 ms][DEBUG] START check_scloud [2025-09-09 06:19:03][355731677864945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:19:04][355731677864945][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 19554 4974 23767140 150072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:19:04][355731677864945][317 ms][DEBUG] targetPkg: running [2025-09-09 06:19:04][355731677864945][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 06:19:04][355731677864945][317 ms][DEBUG] START check_boot_completed [2025-09-09 06:19:04][355731677864945][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:19:04][355731677864945][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:19:04][355731677864945][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:19:04][355731677864945][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:19:04][355731677864945][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:19:04][355731677864945][395 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:19:04][355731677864945][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677864945\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6780\"}'\'' -e'"" [2025-09-09 06:19:04][355731677864945][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:19:04][355731677864945][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677864945\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6780\"}'\'' -e'"" [2025-09-09 06:19:08][355731677864945][5003 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7365e5f8-ee5f-4fb7-8f72-b79b42bc049a","id":"QR_7365e5f8-ee5f-4fb7-8f72-b79b42bc049a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:19:08][355731677864945][5159 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-09 06:19:08][355731677864945][5159 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-09 06:19:08][355731677864945][5159 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:19:11][355731677864945][0 ms][INFO] === Request start === [2025-09-09 06:19:11][355731677864945][1 ms][DEBUG] START check_scloud [2025-09-09 06:19:11][355731677864945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:19:11][355731677864945][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 19554 4974 23912888 161800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:19:11][355731677864945][306 ms][DEBUG] targetPkg: running [2025-09-09 06:19:11][355731677864945][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 06:19:11][355731677864945][306 ms][DEBUG] START check_boot_completed [2025-09-09 06:19:11][355731677864945][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:19:11][355731677864945][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:19:11][355731677864945][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:19:11][355731677864945][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:19:11][355731677864945][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:19:11][355731677864945][384 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:19:11][355731677864945][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677864945\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7613\"}'\'' -e'"" [2025-09-09 06:19:11][355731677864945][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:19:11][355731677864945][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677864945\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7613\"}'\'' -e'"" [2025-09-09 06:19:16][355731677864945][5289 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccba2762-b1cd-41bb-9724-e1034bf40ef5","id":"QR_ccba2762-b1cd-41bb-9724-e1034bf40ef5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:19:16][355731677864945][5445 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-09 06:19:16][355731677864945][5445 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-09 06:19:16][355731677864945][5445 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:24:06][351642487647319][1 ms][INFO] === Request start === [2025-09-09 06:24:06][351642487647319][1 ms][DEBUG] START check_scloud [2025-09-09 06:24:06][351642487647319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:24:07][351642487647319][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 19554 4974 24002168 173356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:24:07][351642487647319][257 ms][DEBUG] targetPkg: running [2025-09-09 06:24:07][351642487647319][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 06:24:07][351642487647319][257 ms][DEBUG] START check_boot_completed [2025-09-09 06:24:07][351642487647319][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:24:07][351642487647319][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:24:07][351642487647319][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:24:07][351642487647319][352 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:24:07][351642487647319][352 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 06:24:07][351642487647319][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:24:07][351642487647319][492 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2349\nsuccessfulTxPacketsPerSecond: 0.13584228120533448\nretriedTxPackets: 346\nretriedTxPacketsPerSecond: 0.011812372278724736\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2367\nsuccessfulRxPacketsPerSecond: 0.13584228120533448\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:24:07][351642487647319][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:24:08][351642487647319][1757 ms][DEBUG] SU: done in 1264 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.956/203.956/203.956/0.000 ms\n [2025-09-09 06:24:08][351642487647319][1757 ms][DEBUG] check_internet: online [2025-09-09 06:24:08][351642487647319][1757 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:24:08][351642487647319][1757 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642487647319\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2882\"}'\'' -e'"" [2025-09-09 06:24:08][351642487647319][1757 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:24:08][351642487647319][1757 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642487647319\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2882\"}'\'' -e'"" [2025-09-09 06:24:13][351642487647319][6490 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8903bc33-0d48-4c9f-beee-2265199c0bda","id":"QR_8903bc33-0d48-4c9f-beee-2265199c0bda","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:24:13][351642487647319][6646 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 06:24:13][351642487647319][6646 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-09 06:24:13][351642487647319][6646 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:28:04][350822570239148][1 ms][INFO] === Request start === [2025-09-09 06:28:04][350822570239148][1 ms][DEBUG] START check_scloud [2025-09-09 06:28:04][350822570239148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:28:04][350822570239148][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19554 4974 24160988 184184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:28:04][350822570239148][304 ms][DEBUG] targetPkg: running [2025-09-09 06:28:04][350822570239148][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 06:28:04][350822570239148][304 ms][DEBUG] START check_boot_completed [2025-09-09 06:28:04][350822570239148][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:28:04][350822570239148][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:28:04][350822570239148][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:28:04][350822570239148][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:28:04][350822570239148][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:28:04][350822570239148][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:28:05][350822570239148][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2349\nsuccessfulTxPacketsPerSecond: 0.13584228120533448\nretriedTxPackets: 346\nretriedTxPacketsPerSecond: 0.011812372278724736\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2367\nsuccessfulRxPacketsPerSecond: 0.13584228120533448\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:28:05][350822570239148][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:28:05][350822570239148][913 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.418/272.418/272.418/0.000 ms\n [2025-09-09 06:28:05][350822570239148][913 ms][DEBUG] check_internet: online [2025-09-09 06:28:05][350822570239148][913 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:28:05][350822570239148][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822570239148\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9069\"}'\'' -e'"" [2025-09-09 06:28:05][350822570239148][914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:28:05][350822570239148][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822570239148\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9069\"}'\'' -e'"" [2025-09-09 06:28:11][350822570239148][6896 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_baa478a6-a16b-4456-ba3b-6b4245a96d27","id":"QR_baa478a6-a16b-4456-ba3b-6b4245a96d27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:28:11][350822570239148][7052 ms][DEBUG] proc_open done in 6138 ms; code=255; res.len=3343 [2025-09-09 06:28:11][350822570239148][7052 ms][DEBUG] END runCmdUntilRes#1 in 6139 ms [2025-09-09 06:28:11][350822570239148][7052 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:28:15][350822570239148][0 ms][INFO] === Request start === [2025-09-09 06:28:15][350822570239148][1 ms][DEBUG] START check_scloud [2025-09-09 06:28:15][350822570239148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:28:15][350822570239148][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 19554 4974 24304484 195644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:28:15][350822570239148][266 ms][DEBUG] targetPkg: running [2025-09-09 06:28:15][350822570239148][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 06:28:15][350822570239148][266 ms][DEBUG] START check_boot_completed [2025-09-09 06:28:15][350822570239148][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:28:15][350822570239148][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:28:15][350822570239148][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:28:15][350822570239148][406 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 06:28:15][350822570239148][406 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 06:28:15][350822570239148][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:28:15][350822570239148][547 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2349\nsuccessfulTxPacketsPerSecond: 0.13584228120533448\nretriedTxPackets: 346\nretriedTxPacketsPerSecond: 0.011812372278724736\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2367\nsuccessfulRxPacketsPerSecond: 0.13584228120533448\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:28:15][350822570239148][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:28:16][350822570239148][984 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=284 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 284.182/284.182/284.182/0.000 ms\n [2025-09-09 06:28:16][350822570239148][984 ms][DEBUG] check_internet: online [2025-09-09 06:28:16][350822570239148][984 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:28:16][350822570239148][984 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822570239148\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1349\"}'\'' -e'"" [2025-09-09 06:28:16][350822570239148][984 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:28:16][350822570239148][984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822570239148\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1349\"}'\'' -e'"" [2025-09-09 06:28:19][350822570239148][4686 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52bd98d5-272a-4062-ab55-e0f59bc4aab0","id":"QR_52bd98d5-272a-4062-ab55-e0f59bc4aab0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:28:19][350822570239148][4842 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-09 06:28:19][350822570239148][4842 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 06:28:19][350822570239148][4842 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:33:03][354068191653095][1 ms][INFO] === Request start === [2025-09-09 06:33:03][354068191653095][1 ms][DEBUG] START check_scloud [2025-09-09 06:33:03][354068191653095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:33:04][354068191653095][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 19554 4974 24456612 204236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:33:04][354068191653095][272 ms][DEBUG] targetPkg: running [2025-09-09 06:33:04][354068191653095][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-09 06:33:04][354068191653095][272 ms][DEBUG] START check_boot_completed [2025-09-09 06:33:04][354068191653095][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:33:04][354068191653095][304 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:33:04][354068191653095][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:33:04][354068191653095][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:33:04][354068191653095][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:33:04][354068191653095][350 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:33:04][354068191653095][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191653095\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7100\"}'\'' -e'"" [2025-09-09 06:33:04][354068191653095][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:33:04][354068191653095][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191653095\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7100\"}'\'' -e'"" [2025-09-09 06:33:08][354068191653095][4865 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4cbe189-8159-4705-8b90-670e06feb804","id":"QR_d4cbe189-8159-4705-8b90-670e06feb804","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:33:08][354068191653095][5021 ms][DEBUG] proc_open done in 4671 ms; code=255; res.len=3343 [2025-09-09 06:33:08][354068191653095][5021 ms][DEBUG] END runCmdUntilRes#1 in 4671 ms [2025-09-09 06:33:08][354068191653095][5021 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:33:11][354068191653095][0 ms][INFO] === Request start === [2025-09-09 06:33:11][354068191653095][1 ms][DEBUG] START check_scloud [2025-09-09 06:33:11][354068191653095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:33:11][354068191653095][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 19554 4974 24593068 183588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:33:11][354068191653095][292 ms][DEBUG] targetPkg: running [2025-09-09 06:33:11][354068191653095][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 06:33:11][354068191653095][292 ms][DEBUG] START check_boot_completed [2025-09-09 06:33:11][354068191653095][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:33:11][354068191653095][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:33:11][354068191653095][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:33:11][354068191653095][387 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:33:11][354068191653095][387 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 06:33:11][354068191653095][387 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:33:11][354068191653095][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191653095\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4291\"}'\'' -e'"" [2025-09-09 06:33:11][354068191653095][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:33:11][354068191653095][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191653095\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4291\"}'\'' -e'"" [2025-09-09 06:33:16][354068191653095][5666 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd6fc7ef-ee47-4c9a-824b-be891b68174e","id":"QR_dd6fc7ef-ee47-4c9a-824b-be891b68174e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:33:17][354068191653095][5822 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-09 06:33:17][354068191653095][5822 ms][DEBUG] END runCmdUntilRes#1 in 5435 ms [2025-09-09 06:33:17][354068191653095][5822 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:36:04][358709983085642][1 ms][INFO] === Request start === [2025-09-09 06:36:04][358709983085642][1 ms][DEBUG] START check_scloud [2025-09-09 06:36:04][358709983085642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:36:04][358709983085642][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 19554 4974 24721260 194812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:36:04][358709983085642][266 ms][DEBUG] targetPkg: running [2025-09-09 06:36:04][358709983085642][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 06:36:04][358709983085642][266 ms][DEBUG] START check_boot_completed [2025-09-09 06:36:04][358709983085642][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:36:04][358709983085642][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:36:04][358709983085642][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:36:04][358709983085642][391 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 06:36:04][358709983085642][391 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 06:36:04][358709983085642][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:36:05][358709983085642][532 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2515\nsuccessfulTxPacketsPerSecond: 0.15167898854578993\nretriedTxPackets: 389\nretriedTxPacketsPerSecond: 0.02446435299125644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2515\nsuccessfulRxPacketsPerSecond: 0.13700037675103607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:36:05][358709983085642][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:36:06][358709983085642][1859 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.345/199.345/199.345/0.000 ms\n [2025-09-09 06:36:06][358709983085642][1860 ms][DEBUG] check_internet: online [2025-09-09 06:36:06][358709983085642][1860 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:36:06][358709983085642][1860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709983085642\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1147\"}'\'' -e'"" [2025-09-09 06:36:06][358709983085642][1860 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:36:06][358709983085642][1860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709983085642\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1147\"}'\'' -e'"" [2025-09-09 06:36:11][358709983085642][7218 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bebdeb92-4518-4164-9e26-f9897d76292b","id":"QR_bebdeb92-4518-4164-9e26-f9897d76292b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:36:11][358709983085642][7374 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-09 06:36:11][358709983085642][7374 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-09 06:36:11][358709983085642][7374 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:36:15][358709983085642][0 ms][INFO] === Request start === [2025-09-09 06:36:15][358709983085642][1 ms][DEBUG] START check_scloud [2025-09-09 06:36:15][358709983085642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:36:15][358709983085642][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19554 4974 24853496 185888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:36:15][358709983085642][304 ms][DEBUG] targetPkg: running [2025-09-09 06:36:15][358709983085642][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 06:36:15][358709983085642][304 ms][DEBUG] START check_boot_completed [2025-09-09 06:36:15][358709983085642][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:36:15][358709983085642][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:36:15][358709983085642][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:36:15][358709983085642][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:36:15][358709983085642][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 06:36:15][358709983085642][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:36:15][358709983085642][507 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2515\nsuccessfulTxPacketsPerSecond: 0.15167898854578993\nretriedTxPackets: 389\nretriedTxPacketsPerSecond: 0.02446435299125644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2515\nsuccessfulRxPacketsPerSecond: 0.13700037675103607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:36:15][358709983085642][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:36:16][358709983085642][897 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.853/256.853/256.853/0.000 ms\n [2025-09-09 06:36:16][358709983085642][897 ms][DEBUG] check_internet: online [2025-09-09 06:36:16][358709983085642][897 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:36:16][358709983085642][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709983085642\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2017\"}'\'' -e'"" [2025-09-09 06:36:16][358709983085642][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:36:16][358709983085642][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709983085642\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2017\"}'\'' -e'"" [2025-09-09 06:36:20][358709983085642][4756 ms][DEBUG] proc_open done in 3859 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 06:36:20][358709983085642][4756 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-09 06:36:20][358709983085642][4757 ms][WARN] Detected error: Process with pid 19554 either refused to load frida-agent, or terminated during injectionProcess with pid 19554 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 06:36:20][358709983085642][4757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 06:36:20][358709983085642][5053 ms][DEBUG] SU: done in 296 ms; outsystem 5388 4974 12503544 218464 ep_poll 0 S system_server\n [2025-09-09 06:36:20][358709983085642][5053 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 06:36:20][358709983085642][5193 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 06:36:20][358709983085642][5194 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 06:36:20][358709983085642][5194 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 06:36:20][358709983085642][5318 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 06:36:20][358709983085642][5319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 06:36:20][358709983085642][5506 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 06:36:22][358709983085642][7521 ms][DEBUG] START check_boot_completed [2025-09-09 06:36:22][358709983085642][7521 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:36:23][358709983085642][7568 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:36:23][358709983085642][7568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:36:23][358709983085642][7614 ms][DEBUG] SU: done in 46 ms; out [2025-09-09 06:36:23][358709983085642][7614 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 06:36:26][358709983085642][10629 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 06:36:26][358709983085642][10630 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709983085642\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2017\"}'\'' -e'"" [2025-09-09 06:36:29][358709983085642][14316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07c34f57-190a-4a2d-ac5d-8f11ef9e9be2","id":"QR_07c34f57-190a-4a2d-ac5d-8f11ef9e9be2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:36:29][358709983085642][14472 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-09-09 06:36:29][358709983085642][14472 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-09-09 06:36:29][358709983085642][14473 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:40:03][352303781740214][1 ms][INFO] === Request start === [2025-09-09 06:40:03][352303781740214][1 ms][DEBUG] START check_scloud [2025-09-09 06:40:03][352303781740214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:40:03][352303781740214][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 22128 4974 23485352 127776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:40:03][352303781740214][300 ms][DEBUG] targetPkg: running [2025-09-09 06:40:03][352303781740214][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 06:40:03][352303781740214][300 ms][DEBUG] START check_boot_completed [2025-09-09 06:40:03][352303781740214][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:40:03][352303781740214][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:40:03][352303781740214][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:40:03][352303781740214][379 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:40:03][352303781740214][379 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 06:40:03][352303781740214][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:40:03][352303781740214][488 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2751\nsuccessfulTxPacketsPerSecond: 0.7670605977872252\nretriedTxPackets: 446\nretriedTxPacketsPerSecond: 0.1852646359062366\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2731\nsuccessfulRxPacketsPerSecond: 0.7020554623815282\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:40:03][352303781740214][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:40:04][352303781740214][770 ms][DEBUG] SU: done in 282 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.951/185.951/185.951/0.000 ms\n [2025-09-09 06:40:04][352303781740214][770 ms][DEBUG] check_internet: online [2025-09-09 06:40:04][352303781740214][770 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:40:04][352303781740214][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303781740214\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4455\"}'\'' -e'"" [2025-09-09 06:40:04][352303781740214][770 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:40:04][352303781740214][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303781740214\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4455\"}'\'' -e'"" [2025-09-09 06:40:08][352303781740214][5252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c120f01a-0db4-4f9e-8f6f-167b21eaf4b0","id":"QR_c120f01a-0db4-4f9e-8f6f-167b21eaf4b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:40:08][352303781740214][5408 ms][DEBUG] proc_open done in 4638 ms; code=255; res.len=3343 [2025-09-09 06:40:08][352303781740214][5408 ms][DEBUG] END runCmdUntilRes#1 in 4638 ms [2025-09-09 06:40:08][352303781740214][5408 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:40:11][352303781740214][0 ms][INFO] === Request start === [2025-09-09 06:40:11][352303781740214][1 ms][DEBUG] START check_scloud [2025-09-09 06:40:11][352303781740214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:40:11][352303781740214][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 22128 4974 23650288 138380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:40:11][352303781740214][321 ms][DEBUG] targetPkg: running [2025-09-09 06:40:11][352303781740214][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 06:40:11][352303781740214][321 ms][DEBUG] START check_boot_completed [2025-09-09 06:40:11][352303781740214][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:40:11][352303781740214][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:40:11][352303781740214][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:40:11][352303781740214][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:40:11][352303781740214][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:40:11][352303781740214][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:40:11][352303781740214][523 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2751\nsuccessfulTxPacketsPerSecond: 0.7670605977872252\nretriedTxPackets: 446\nretriedTxPacketsPerSecond: 0.1852646359062366\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2731\nsuccessfulRxPacketsPerSecond: 0.7020554623815282\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:40:11][352303781740214][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:40:11][352303781740214][884 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.694/269.694/269.694/0.000 ms\n [2025-09-09 06:40:11][352303781740214][884 ms][DEBUG] check_internet: online [2025-09-09 06:40:11][352303781740214][884 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:40:11][352303781740214][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303781740214\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7440\"}'\'' -e'"" [2025-09-09 06:40:11][352303781740214][885 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:40:11][352303781740214][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303781740214\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7440\"}'\'' -e'"" [2025-09-09 06:40:16][352303781740214][5835 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b25df3a5-fd86-4a11-ac54-c48590bb9136","id":"QR_b25df3a5-fd86-4a11-ac54-c48590bb9136","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:40:17][352303781740214][5991 ms][DEBUG] proc_open done in 5106 ms; code=255; res.len=3343 [2025-09-09 06:40:17][352303781740214][5991 ms][DEBUG] END runCmdUntilRes#1 in 5106 ms [2025-09-09 06:40:17][352303781740214][5991 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:40:22][359653091084197][1 ms][INFO] === Request start === [2025-09-09 06:40:22][359653091084197][1 ms][DEBUG] START check_scloud [2025-09-09 06:40:22][359653091084197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:40:22][359653091084197][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 22128 4974 23799992 150048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:40:22][359653091084197][295 ms][DEBUG] targetPkg: running [2025-09-09 06:40:22][359653091084197][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 06:40:22][359653091084197][295 ms][DEBUG] START check_boot_completed [2025-09-09 06:40:22][359653091084197][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:40:22][359653091084197][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:40:22][359653091084197][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:40:22][359653091084197][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:40:22][359653091084197][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 06:40:22][359653091084197][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:40:22][359653091084197][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2751\nsuccessfulTxPacketsPerSecond: 0.7670605977872252\nretriedTxPackets: 446\nretriedTxPacketsPerSecond: 0.1852646359062366\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2731\nsuccessfulRxPacketsPerSecond: 0.7020554623815282\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:40:22][359653091084197][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:40:23][359653091084197][1092 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.542/199.542/199.542/0.000 ms\n [2025-09-09 06:40:23][359653091084197][1092 ms][DEBUG] check_internet: online [2025-09-09 06:40:23][359653091084197][1092 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:40:23][359653091084197][1092 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359653091084197\",\"model\":\"SM-T387W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5665\"}'\'' -e'"" [2025-09-09 06:40:23][359653091084197][1092 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:40:23][359653091084197][1092 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359653091084197\",\"model\":\"SM-T387W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5665\"}'\'' -e'"" [2025-09-09 06:40:28][359653091084197][6043 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b69991e8-03b7-4ae1-bc52-a1b1be1a418e","id":"QR_b69991e8-03b7-4ae1-bc52-a1b1be1a418e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:40:28][359653091084197][6200 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-09 06:40:28][359653091084197][6200 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 06:40:28][359653091084197][6200 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:40:32][359653091084197][0 ms][INFO] === Request start === [2025-09-09 06:40:32][359653091084197][1 ms][DEBUG] START check_scloud [2025-09-09 06:40:32][359653091084197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:40:32][359653091084197][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 22128 4974 23909660 161176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:40:32][359653091084197][292 ms][DEBUG] targetPkg: running [2025-09-09 06:40:32][359653091084197][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 06:40:32][359653091084197][292 ms][DEBUG] START check_boot_completed [2025-09-09 06:40:32][359653091084197][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:40:32][359653091084197][337 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 06:40:32][359653091084197][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:40:32][359653091084197][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:40:32][359653091084197][384 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 06:40:32][359653091084197][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:40:32][359653091084197][509 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2751\nsuccessfulTxPacketsPerSecond: 0.7670605977872252\nretriedTxPackets: 446\nretriedTxPacketsPerSecond: 0.1852646359062366\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2731\nsuccessfulRxPacketsPerSecond: 0.7020554623815282\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:40:32][359653091084197][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:40:32][359653091084197][837 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.698/215.698/215.698/0.000 ms\n [2025-09-09 06:40:32][359653091084197][837 ms][DEBUG] check_internet: online [2025-09-09 06:40:32][359653091084197][837 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:40:32][359653091084197][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359653091084197\",\"model\":\"SM-T387W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-09-09 06:40:32][359653091084197][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:40:32][359653091084197][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359653091084197\",\"model\":\"SM-T387W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-09-09 06:40:36][359653091084197][4836 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78e49467-94ce-4334-adce-551744e67e48","id":"QR_78e49467-94ce-4334-adce-551744e67e48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:40:37][359653091084197][4992 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-09-09 06:40:37][359653091084197][4992 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-09 06:40:37][359653091084197][4992 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:41:03][350391371764209][1 ms][INFO] === Request start === [2025-09-09 06:41:03][350391371764209][1 ms][DEBUG] START check_scloud [2025-09-09 06:41:03][350391371764209][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:41:03][350391371764209][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 22128 4974 23984568 173320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:41:03][350391371764209][297 ms][DEBUG] targetPkg: running [2025-09-09 06:41:03][350391371764209][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 06:41:03][350391371764209][297 ms][DEBUG] START check_boot_completed [2025-09-09 06:41:03][350391371764209][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:41:03][350391371764209][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:41:03][350391371764209][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:41:03][350391371764209][437 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 06:41:03][350391371764209][438 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 06:41:03][350391371764209][438 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:41:03][350391371764209][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391371764209\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9635\"}'\'' -e'"" [2025-09-09 06:41:03][350391371764209][438 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:41:03][350391371764209][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391371764209\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9635\"}'\'' -e'"" [2025-09-09 06:41:07][350391371764209][3812 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c1e8ebe-f132-41e6-8d05-5515ea770406","id":"QR_8c1e8ebe-f132-41e6-8d05-5515ea770406","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:41:07][350391371764209][3968 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 06:41:07][350391371764209][3968 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 06:41:07][350391371764209][3968 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:41:09][350391371764209][0 ms][INFO] === Request start === [2025-09-09 06:41:09][350391371764209][1 ms][DEBUG] START check_scloud [2025-09-09 06:41:09][350391371764209][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:41:10][350391371764209][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 22128 4974 24141504 184164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:41:10][350391371764209][261 ms][DEBUG] targetPkg: running [2025-09-09 06:41:10][350391371764209][261 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 06:41:10][350391371764209][261 ms][DEBUG] START check_boot_completed [2025-09-09 06:41:10][350391371764209][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:41:10][350391371764209][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:41:10][350391371764209][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:41:10][350391371764209][370 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:41:10][350391371764209][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:41:10][350391371764209][370 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:41:10][350391371764209][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391371764209\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9948\"}'\'' -e'"" [2025-09-09 06:41:10][350391371764209][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:41:10][350391371764209][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350391371764209\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9948\"}'\'' -e'"" [2025-09-09 06:41:14][350391371764209][5103 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5083a62-18cf-4348-8aa2-fadf44d12793","id":"QR_c5083a62-18cf-4348-8aa2-fadf44d12793","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:41:15][350391371764209][5260 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 06:41:15][350391371764209][5260 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-09 06:41:15][350391371764209][5260 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:46:03][352192665716535][1 ms][INFO] === Request start === [2025-09-09 06:46:03][352192665716535][1 ms][DEBUG] START check_scloud [2025-09-09 06:46:03][352192665716535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:46:03][352192665716535][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22128 4974 24253312 195820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:46:03][352192665716535][314 ms][DEBUG] targetPkg: running [2025-09-09 06:46:03][352192665716535][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 06:46:03][352192665716535][314 ms][DEBUG] START check_boot_completed [2025-09-09 06:46:03][352192665716535][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:46:03][352192665716535][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:46:03][352192665716535][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:46:03][352192665716535][393 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:46:03][352192665716535][393 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 06:46:03][352192665716535][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:46:03][352192665716535][548 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2935\nsuccessfulTxPacketsPerSecond: 0.6114907079998937\nretriedTxPackets: 490\nretriedTxPacketsPerSecond: 0.14622603886953978\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2893\nsuccessfulRxPacketsPerSecond: 0.5383776885651238\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:46:03][352192665716535][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:46:05][352192665716535][2017 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.887/300.887/300.887/0.000 ms\n [2025-09-09 06:46:05][352192665716535][2017 ms][DEBUG] check_internet: online [2025-09-09 06:46:05][352192665716535][2017 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:46:05][352192665716535][2017 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665716535\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6096\"}'\'' -e'"" [2025-09-09 06:46:05][352192665716535][2017 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:46:05][352192665716535][2017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665716535\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6096\"}'\'' -e'"" [2025-09-09 06:46:09][352192665716535][5969 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab8d72d3-699d-4315-a5e9-a0fb4ee96cfc","id":"QR_ab8d72d3-699d-4315-a5e9-a0fb4ee96cfc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:46:09][352192665716535][6125 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-09 06:46:09][352192665716535][6125 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-09 06:46:09][352192665716535][6125 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:46:11][352192665716535][0 ms][INFO] === Request start === [2025-09-09 06:46:11][352192665716535][1 ms][DEBUG] START check_scloud [2025-09-09 06:46:11][352192665716535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:46:11][352192665716535][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22128 4974 24379400 207596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:46:11][352192665716535][308 ms][DEBUG] targetPkg: running [2025-09-09 06:46:11][352192665716535][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 06:46:11][352192665716535][308 ms][DEBUG] START check_boot_completed [2025-09-09 06:46:11][352192665716535][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:46:11][352192665716535][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:46:11][352192665716535][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:46:11][352192665716535][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:46:11][352192665716535][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:46:11][352192665716535][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:46:12][352192665716535][527 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2935\nsuccessfulTxPacketsPerSecond: 0.6114907079998937\nretriedTxPackets: 490\nretriedTxPacketsPerSecond: 0.14622603886953978\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2893\nsuccessfulRxPacketsPerSecond: 0.5383776885651238\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:46:12][352192665716535][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:46:12][352192665716535][855 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.192/216.192/216.192/0.000 ms\n [2025-09-09 06:46:12][352192665716535][855 ms][DEBUG] check_internet: online [2025-09-09 06:46:12][352192665716535][855 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:46:12][352192665716535][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665716535\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3096\"}'\'' -e'"" [2025-09-09 06:46:12][352192665716535][855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:46:12][352192665716535][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665716535\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3096\"}'\'' -e'"" [2025-09-09 06:46:17][352192665716535][6041 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94661aa5-d202-4892-ba27-e46eda6be51a","id":"QR_94661aa5-d202-4892-ba27-e46eda6be51a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:46:17][352192665716535][6197 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-09 06:46:17][352192665716535][6197 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-09 06:46:17][352192665716535][6197 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:46:21][352469858831747][0 ms][INFO] === Request start === [2025-09-09 06:46:21][352469858831747][1 ms][DEBUG] START check_scloud [2025-09-09 06:46:21][352469858831747][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:46:22][352469858831747][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22128 4974 24536208 217924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:46:22][352469858831747][309 ms][DEBUG] targetPkg: running [2025-09-09 06:46:22][352469858831747][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 06:46:22][352469858831747][309 ms][DEBUG] START check_boot_completed [2025-09-09 06:46:22][352469858831747][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:46:22][352469858831747][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:46:22][352469858831747][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:46:22][352469858831747][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:46:22][352469858831747][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 06:46:22][352469858831747][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:46:22][352469858831747][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2935\nsuccessfulTxPacketsPerSecond: 0.6114907079998937\nretriedTxPackets: 490\nretriedTxPacketsPerSecond: 0.14622603886953978\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2893\nsuccessfulRxPacketsPerSecond: 0.5383776885651238\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:46:22][352469858831747][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:46:22][352469858831747][949 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.779/309.779/309.779/0.000 ms\n [2025-09-09 06:46:22][352469858831747][949 ms][DEBUG] check_internet: online [2025-09-09 06:46:22][352469858831747][949 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:46:22][352469858831747][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858831747\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2917\"}'\'' -e'"" [2025-09-09 06:46:22][352469858831747][949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:46:22][352469858831747][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858831747\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2917\"}'\'' -e'"" [2025-09-09 06:46:26][352469858831747][4339 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_039891a0-4e95-4acc-9c20-8b3bbbed904d","id":"QR_039891a0-4e95-4acc-9c20-8b3bbbed904d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:46:26][352469858831747][4495 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-09 06:46:26][352469858831747][4495 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 06:46:26][352469858831747][4495 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:46:28][352469858831747][0 ms][INFO] === Request start === [2025-09-09 06:46:28][352469858831747][1 ms][DEBUG] START check_scloud [2025-09-09 06:46:28][352469858831747][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:46:28][352469858831747][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 22128 4974 24701804 229836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:46:28][352469858831747][297 ms][DEBUG] targetPkg: running [2025-09-09 06:46:28][352469858831747][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 06:46:28][352469858831747][297 ms][DEBUG] START check_boot_completed [2025-09-09 06:46:28][352469858831747][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:46:29][352469858831747][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:46:29][352469858831747][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:46:29][352469858831747][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:46:29][352469858831747][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:46:29][352469858831747][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:46:29][352469858831747][531 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2935\nsuccessfulTxPacketsPerSecond: 0.6114907079998937\nretriedTxPackets: 490\nretriedTxPacketsPerSecond: 0.14622603886953978\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2893\nsuccessfulRxPacketsPerSecond: 0.5383776885651238\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:46:29][352469858831747][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:46:29][352469858831747][859 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.259/223.259/223.259/0.000 ms\n [2025-09-09 06:46:29][352469858831747][859 ms][DEBUG] check_internet: online [2025-09-09 06:46:29][352469858831747][859 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:46:29][352469858831747][859 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858831747\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5594\"}'\'' -e'"" [2025-09-09 06:46:29][352469858831747][859 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:46:29][352469858831747][859 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858831747\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5594\"}'\'' -e'"" [2025-09-09 06:46:34][352469858831747][5467 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea9d1999-be64-4c27-b292-2339d198e6b5","id":"QR_ea9d1999-be64-4c27-b292-2339d198e6b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:46:34][352469858831747][5623 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-09 06:46:34][352469858831747][5623 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-09 06:46:34][352469858831747][5623 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:52:03][350731018657318][1 ms][INFO] === Request start === [2025-09-09 06:52:03][350731018657318][1 ms][DEBUG] START check_scloud [2025-09-09 06:52:03][350731018657318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:52:03][350731018657318][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22128 4974 24776588 241220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:52:03][350731018657318][309 ms][DEBUG] targetPkg: running [2025-09-09 06:52:03][350731018657318][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 06:52:03][350731018657318][309 ms][DEBUG] START check_boot_completed [2025-09-09 06:52:03][350731018657318][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:52:04][350731018657318][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:52:04][350731018657318][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:52:04][350731018657318][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:52:04][350731018657318][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:52:04][350731018657318][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:52:04][350731018657318][543 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3084\nsuccessfulTxPacketsPerSecond: 0.494903161733689\nretriedTxPackets: 529\nretriedTxPacketsPerSecond: 0.12953841146049577\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3020\nsuccessfulRxPacketsPerSecond: 0.4218302116790503\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:52:04][350731018657318][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:52:05][350731018657318][1824 ms][DEBUG] SU: done in 1281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.531/199.531/199.531/0.000 ms\n [2025-09-09 06:52:05][350731018657318][1825 ms][DEBUG] check_internet: online [2025-09-09 06:52:05][350731018657318][1825 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:52:05][350731018657318][1825 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018657318\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5586\"}'\'' -e'"" [2025-09-09 06:52:05][350731018657318][1825 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:52:05][350731018657318][1825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018657318\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5586\"}'\'' -e'"" [2025-09-09 06:52:09][350731018657318][5480 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 06:52:09][350731018657318][5480 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 06:52:09][350731018657318][5480 ms][WARN] Detected error: Process with pid 22128 either refused to load frida-agent, or terminated during injectionProcess with pid 22128 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 06:52:09][350731018657318][5480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 06:52:09][350731018657318][5777 ms][DEBUG] SU: done in 297 ms; outsystem 5388 4974 12520980 217552 ep_poll 0 S system_server\n [2025-09-09 06:52:09][350731018657318][5777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 06:52:09][350731018657318][5917 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 06:52:09][350731018657318][5917 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 06:52:09][350731018657318][5917 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 06:52:09][350731018657318][6058 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 06:52:09][350731018657318][6058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 06:52:09][350731018657318][6230 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 06:52:11][350731018657318][8245 ms][DEBUG] START check_boot_completed [2025-09-09 06:52:11][350731018657318][8245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:52:11][350731018657318][8292 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:52:11][350731018657318][8292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:52:12][350731018657318][8339 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:52:12][350731018657318][8339 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 06:52:15][350731018657318][11353 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 06:52:15][350731018657318][11353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018657318\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5586\"}'\'' -e'"" [2025-09-09 06:52:18][350731018657318][14946 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15511829-d903-415f-8ed4-70ba7a3edc4a","id":"QR_15511829-d903-415f-8ed4-70ba7a3edc4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:52:18][350731018657318][15102 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-09 06:52:18][350731018657318][15103 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-09-09 06:52:18][350731018657318][15103 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:52:21][350731018657318][0 ms][INFO] === Request start === [2025-09-09 06:52:21][350731018657318][1 ms][DEBUG] START check_scloud [2025-09-09 06:52:21][350731018657318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:52:21][350731018657318][243 ms][DEBUG] SU: done in 243 ms; outu0_a118 23746 4974 23564512 124544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:52:21][350731018657318][243 ms][DEBUG] targetPkg: running [2025-09-09 06:52:21][350731018657318][243 ms][DEBUG] END check_scloud in 243 ms [2025-09-09 06:52:21][350731018657318][243 ms][DEBUG] START check_boot_completed [2025-09-09 06:52:21][350731018657318][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:52:21][350731018657318][275 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:52:21][350731018657318][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:52:21][350731018657318][321 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:52:21][350731018657318][321 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:52:21][350731018657318][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:52:21][350731018657318][431 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3084\nsuccessfulTxPacketsPerSecond: 0.494903161733689\nretriedTxPackets: 529\nretriedTxPacketsPerSecond: 0.12953841146049577\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3020\nsuccessfulRxPacketsPerSecond: 0.4218302116790503\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:52:21][350731018657318][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:52:21][350731018657318][790 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.822/245.822/245.822/0.000 ms\n [2025-09-09 06:52:21][350731018657318][790 ms][DEBUG] check_internet: online [2025-09-09 06:52:21][350731018657318][790 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:52:21][350731018657318][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018657318\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9616\"}'\'' -e'"" [2025-09-09 06:52:21][350731018657318][791 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:52:21][350731018657318][791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018657318\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9616\"}'\'' -e'"" [2025-09-09 06:52:27][350731018657318][5914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34b9ef60-e0b5-47b7-ba89-12079d202de1","id":"QR_34b9ef60-e0b5-47b7-ba89-12079d202de1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:52:27][350731018657318][6070 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-09 06:52:27][350731018657318][6070 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-09-09 06:52:27][350731018657318][6070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:53:03][350731018759908][0 ms][INFO] === Request start === [2025-09-09 06:53:03][350731018759908][1 ms][DEBUG] START check_scloud [2025-09-09 06:53:03][350731018759908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:53:03][350731018759908][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 23746 4974 23675992 139044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:53:03][350731018759908][292 ms][DEBUG] targetPkg: running [2025-09-09 06:53:03][350731018759908][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 06:53:03][350731018759908][292 ms][DEBUG] START check_boot_completed [2025-09-09 06:53:03][350731018759908][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:53:03][350731018759908][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:53:03][350731018759908][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:53:03][350731018759908][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:53:03][350731018759908][371 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 06:53:03][350731018759908][371 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:53:03][350731018759908][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018759908\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9628\"}'\'' -e'"" [2025-09-09 06:53:03][350731018759908][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:53:03][350731018759908][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018759908\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9628\"}'\'' -e'"" [2025-09-09 06:53:07][350731018759908][4150 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9d1acd4-e475-456f-be13-fef966ec8429","id":"QR_c9d1acd4-e475-456f-be13-fef966ec8429","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:53:07][350731018759908][4307 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-09 06:53:07][350731018759908][4307 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-09 06:53:07][350731018759908][4307 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:53:09][350731018916433][0 ms][INFO] === Request start === [2025-09-09 06:53:09][350731018916433][1 ms][DEBUG] START check_scloud [2025-09-09 06:53:09][350731018916433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:53:10][350731018916433][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 23746 4974 23851296 150816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:53:10][350731018916433][304 ms][DEBUG] targetPkg: running [2025-09-09 06:53:10][350731018916433][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 06:53:10][350731018916433][304 ms][DEBUG] START check_boot_completed [2025-09-09 06:53:10][350731018916433][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:53:10][350731018916433][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:53:10][350731018916433][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:53:10][350731018916433][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:53:10][350731018916433][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:53:10][350731018916433][382 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:53:10][350731018916433][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018916433\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3910\"}'\'' -e'"" [2025-09-09 06:53:10][350731018916433][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:53:10][350731018916433][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018916433\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3910\"}'\'' -e'"" [2025-09-09 06:53:13][350731018916433][3647 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f30f0343-48f5-488b-8413-19cd993171fc","id":"QR_f30f0343-48f5-488b-8413-19cd993171fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:53:13][350731018916433][3803 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-09 06:53:13][350731018916433][3803 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-09 06:53:13][350731018916433][3803 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:53:15][350731018941019][0 ms][INFO] === Request start === [2025-09-09 06:53:15][350731018941019][1 ms][DEBUG] START check_scloud [2025-09-09 06:53:15][350731018941019][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:53:16][350731018941019][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23746 4974 23987816 161016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:53:16][350731018941019][311 ms][DEBUG] targetPkg: running [2025-09-09 06:53:16][350731018941019][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 06:53:16][350731018941019][311 ms][DEBUG] START check_boot_completed [2025-09-09 06:53:16][350731018941019][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:53:16][350731018941019][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:53:16][350731018941019][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:53:16][350731018941019][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:53:16][350731018941019][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 06:53:16][350731018941019][406 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:53:16][350731018941019][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018941019\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3859\"}'\'' -e'"" [2025-09-09 06:53:16][350731018941019][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:53:16][350731018941019][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018941019\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3859\"}'\'' -e'"" [2025-09-09 06:53:21][350731018941019][5513 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95dbea70-beef-4dff-8dd7-2106dcd3a11f","id":"QR_95dbea70-beef-4dff-8dd7-2106dcd3a11f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:53:21][350731018941019][5669 ms][DEBUG] proc_open done in 5263 ms; code=255; res.len=3343 [2025-09-09 06:53:21][350731018941019][5669 ms][DEBUG] END runCmdUntilRes#1 in 5263 ms [2025-09-09 06:53:21][350731018941019][5669 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:53:23][350731019068515][0 ms][INFO] === Request start === [2025-09-09 06:53:23][350731019068515][1 ms][DEBUG] START check_scloud [2025-09-09 06:53:23][350731019068515][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:53:23][350731019068515][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 23746 4974 24113356 171972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:53:23][350731019068515][253 ms][DEBUG] targetPkg: running [2025-09-09 06:53:23][350731019068515][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 06:53:23][350731019068515][254 ms][DEBUG] START check_boot_completed [2025-09-09 06:53:23][350731019068515][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:53:23][350731019068515][282 ms][DEBUG] ADB: done in 29 ms; out [2025-09-09 06:53:23][350731019068515][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:53:23][350731019068515][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:53:23][350731019068515][330 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-09 06:53:23][350731019068515][330 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:53:23][350731019068515][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019068515\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5238\"}'\'' -e'"" [2025-09-09 06:53:23][350731019068515][330 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:53:23][350731019068515][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019068515\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5238\"}'\'' -e'"" [2025-09-09 06:53:27][350731019068515][3563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2899d2c6-70cd-434a-b642-5d5553ac6b3b","id":"QR_2899d2c6-70cd-434a-b642-5d5553ac6b3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:53:27][350731019068515][3719 ms][DEBUG] proc_open done in 3389 ms; code=255; res.len=3343 [2025-09-09 06:53:27][350731019068515][3719 ms][DEBUG] END runCmdUntilRes#1 in 3389 ms [2025-09-09 06:53:27][350731019068515][3719 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:53:29][350731019076526][0 ms][INFO] === Request start === [2025-09-09 06:53:29][350731019076526][1 ms][DEBUG] START check_scloud [2025-09-09 06:53:29][350731019076526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:53:29][350731019076526][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 23746 4974 24245680 183820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:53:29][350731019076526][308 ms][DEBUG] targetPkg: running [2025-09-09 06:53:29][350731019076526][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 06:53:29][350731019076526][308 ms][DEBUG] START check_boot_completed [2025-09-09 06:53:29][350731019076526][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:53:29][350731019076526][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:53:29][350731019076526][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:53:29][350731019076526][402 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 06:53:29][350731019076526][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 06:53:29][350731019076526][402 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:53:29][350731019076526][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019076526\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9279\"}'\'' -e'"" [2025-09-09 06:53:29][350731019076526][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:53:29][350731019076526][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019076526\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9279\"}'\'' -e'"" [2025-09-09 06:53:34][350731019076526][4635 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96241063-6835-4505-9ddb-5455a4a53f40","id":"QR_96241063-6835-4505-9ddb-5455a4a53f40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:53:34][350731019076526][4791 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 06:53:34][350731019076526][4791 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 06:53:34][350731019076526][4791 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:54:03][350731019211636][1 ms][INFO] === Request start === [2025-09-09 06:54:03][350731019211636][1 ms][DEBUG] START check_scloud [2025-09-09 06:54:03][350731019211636][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:54:03][350731019211636][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 23746 4974 24365644 195080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:54:03][350731019211636][308 ms][DEBUG] targetPkg: running [2025-09-09 06:54:03][350731019211636][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 06:54:03][350731019211636][308 ms][DEBUG] START check_boot_completed [2025-09-09 06:54:03][350731019211636][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:54:03][350731019211636][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:54:03][350731019211636][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:54:03][350731019211636][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:54:03][350731019211636][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:54:03][350731019211636][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:54:03][350731019211636][558 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:54:03][350731019211636][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:54:04][350731019211636][933 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.830/243.830/243.830/0.000 ms\n [2025-09-09 06:54:04][350731019211636][933 ms][DEBUG] check_internet: online [2025-09-09 06:54:04][350731019211636][933 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:54:04][350731019211636][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019211636\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3663\"}'\'' -e'"" [2025-09-09 06:54:04][350731019211636][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:54:04][350731019211636][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019211636\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3663\"}'\'' -e'"" [2025-09-09 06:54:07][350731019211636][4432 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_748241fc-7211-45a7-a58f-3d541c25d074","id":"QR_748241fc-7211-45a7-a58f-3d541c25d074","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:54:08][350731019211636][4588 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-09 06:54:08][350731019211636][4589 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 06:54:08][350731019211636][4589 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:54:10][350731019375001][1 ms][INFO] === Request start === [2025-09-09 06:54:10][350731019375001][1 ms][DEBUG] START check_scloud [2025-09-09 06:54:10][350731019375001][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:54:10][350731019375001][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 23746 4974 24510216 207060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:54:10][350731019375001][245 ms][DEBUG] targetPkg: running [2025-09-09 06:54:10][350731019375001][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-09 06:54:10][350731019375001][245 ms][DEBUG] START check_boot_completed [2025-09-09 06:54:10][350731019375001][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:54:10][350731019375001][292 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:54:10][350731019375001][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:54:10][350731019375001][369 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 06:54:10][350731019375001][369 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-09 06:54:10][350731019375001][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:54:10][350731019375001][479 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:54:10][350731019375001][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:54:11][350731019375001][869 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.506/261.506/261.506/0.000 ms\n [2025-09-09 06:54:11][350731019375001][869 ms][DEBUG] check_internet: online [2025-09-09 06:54:11][350731019375001][869 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:54:11][350731019375001][869 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019375001\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9549\"}'\'' -e'"" [2025-09-09 06:54:11][350731019375001][869 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:54:11][350731019375001][869 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019375001\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9549\"}'\'' -e'"" [2025-09-09 06:54:14][350731019375001][4290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0584c2b-b19d-48b4-92f4-9cfbc5d32d69","id":"QR_f0584c2b-b19d-48b4-92f4-9cfbc5d32d69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:54:14][350731019375001][4447 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-09 06:54:14][350731019375001][4447 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 06:54:14][350731019375001][4447 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:54:16][350731019375233][0 ms][INFO] === Request start === [2025-09-09 06:54:16][350731019375233][0 ms][DEBUG] START check_scloud [2025-09-09 06:54:16][350731019375233][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:54:16][350731019375233][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 23746 4974 24671248 218040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:54:16][350731019375233][314 ms][DEBUG] targetPkg: running [2025-09-09 06:54:16][350731019375233][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 06:54:16][350731019375233][315 ms][DEBUG] START check_boot_completed [2025-09-09 06:54:16][350731019375233][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:54:17][350731019375233][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:54:17][350731019375233][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:54:17][350731019375233][455 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 06:54:17][350731019375233][455 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 06:54:17][350731019375233][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:54:17][350731019375233][611 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:54:17][350731019375233][611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:54:17][350731019375233][939 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.792/227.792/227.792/0.000 ms\n [2025-09-09 06:54:17][350731019375233][939 ms][DEBUG] check_internet: online [2025-09-09 06:54:17][350731019375233][939 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:54:17][350731019375233][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019375233\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5681\"}'\'' -e'"" [2025-09-09 06:54:17][350731019375233][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:54:17][350731019375233][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019375233\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5681\"}'\'' -e'"" [2025-09-09 06:54:22][350731019375233][6110 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1206dfa5-77ee-40b3-a1d1-f262d9ba6d61","id":"QR_1206dfa5-77ee-40b3-a1d1-f262d9ba6d61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:54:22][350731019375233][6266 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-09-09 06:54:22][350731019375233][6266 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-09-09 06:54:22][350731019375233][6266 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:54:24][350731019380118][0 ms][INFO] === Request start === [2025-09-09 06:54:24][350731019380118][1 ms][DEBUG] START check_scloud [2025-09-09 06:54:24][350731019380118][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:54:25][350731019380118][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 23746 4974 24778868 229916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:54:25][350731019380118][297 ms][DEBUG] targetPkg: running [2025-09-09 06:54:25][350731019380118][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 06:54:25][350731019380118][297 ms][DEBUG] START check_boot_completed [2025-09-09 06:54:25][350731019380118][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:54:25][350731019380118][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:54:25][350731019380118][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:54:25][350731019380118][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:54:25][350731019380118][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:54:25][350731019380118][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:54:25][350731019380118][485 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:54:25][350731019380118][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:54:25][350731019380118][829 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.886/228.886/228.886/0.000 ms\n [2025-09-09 06:54:25][350731019380118][829 ms][DEBUG] check_internet: online [2025-09-09 06:54:25][350731019380118][829 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:54:25][350731019380118][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019380118\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9418\"}'\'' -e'"" [2025-09-09 06:54:25][350731019380118][829 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:54:25][350731019380118][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019380118\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9418\"}'\'' -e'"" [2025-09-09 06:54:29][350731019380118][4109 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e7b6da1-c975-40c0-8518-988781570639","id":"QR_4e7b6da1-c975-40c0-8518-988781570639","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:54:29][350731019380118][4265 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-09 06:54:29][350731019380118][4266 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-09 06:54:29][350731019380118][4266 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:54:31][350731019385661][0 ms][INFO] === Request start === [2025-09-09 06:54:31][350731019385661][1 ms][DEBUG] START check_scloud [2025-09-09 06:54:31][350731019385661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:54:31][350731019385661][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 23746 4974 24886488 241576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:54:31][350731019385661][304 ms][DEBUG] targetPkg: running [2025-09-09 06:54:31][350731019385661][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 06:54:31][350731019385661][304 ms][DEBUG] START check_boot_completed [2025-09-09 06:54:31][350731019385661][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:54:31][350731019385661][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:54:31][350731019385661][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:54:31][350731019385661][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:54:31][350731019385661][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:54:31][350731019385661][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:54:31][350731019385661][523 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:54:31][350731019385661][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:54:32][350731019385661][835 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.489/227.489/227.489/0.000 ms\n [2025-09-09 06:54:32][350731019385661][835 ms][DEBUG] check_internet: online [2025-09-09 06:54:32][350731019385661][835 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:54:32][350731019385661][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019385661\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5598\"}'\'' -e'"" [2025-09-09 06:54:32][350731019385661][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:54:32][350731019385661][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019385661\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5598\"}'\'' -e'"" [2025-09-09 06:54:36][350731019385661][4819 ms][DEBUG] proc_open done in 3984 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 06:54:36][350731019385661][4819 ms][DEBUG] END runCmdUntilRes#1 in 3984 ms [2025-09-09 06:54:36][350731019385661][4819 ms][WARN] Detected error: Process with pid 23746 either refused to load frida-agent, or terminated during injectionProcess with pid 23746 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 06:54:36][350731019385661][4819 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 06:54:36][350731019385661][5053 ms][DEBUG] SU: done in 233 ms; outsystem 5388 4974 12520980 210864 ep_poll 0 S system_server\n [2025-09-09 06:54:36][350731019385661][5053 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 06:54:36][350731019385661][5178 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 06:54:36][350731019385661][5178 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 06:54:36][350731019385661][5178 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 06:54:36][350731019385661][5334 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 06:54:36][350731019385661][5334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 06:54:36][350731019385661][5522 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 06:54:38][350731019385661][7537 ms][DEBUG] START check_boot_completed [2025-09-09 06:54:38][350731019385661][7537 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:54:38][350731019385661][7583 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:54:38][350731019385661][7584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:54:38][350731019385661][7631 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:54:38][350731019385661][7632 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 06:54:41][350731019385661][10645 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 06:54:41][350731019385661][10645 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019385661\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5598\"}'\'' -e'"" [2025-09-09 06:54:44][350731019385661][13676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1a430d4-9e00-4702-8754-f0f6b21b17fa","id":"QR_d1a430d4-9e00-4702-8754-f0f6b21b17fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:54:45][350731019385661][13832 ms][DEBUG] proc_open done in 3187 ms; code=255; res.len=3343 [2025-09-09 06:54:45][350731019385661][13832 ms][DEBUG] END runCmdUntilRes#2 in 3187 ms [2025-09-09 06:54:45][350731019385661][13832 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:55:03][350731019482484][0 ms][INFO] === Request start === [2025-09-09 06:55:03][350731019482484][1 ms][DEBUG] START check_scloud [2025-09-09 06:55:03][350731019482484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:55:03][350731019482484][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 25163 4974 23581448 126800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:55:03][350731019482484][306 ms][DEBUG] targetPkg: running [2025-09-09 06:55:03][350731019482484][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 06:55:03][350731019482484][306 ms][DEBUG] START check_boot_completed [2025-09-09 06:55:03][350731019482484][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:55:03][350731019482484][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:55:03][350731019482484][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:55:03][350731019482484][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:55:03][350731019482484][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:55:03][350731019482484][384 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:55:03][350731019482484][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019482484\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9609\"}'\'' -e'"" [2025-09-09 06:55:03][350731019482484][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:55:03][350731019482484][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019482484\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9609\"}'\'' -e'"" [2025-09-09 06:55:07][350731019482484][3633 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c07aa66-6a8d-4d2b-8d07-eaadf9d2699c","id":"QR_8c07aa66-6a8d-4d2b-8d07-eaadf9d2699c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:55:07][350731019482484][3789 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=3343 [2025-09-09 06:55:07][350731019482484][3789 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-09 06:55:07][350731019482484][3790 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:55:09][350731019503875][0 ms][INFO] === Request start === [2025-09-09 06:55:09][350731019503875][1 ms][DEBUG] START check_scloud [2025-09-09 06:55:09][350731019503875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:55:09][350731019503875][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 25163 4974 23682464 137724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:55:09][350731019503875][307 ms][DEBUG] targetPkg: running [2025-09-09 06:55:09][350731019503875][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 06:55:09][350731019503875][307 ms][DEBUG] START check_boot_completed [2025-09-09 06:55:09][350731019503875][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:55:09][350731019503875][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:55:09][350731019503875][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:55:09][350731019503875][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:55:09][350731019503875][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:55:09][350731019503875][386 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:55:09][350731019503875][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019503875\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9278\"}'\'' -e'"" [2025-09-09 06:55:09][350731019503875][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:55:09][350731019503875][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019503875\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9278\"}'\'' -e'"" [2025-09-09 06:55:13][350731019503875][3760 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d6ea956-1ae4-4b44-a2ce-4c5efe385edc","id":"QR_4d6ea956-1ae4-4b44-a2ce-4c5efe385edc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:55:13][350731019503875][3916 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 06:55:13][350731019503875][3916 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 06:55:13][350731019503875][3916 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:55:15][352075823023136][0 ms][INFO] === Request start === [2025-09-09 06:55:15][352075823023136][1 ms][DEBUG] START check_scloud [2025-09-09 06:55:15][352075823023136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:55:15][352075823023136][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 25163 4974 23853736 149392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:55:15][352075823023136][316 ms][DEBUG] targetPkg: running [2025-09-09 06:55:15][352075823023136][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 06:55:15][352075823023136][316 ms][DEBUG] START check_boot_completed [2025-09-09 06:55:15][352075823023136][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:55:15][352075823023136][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 06:55:15][352075823023136][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:55:15][352075823023136][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:55:15][352075823023136][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 06:55:15][352075823023136][394 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:55:15][352075823023136][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075823023136\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5405\"}'\'' -e'"" [2025-09-09 06:55:15][352075823023136][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:55:15][352075823023136][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075823023136\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5405\"}'\'' -e'"" [2025-09-09 06:55:18][352075823023136][3581 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab2d7d99-4579-4f0b-9296-b9dcdf51b59a","id":"QR_ab2d7d99-4579-4f0b-9296-b9dcdf51b59a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:55:18][352075823023136][3737 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=3343 [2025-09-09 06:55:18][352075823023136][3737 ms][DEBUG] END runCmdUntilRes#1 in 3343 ms [2025-09-09 06:55:18][352075823023136][3737 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:55:20][352075823085283][0 ms][INFO] === Request start === [2025-09-09 06:55:20][352075823085283][1 ms][DEBUG] START check_scloud [2025-09-09 06:55:20][352075823085283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:55:21][352075823085283][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 25163 4974 24018736 160356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:55:21][352075823085283][303 ms][DEBUG] targetPkg: running [2025-09-09 06:55:21][352075823085283][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 06:55:21][352075823085283][303 ms][DEBUG] START check_boot_completed [2025-09-09 06:55:21][352075823085283][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:55:21][352075823085283][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:55:21][352075823085283][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:55:21][352075823085283][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:55:21][352075823085283][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:55:21][352075823085283][412 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:55:21][352075823085283][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075823085283\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6393\"}'\'' -e'"" [2025-09-09 06:55:21][352075823085283][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:55:21][352075823085283][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075823085283\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6393\"}'\'' -e'"" [2025-09-09 06:55:26][352075823085283][5067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b1383a8-2947-404a-95b6-ce64d3b8b8d3","id":"QR_6b1383a8-2947-404a-95b6-ce64d3b8b8d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:55:26][352075823085283][5223 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 06:55:26][352075823085283][5224 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 06:55:26][352075823085283][5224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:55:28][353372916274281][0 ms][INFO] === Request start === [2025-09-09 06:55:28][353372916274281][1 ms][DEBUG] START check_scloud [2025-09-09 06:55:28][353372916274281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:55:28][353372916274281][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 25163 4974 24155156 172328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:55:28][353372916274281][321 ms][DEBUG] targetPkg: running [2025-09-09 06:55:28][353372916274281][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 06:55:28][353372916274281][322 ms][DEBUG] START check_boot_completed [2025-09-09 06:55:28][353372916274281][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:55:28][353372916274281][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:55:28][353372916274281][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:55:28][353372916274281][417 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 06:55:28][353372916274281][417 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 06:55:28][353372916274281][417 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:55:28][353372916274281][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372916274281\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9508\"}'\'' -e'"" [2025-09-09 06:55:28][353372916274281][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:55:28][353372916274281][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372916274281\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9508\"}'\'' -e'"" [2025-09-09 06:55:31][353372916274281][3664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb9a9d70-aba8-4440-9405-b611b33af9cc","id":"QR_eb9a9d70-aba8-4440-9405-b611b33af9cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:55:32][353372916274281][3820 ms][DEBUG] proc_open done in 3403 ms; code=255; res.len=3343 [2025-09-09 06:55:32][353372916274281][3820 ms][DEBUG] END runCmdUntilRes#1 in 3403 ms [2025-09-09 06:55:32][353372916274281][3820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:55:34][353372916460427][0 ms][INFO] === Request start === [2025-09-09 06:55:34][353372916460427][1 ms][DEBUG] START check_scloud [2025-09-09 06:55:34][353372916460427][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:55:34][353372916460427][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 25163 4974 24283220 183192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:55:34][353372916460427][310 ms][DEBUG] targetPkg: running [2025-09-09 06:55:34][353372916460427][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 06:55:34][353372916460427][311 ms][DEBUG] START check_boot_completed [2025-09-09 06:55:34][353372916460427][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:55:34][353372916460427][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:55:34][353372916460427][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:55:34][353372916460427][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 06:55:34][353372916460427][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 06:55:34][353372916460427][405 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:55:34][353372916460427][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372916460427\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9127\"}'\'' -e'"" [2025-09-09 06:55:34][353372916460427][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:55:34][353372916460427][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372916460427\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9127\"}'\'' -e'"" [2025-09-09 06:55:37][353372916460427][3762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94cfb6ca-5f09-466e-9032-20579c3753b3","id":"QR_94cfb6ca-5f09-466e-9032-20579c3753b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:55:37][353372916460427][3919 ms][DEBUG] proc_open done in 3513 ms; code=255; res.len=3343 [2025-09-09 06:55:37][353372916460427][3919 ms][DEBUG] END runCmdUntilRes#1 in 3513 ms [2025-09-09 06:55:37][353372916460427][3919 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:56:03][356982120220719][0 ms][INFO] === Request start === [2025-09-09 06:56:03][356982120220719][1 ms][DEBUG] START check_scloud [2025-09-09 06:56:03][356982120220719][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:56:03][356982120220719][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 25163 4974 24405232 195080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:56:03][356982120220719][305 ms][DEBUG] targetPkg: running [2025-09-09 06:56:03][356982120220719][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 06:56:03][356982120220719][305 ms][DEBUG] START check_boot_completed [2025-09-09 06:56:03][356982120220719][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:56:03][356982120220719][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 06:56:03][356982120220719][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:56:03][356982120220719][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 06:56:03][356982120220719][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 06:56:03][356982120220719][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:56:03][356982120220719][555 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:56:03][356982120220719][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:56:05][356982120220719][2023 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.311/308.311/308.311/0.000 ms\n [2025-09-09 06:56:05][356982120220719][2023 ms][DEBUG] check_internet: online [2025-09-09 06:56:05][356982120220719][2023 ms][DEBUG] rawBody.length=1150 [2025-09-09 06:56:05][356982120220719][2023 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356982120220719\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3107\"}'\'' -e'"" [2025-09-09 06:56:05][356982120220719][2024 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:56:05][356982120220719][2024 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356982120220719\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3107\"}'\'' -e'"" [2025-09-09 06:56:09][356982120220719][6163 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34be9f04-583d-46f7-8937-a1a7d4ee4930","id":"QR_34be9f04-583d-46f7-8937-a1a7d4ee4930","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:56:09][356982120220719][6319 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-09 06:56:09][356982120220719][6319 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-09 06:56:09][356982120220719][6319 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:56:12][356982120220719][1 ms][INFO] === Request start === [2025-09-09 06:56:12][356982120220719][1 ms][DEBUG] START check_scloud [2025-09-09 06:56:12][356982120220719][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:56:12][356982120220719][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 25163 4974 24568184 206136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:56:12][356982120220719][253 ms][DEBUG] targetPkg: running [2025-09-09 06:56:12][356982120220719][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-09 06:56:12][356982120220719][253 ms][DEBUG] START check_boot_completed [2025-09-09 06:56:12][356982120220719][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:56:12][356982120220719][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:56:12][356982120220719][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:56:12][356982120220719][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:56:12][356982120220719][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 06:56:12][356982120220719][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:56:12][356982120220719][456 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:56:12][356982120220719][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:56:12][356982120220719][878 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.805/318.805/318.805/0.000 ms\n [2025-09-09 06:56:12][356982120220719][878 ms][DEBUG] check_internet: online [2025-09-09 06:56:12][356982120220719][878 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:56:12][356982120220719][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356982120220719\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4322\"}'\'' -e'"" [2025-09-09 06:56:12][356982120220719][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:56:12][356982120220719][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356982120220719\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4322\"}'\'' -e'"" [2025-09-09 06:56:18][356982120220719][6439 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70550947-5920-401f-9794-3cac4172f625","id":"QR_70550947-5920-401f-9794-3cac4172f625","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:56:18][356982120220719][6595 ms][DEBUG] proc_open done in 5716 ms; code=255; res.len=3343 [2025-09-09 06:56:18][356982120220719][6595 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-09 06:56:18][356982120220719][6595 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 06:56:25][350178733708218][0 ms][INFO] === Request start === [2025-09-09 06:56:25][350178733708218][1 ms][DEBUG] START check_scloud [2025-09-09 06:56:25][350178733708218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 06:56:26][350178733708218][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 25163 4974 24680028 217384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 06:56:26][350178733708218][319 ms][DEBUG] targetPkg: running [2025-09-09 06:56:26][350178733708218][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 06:56:26][350178733708218][319 ms][DEBUG] START check_boot_completed [2025-09-09 06:56:26][350178733708218][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 06:56:26][350178733708218][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 06:56:26][350178733708218][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 06:56:26][350178733708218][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 06:56:26][350178733708218][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 06:56:26][350178733708218][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 06:56:26][350178733708218][523 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3310\nsuccessfulTxPacketsPerSecond: 1.5396552142167832\nretriedTxPackets: 586\nretriedTxPacketsPerSecond: 0.38794462090501647\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3219\nsuccessfulRxPacketsPerSecond: 1.369929442570831\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 06:56:26][350178733708218][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 06:56:26][350178733708218][928 ms][DEBUG] SU: done in 404 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.668/299.668/299.668/0.000 ms\n [2025-09-09 06:56:26][350178733708218][928 ms][DEBUG] check_internet: online [2025-09-09 06:56:26][350178733708218][928 ms][DEBUG] rawBody.length=1160 [2025-09-09 06:56:26][350178733708218][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733708218\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8735\"}'\'' -e'"" [2025-09-09 06:56:26][350178733708218][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 06:56:26][350178733708218][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733708218\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8735\"}'\'' -e'"" [2025-09-09 06:56:31][350178733708218][5067 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73dfad0b-00bb-41cd-ad3b-6ac3a9bcb749","id":"QR_73dfad0b-00bb-41cd-ad3b-6ac3a9bcb749","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 06:56:31][350178733708218][5223 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-09-09 06:56:31][350178733708218][5223 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-09 06:56:31][350178733708218][5224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:05:03][356414816507936][1 ms][INFO] === Request start === [2025-09-09 07:05:03][356414816507936][1 ms][DEBUG] START check_scloud [2025-09-09 07:05:03][356414816507936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:05:03][356414816507936][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 25163 4974 24736388 230480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:05:03][356414816507936][299 ms][DEBUG] targetPkg: running [2025-09-09 07:05:03][356414816507936][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 07:05:03][356414816507936][299 ms][DEBUG] START check_boot_completed [2025-09-09 07:05:03][356414816507936][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:05:03][356414816507936][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:05:03][356414816507936][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:05:03][356414816507936][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:05:03][356414816507936][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:05:03][356414816507936][408 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:05:03][356414816507936][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816507936\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9355\"}'\'' -e'"" [2025-09-09 07:05:03][356414816507936][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:05:03][356414816507936][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816507936\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9355\"}'\'' -e'"" [2025-09-09 07:05:08][356414816507936][4704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ade54d27-4aaf-4caa-ae6a-05f9385dcedb","id":"QR_ade54d27-4aaf-4caa-ae6a-05f9385dcedb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:05:08][356414816507936][4860 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-09 07:05:08][356414816507936][4860 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 07:05:08][356414816507936][4860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:05:10][356414816507936][0 ms][INFO] === Request start === [2025-09-09 07:05:10][356414816507936][1 ms][DEBUG] START check_scloud [2025-09-09 07:05:10][356414816507936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:05:11][356414816507936][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 25163 4974 24894296 241072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:05:11][356414816507936][315 ms][DEBUG] targetPkg: running [2025-09-09 07:05:11][356414816507936][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 07:05:11][356414816507936][315 ms][DEBUG] START check_boot_completed [2025-09-09 07:05:11][356414816507936][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:05:11][356414816507936][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:05:11][356414816507936][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:05:11][356414816507936][440 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 07:05:11][356414816507936][440 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 07:05:11][356414816507936][440 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:05:11][356414816507936][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816507936\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1023\"}'\'' -e'"" [2025-09-09 07:05:11][356414816507936][440 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:05:11][356414816507936][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816507936\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1023\"}'\'' -e'"" [2025-09-09 07:05:14][356414816507936][4110 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 07:05:14][356414816507936][4110 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 07:05:14][356414816507936][4110 ms][WARN] Detected error: Process with pid 25163 either refused to load frida-agent, or terminated during injectionProcess with pid 25163 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 07:05:14][356414816507936][4110 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 07:05:15][356414816507936][4376 ms][DEBUG] SU: done in 266 ms; outsystem 5388 4974 12514840 199216 ep_poll 0 S system_server\n [2025-09-09 07:05:15][356414816507936][4376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 07:05:15][356414816507936][4517 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 07:05:15][356414816507936][4517 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 07:05:15][356414816507936][4517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 07:05:15][356414816507936][4641 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 07:05:15][356414816507936][4641 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 07:05:15][356414816507936][4798 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 07:05:17][356414816507936][6813 ms][DEBUG] START check_boot_completed [2025-09-09 07:05:17][356414816507936][6813 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:05:17][356414816507936][6860 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:05:17][356414816507936][6860 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:05:17][356414816507936][6922 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:05:17][356414816507936][6922 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:05:20][356414816507936][9937 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 07:05:20][356414816507936][9937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816507936\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1023\"}'\'' -e'"" [2025-09-09 07:05:25][356414816507936][14951 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a94f7d42-00d9-4ac4-a64a-b35a9317b708","id":"QR_a94f7d42-00d9-4ac4-a64a-b35a9317b708","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:05:25][356414816507936][15108 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-09-09 07:05:25][356414816507936][15108 ms][DEBUG] END runCmdUntilRes#2 in 5171 ms [2025-09-09 07:05:25][356414816507936][15108 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:07:03][357962507725604][0 ms][INFO] === Request start === [2025-09-09 07:07:03][357962507725604][1 ms][DEBUG] START check_scloud [2025-09-09 07:07:03][357962507725604][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:07:03][357962507725604][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 27075 4974 23596528 127156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:07:03][357962507725604][302 ms][DEBUG] targetPkg: running [2025-09-09 07:07:03][357962507725604][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 07:07:03][357962507725604][302 ms][DEBUG] START check_boot_completed [2025-09-09 07:07:03][357962507725604][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:07:04][357962507725604][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:07:04][357962507725604][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:07:04][357962507725604][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:07:04][357962507725604][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:07:04][357962507725604][380 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:07:04][357962507725604][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507725604\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1871\"}'\'' -e'"" [2025-09-09 07:07:04][357962507725604][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:07:04][357962507725604][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507725604\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1871\"}'\'' -e'"" [2025-09-09 07:07:08][357962507725604][4770 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0866a70-24dd-4ed8-918e-c0e432f5ce83","id":"QR_d0866a70-24dd-4ed8-918e-c0e432f5ce83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:07:08][357962507725604][4926 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-09-09 07:07:08][357962507725604][4926 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-09-09 07:07:08][357962507725604][4926 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:07:10][357962507725604][1 ms][INFO] === Request start === [2025-09-09 07:07:10][357962507725604][1 ms][DEBUG] START check_scloud [2025-09-09 07:07:10][357962507725604][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:07:11][357962507725604][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 27075 4974 23769528 137672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:07:11][357962507725604][301 ms][DEBUG] targetPkg: running [2025-09-09 07:07:11][357962507725604][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 07:07:11][357962507725604][301 ms][DEBUG] START check_boot_completed [2025-09-09 07:07:11][357962507725604][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:07:11][357962507725604][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:07:11][357962507725604][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:07:11][357962507725604][395 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 07:07:11][357962507725604][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:07:11][357962507725604][395 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:07:11][357962507725604][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507725604\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7262\"}'\'' -e'"" [2025-09-09 07:07:11][357962507725604][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:07:11][357962507725604][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507725604\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7262\"}'\'' -e'"" [2025-09-09 07:07:16][357962507725604][5580 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53f004ce-6b85-4ec8-b8ae-5b904efdb3d2","id":"QR_53f004ce-6b85-4ec8-b8ae-5b904efdb3d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:07:16][357962507725604][5736 ms][DEBUG] proc_open done in 5341 ms; code=255; res.len=3343 [2025-09-09 07:07:16][357962507725604][5737 ms][DEBUG] END runCmdUntilRes#1 in 5341 ms [2025-09-09 07:07:16][357962507725604][5737 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:09:04][355131262580941][0 ms][INFO] === Request start === [2025-09-09 07:09:04][355131262580941][1 ms][DEBUG] START check_scloud [2025-09-09 07:09:04][355131262580941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:09:04][355131262580941][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 27075 4974 23901768 149880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:09:04][355131262580941][315 ms][DEBUG] targetPkg: running [2025-09-09 07:09:04][355131262580941][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 07:09:04][355131262580941][316 ms][DEBUG] START check_boot_completed [2025-09-09 07:09:04][355131262580941][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:09:04][355131262580941][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:09:04][355131262580941][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:09:04][355131262580941][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:09:04][355131262580941][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:09:04][355131262580941][425 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:09:04][355131262580941][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355131262580941\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1460\"}'\'' -e'"" [2025-09-09 07:09:04][355131262580941][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:09:04][355131262580941][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355131262580941\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1460\"}'\'' -e'"" [2025-09-09 07:09:09][355131262580941][5783 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df26c0a3-0f22-4b80-b86a-7850f4b099e5","id":"QR_df26c0a3-0f22-4b80-b86a-7850f4b099e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:09:09][355131262580941][5939 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-09 07:09:09][355131262580941][5939 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-09 07:09:09][355131262580941][5939 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:09:12][355131262580941][1 ms][INFO] === Request start === [2025-09-09 07:09:12][355131262580941][1 ms][DEBUG] START check_scloud [2025-09-09 07:09:12][355131262580941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:09:12][355131262580941][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 27075 4974 24083344 161100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:09:12][355131262580941][311 ms][DEBUG] targetPkg: running [2025-09-09 07:09:12][355131262580941][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 07:09:12][355131262580941][311 ms][DEBUG] START check_boot_completed [2025-09-09 07:09:12][355131262580941][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:09:12][355131262580941][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:09:12][355131262580941][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:09:12][355131262580941][406 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 07:09:12][355131262580941][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:09:12][355131262580941][406 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:09:12][355131262580941][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355131262580941\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8644\"}'\'' -e'"" [2025-09-09 07:09:12][355131262580941][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:09:12][355131262580941][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355131262580941\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8644\"}'\'' -e'"" [2025-09-09 07:09:17][355131262580941][5560 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77589613-ff47-4082-bb16-7924e80c880a","id":"QR_77589613-ff47-4082-bb16-7924e80c880a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:09:17][355131262580941][5716 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-09 07:09:17][355131262580941][5716 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-09-09 07:09:17][355131262580941][5716 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:09:22][354130545357946][0 ms][INFO] === Request start === [2025-09-09 07:09:22][354130545357946][1 ms][DEBUG] START check_scloud [2025-09-09 07:09:22][354130545357946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:09:22][354130545357946][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 27075 4974 24262684 171988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:09:22][354130545357946][311 ms][DEBUG] targetPkg: running [2025-09-09 07:09:22][354130545357946][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 07:09:22][354130545357946][311 ms][DEBUG] START check_boot_completed [2025-09-09 07:09:22][354130545357946][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:09:22][354130545357946][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:09:22][354130545357946][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:09:22][354130545357946][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 07:09:22][354130545357946][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:09:22][354130545357946][405 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:09:22][354130545357946][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130545357946\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5536\"}'\'' -e'"" [2025-09-09 07:09:22][354130545357946][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:09:22][354130545357946][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130545357946\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5536\"}'\'' -e'"" [2025-09-09 07:09:25][354130545357946][3716 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0764b9f6-6810-4abc-8d30-5c8283d02ab6","id":"QR_0764b9f6-6810-4abc-8d30-5c8283d02ab6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:09:26][354130545357946][3872 ms][DEBUG] proc_open done in 3466 ms; code=255; res.len=3343 [2025-09-09 07:09:26][354130545357946][3872 ms][DEBUG] END runCmdUntilRes#1 in 3466 ms [2025-09-09 07:09:26][354130545357946][3872 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:09:28][354130545357946][0 ms][INFO] === Request start === [2025-09-09 07:09:28][354130545357946][1 ms][DEBUG] START check_scloud [2025-09-09 07:09:28][354130545357946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:09:28][354130545357946][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 27075 4974 24380608 183852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:09:28][354130545357946][293 ms][DEBUG] targetPkg: running [2025-09-09 07:09:28][354130545357946][293 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 07:09:28][354130545357946][293 ms][DEBUG] START check_boot_completed [2025-09-09 07:09:28][354130545357946][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:09:28][354130545357946][340 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:09:28][354130545357946][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:09:28][354130545357946][402 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:09:28][354130545357946][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:09:28][354130545357946][403 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:09:28][354130545357946][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130545357946\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7877\"}'\'' -e'"" [2025-09-09 07:09:28][354130545357946][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:09:28][354130545357946][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130545357946\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7877\"}'\'' -e'"" [2025-09-09 07:09:33][354130545357946][4917 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e8a9b07-e91a-449f-855b-a1b2336c2d82","id":"QR_7e8a9b07-e91a-449f-855b-a1b2336c2d82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:09:33][354130545357946][5073 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-09 07:09:33][354130545357946][5073 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-09 07:09:33][354130545357946][5073 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:12:03][350471128474243][1 ms][INFO] === Request start === [2025-09-09 07:12:03][350471128474243][1 ms][DEBUG] START check_scloud [2025-09-09 07:12:03][350471128474243][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:12:03][350471128474243][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27075 4974 24512732 195380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:12:03][350471128474243][305 ms][DEBUG] targetPkg: running [2025-09-09 07:12:03][350471128474243][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 07:12:03][350471128474243][305 ms][DEBUG] START check_boot_completed [2025-09-09 07:12:03][350471128474243][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:12:03][350471128474243][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:12:03][350471128474243][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:12:03][350471128474243][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:12:03][350471128474243][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:12:03][350471128474243][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:12:04][350471128474243][494 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4204\nsuccessfulTxPacketsPerSecond: 0.4979236583447026\nretriedTxPackets: 738\nretriedTxPacketsPerSecond: 0.11950167800272862\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3983\nsuccessfulRxPacketsPerSecond: 0.45145078356586366\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:12:04][350471128474243][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:12:05][350471128474243][1727 ms][DEBUG] SU: done in 1232 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.385/201.385/201.385/0.000 ms\n [2025-09-09 07:12:05][350471128474243][1727 ms][DEBUG] check_internet: online [2025-09-09 07:12:05][350471128474243][1727 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:12:05][350471128474243][1727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128474243\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2136\"}'\'' -e'"" [2025-09-09 07:12:05][350471128474243][1727 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:12:05][350471128474243][1727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128474243\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2136\"}'\'' -e'"" [2025-09-09 07:12:09][350471128474243][5601 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42924172-ef45-4f19-9bd6-937ae4f86724","id":"QR_42924172-ef45-4f19-9bd6-937ae4f86724","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:12:09][350471128474243][5757 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 07:12:09][350471128474243][5757 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 07:12:09][350471128474243][5757 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:12:11][350471128474243][0 ms][INFO] === Request start === [2025-09-09 07:12:11][350471128474243][1 ms][DEBUG] START check_scloud [2025-09-09 07:12:11][350471128474243][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:12:12][350471128474243][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 27075 4974 24638756 207140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:12:12][350471128474243][257 ms][DEBUG] targetPkg: running [2025-09-09 07:12:12][350471128474243][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 07:12:12][350471128474243][257 ms][DEBUG] START check_boot_completed [2025-09-09 07:12:12][350471128474243][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:12:12][350471128474243][301 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 07:12:12][350471128474243][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:12:12][350471128474243][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:12:12][350471128474243][348 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-09 07:12:12][350471128474243][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:12:12][350471128474243][459 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4204\nsuccessfulTxPacketsPerSecond: 0.4979236583447026\nretriedTxPackets: 738\nretriedTxPacketsPerSecond: 0.11950167800272862\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3983\nsuccessfulRxPacketsPerSecond: 0.45145078356586366\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:12:12][350471128474243][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:12:12][350471128474243][817 ms][DEBUG] SU: done in 357 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=113 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.501/222.501/222.501/0.000 ms\n [2025-09-09 07:12:12][350471128474243][817 ms][DEBUG] check_internet: online [2025-09-09 07:12:12][350471128474243][817 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:12:12][350471128474243][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128474243\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9773\"}'\'' -e'"" [2025-09-09 07:12:12][350471128474243][817 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:12:12][350471128474243][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128474243\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9773\"}'\'' -e'"" [2025-09-09 07:12:17][350471128474243][5768 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb0cf6c8-6d15-4c80-97f6-aead04d169b8","id":"QR_cb0cf6c8-6d15-4c80-97f6-aead04d169b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:12:17][350471128474243][5925 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-09 07:12:17][350471128474243][5925 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 07:12:17][350471128474243][5925 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:18:03][350886065929828][1 ms][INFO] === Request start === [2025-09-09 07:18:03][350886065929828][1 ms][DEBUG] START check_scloud [2025-09-09 07:18:03][350886065929828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:18:04][350886065929828][252 ms][DEBUG] SU: done in 250 ms; outu0_a118 27075 4974 24770916 218200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:18:04][350886065929828][252 ms][DEBUG] targetPkg: running [2025-09-09 07:18:04][350886065929828][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-09 07:18:04][350886065929828][252 ms][DEBUG] START check_boot_completed [2025-09-09 07:18:04][350886065929828][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:18:04][350886065929828][283 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:18:04][350886065929828][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:18:04][350886065929828][330 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:18:04][350886065929828][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:18:04][350886065929828][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:18:04][350886065929828][439 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4431\nsuccessfulTxPacketsPerSecond: 0.7536996025645708\nretriedTxPackets: 792\nretriedTxPacketsPerSecond: 0.17929417858364238\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4176\nsuccessfulRxPacketsPerSecond: 0.6408106753082033\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:18:04][350886065929828][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:18:06][350886065929828][2173 ms][DEBUG] SU: done in 1734 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.470/301.470/301.470/0.000 ms\n [2025-09-09 07:18:06][350886065929828][2173 ms][DEBUG] check_internet: online [2025-09-09 07:18:06][350886065929828][2173 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:18:06][350886065929828][2173 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065929828\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8192\"}'\'' -e'"" [2025-09-09 07:18:06][350886065929828][2173 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:18:06][350886065929828][2173 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065929828\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8192\"}'\'' -e'"" [2025-09-09 07:18:10][350886065929828][6172 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0431940-0a35-4eac-908b-dd993a01f1a0","id":"QR_c0431940-0a35-4eac-908b-dd993a01f1a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:18:10][350886065929828][6328 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-09 07:18:10][350886065929828][6328 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-09 07:18:10][350886065929828][6329 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:18:12][350886065929828][0 ms][INFO] === Request start === [2025-09-09 07:18:12][350886065929828][1 ms][DEBUG] START check_scloud [2025-09-09 07:18:12][350886065929828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:18:12][350886065929828][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 27075 4974 24909420 230104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:18:12][350886065929828][303 ms][DEBUG] targetPkg: running [2025-09-09 07:18:12][350886065929828][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 07:18:12][350886065929828][303 ms][DEBUG] START check_boot_completed [2025-09-09 07:18:12][350886065929828][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:18:12][350886065929828][348 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 07:18:12][350886065929828][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:18:13][350886065929828][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:18:13][350886065929828][411 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-09 07:18:13][350886065929828][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:18:13][350886065929828][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4431\nsuccessfulTxPacketsPerSecond: 0.7536996025645708\nretriedTxPackets: 792\nretriedTxPacketsPerSecond: 0.17929417858364238\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4176\nsuccessfulRxPacketsPerSecond: 0.6408106753082033\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:18:13][350886065929828][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:18:13][350886065929828][910 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.003/258.003/258.003/0.000 ms\n [2025-09-09 07:18:13][350886065929828][911 ms][DEBUG] check_internet: online [2025-09-09 07:18:13][350886065929828][911 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:18:13][350886065929828][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065929828\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-09-09 07:18:13][350886065929828][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:18:13][350886065929828][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065929828\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-09-09 07:18:18][350886065929828][5753 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ab9ac58-988c-4d73-b6a4-c7ebfd56f3be","id":"QR_0ab9ac58-988c-4d73-b6a4-c7ebfd56f3be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:18:18][350886065929828][5909 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-09 07:18:18][350886065929828][5909 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 07:18:18][350886065929828][5909 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:20:04][350471510303828][1 ms][INFO] === Request start === [2025-09-09 07:20:04][350471510303828][1 ms][DEBUG] START check_scloud [2025-09-09 07:20:04][350471510303828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:20:04][350471510303828][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 27075 4974 25029420 241556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:20:04][350471510303828][251 ms][DEBUG] targetPkg: running [2025-09-09 07:20:04][350471510303828][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 07:20:04][350471510303828][251 ms][DEBUG] START check_boot_completed [2025-09-09 07:20:04][350471510303828][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:20:04][350471510303828][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:20:04][350471510303828][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:20:04][350471510303828][360 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:20:04][350471510303828][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:20:04][350471510303828][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:20:04][350471510303828][485 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4550\nsuccessfulTxPacketsPerSecond: 0.3950259920463674\nretriedTxPackets: 826\nretriedTxPacketsPerSecond: 0.11286456915610497\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4278\nsuccessfulRxPacketsPerSecond: 0.3385937074683149\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:20:04][350471510303828][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:20:04][350471510303828][844 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.099/247.099/247.099/0.000 ms\n [2025-09-09 07:20:04][350471510303828][844 ms][DEBUG] check_internet: online [2025-09-09 07:20:04][350471510303828][844 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:20:04][350471510303828][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471510303828\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3755\"}'\'' -e'"" [2025-09-09 07:20:04][350471510303828][844 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:20:04][350471510303828][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471510303828\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3755\"}'\'' -e'"" [2025-09-09 07:20:08][350471510303828][4484 ms][DEBUG] proc_open done in 3640 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 07:20:08][350471510303828][4485 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-09 07:20:08][350471510303828][4485 ms][WARN] Detected error: Process with pid 27075 either refused to load frida-agent, or terminated during injectionProcess with pid 27075 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 07:20:08][350471510303828][4485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 07:20:08][350471510303828][4797 ms][DEBUG] SU: done in 312 ms; outsystem 5388 4974 12494404 198720 ep_poll 0 S system_server\n [2025-09-09 07:20:08][350471510303828][4797 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 07:20:08][350471510303828][4937 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 07:20:08][350471510303828][4937 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 07:20:08][350471510303828][4937 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 07:20:09][350471510303828][5062 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 07:20:09][350471510303828][5062 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 07:20:09][350471510303828][5234 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 07:20:11][350471510303828][7249 ms][DEBUG] START check_boot_completed [2025-09-09 07:20:11][350471510303828][7249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:20:11][350471510303828][7296 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:20:11][350471510303828][7296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:20:11][350471510303828][7343 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:20:11][350471510303828][7343 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:20:14][350471510303828][10358 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 07:20:14][350471510303828][10358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471510303828\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3755\"}'\'' -e'"" [2025-09-09 07:20:18][350471510303828][14700 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a7daa8a-4648-4eac-9fc1-cfed0cb56918","id":"QR_2a7daa8a-4648-4eac-9fc1-cfed0cb56918","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:20:18][350471510303828][14857 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-09-09 07:20:18][350471510303828][14857 ms][DEBUG] END runCmdUntilRes#2 in 4499 ms [2025-09-09 07:20:18][350471510303828][14857 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:20:21][350471510303828][0 ms][INFO] === Request start === [2025-09-09 07:20:21][350471510303828][1 ms][DEBUG] START check_scloud [2025-09-09 07:20:21][350471510303828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:20:21][350471510303828][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 28658 4974 23553248 124420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:20:21][350471510303828][251 ms][DEBUG] targetPkg: running [2025-09-09 07:20:21][350471510303828][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 07:20:21][350471510303828][251 ms][DEBUG] START check_boot_completed [2025-09-09 07:20:21][350471510303828][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:20:21][350471510303828][282 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:20:21][350471510303828][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:20:21][350471510303828][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:20:21][350471510303828][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:20:21][350471510303828][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:20:21][350471510303828][439 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4550\nsuccessfulTxPacketsPerSecond: 0.3950259920463674\nretriedTxPackets: 826\nretriedTxPacketsPerSecond: 0.11286456915610497\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4278\nsuccessfulRxPacketsPerSecond: 0.3385937074683149\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:20:21][350471510303828][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:20:21][350471510303828][815 ms][DEBUG] SU: done in 376 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.038/250.038/250.038/0.000 ms\n [2025-09-09 07:20:21][350471510303828][815 ms][DEBUG] check_internet: online [2025-09-09 07:20:21][350471510303828][815 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:20:21][350471510303828][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471510303828\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8221\"}'\'' -e'"" [2025-09-09 07:20:21][350471510303828][815 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:20:21][350471510303828][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471510303828\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8221\"}'\'' -e'"" [2025-09-09 07:20:27][350471510303828][5968 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c86ee110-543c-4400-8606-1ac8ca3e4dd9","id":"QR_c86ee110-543c-4400-8606-1ac8ca3e4dd9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:20:27][350471510303828][6125 ms][DEBUG] proc_open done in 5309 ms; code=255; res.len=3343 [2025-09-09 07:20:27][350471510303828][6125 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-09-09 07:20:27][350471510303828][6125 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:23:03][352208771891218][1 ms][INFO] === Request start === [2025-09-09 07:23:03][352208771891218][1 ms][DEBUG] START check_scloud [2025-09-09 07:23:03][352208771891218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:23:03][352208771891218][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 28658 4974 23588656 137688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:23:03][352208771891218][318 ms][DEBUG] targetPkg: running [2025-09-09 07:23:03][352208771891218][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 07:23:03][352208771891218][318 ms][DEBUG] START check_boot_completed [2025-09-09 07:23:03][352208771891218][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:23:04][352208771891218][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:23:04][352208771891218][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:23:04][352208771891218][413 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 07:23:04][352208771891218][413 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 07:23:04][352208771891218][413 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:23:04][352208771891218][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208771891218\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2262\"}'\'' -e'"" [2025-09-09 07:23:04][352208771891218][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:23:04][352208771891218][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208771891218\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2262\"}'\'' -e'"" [2025-09-09 07:23:09][352208771891218][5738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88983841-5f31-468e-a735-b8c7b2ef032f","id":"QR_88983841-5f31-468e-a735-b8c7b2ef032f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:23:09][352208771891218][5894 ms][DEBUG] proc_open done in 5481 ms; code=255; res.len=3343 [2025-09-09 07:23:09][352208771891218][5894 ms][DEBUG] END runCmdUntilRes#1 in 5481 ms [2025-09-09 07:23:09][352208771891218][5894 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:23:11][352208771891218][0 ms][INFO] === Request start === [2025-09-09 07:23:11][352208771891218][1 ms][DEBUG] START check_scloud [2025-09-09 07:23:11][352208771891218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:23:12][352208771891218][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 28658 4974 23741496 149432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:23:12][352208771891218][255 ms][DEBUG] targetPkg: running [2025-09-09 07:23:12][352208771891218][255 ms][DEBUG] END check_scloud in 255 ms [2025-09-09 07:23:12][352208771891218][255 ms][DEBUG] START check_boot_completed [2025-09-09 07:23:12][352208771891218][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:23:12][352208771891218][302 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:23:12][352208771891218][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:23:12][352208771891218][364 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:23:12][352208771891218][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:23:12][352208771891218][365 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:23:12][352208771891218][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208771891218\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6703\"}'\'' -e'"" [2025-09-09 07:23:12][352208771891218][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:23:12][352208771891218][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208771891218\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6703\"}'\'' -e'"" [2025-09-09 07:23:17][352208771891218][5394 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8da848db-5346-417a-aa9d-1cb53acbd815","id":"QR_8da848db-5346-417a-aa9d-1cb53acbd815","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:23:17][352208771891218][5550 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-09 07:23:17][352208771891218][5551 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-09 07:23:17][352208771891218][5551 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:29:03][357967976797117][1 ms][INFO] === Request start === [2025-09-09 07:29:03][357967976797117][1 ms][DEBUG] START check_scloud [2025-09-09 07:29:03][357967976797117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:29:03][357967976797117][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 28658 4974 23873904 160884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:29:03][357967976797117][294 ms][DEBUG] targetPkg: running [2025-09-09 07:29:03][357967976797117][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 07:29:03][357967976797117][294 ms][DEBUG] START check_boot_completed [2025-09-09 07:29:03][357967976797117][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:29:03][357967976797117][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:29:03][357967976797117][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:29:03][357967976797117][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:29:03][357967976797117][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:29:03][357967976797117][372 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:29:03][357967976797117][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976797117\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-09-09 07:29:03][357967976797117][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:29:03][357967976797117][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976797117\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-09-09 07:29:08][357967976797117][4699 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_506aaa52-915e-48d4-85c4-4f352b6b0226","id":"QR_506aaa52-915e-48d4-85c4-4f352b6b0226","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:29:08][357967976797117][4855 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 07:29:08][357967976797117][4855 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 07:29:08][357967976797117][4855 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:29:10][357967976797117][0 ms][INFO] === Request start === [2025-09-09 07:29:10][357967976797117][1 ms][DEBUG] START check_scloud [2025-09-09 07:29:10][357967976797117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:29:10][357967976797117][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 28658 4974 24055352 171520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:29:10][357967976797117][289 ms][DEBUG] targetPkg: running [2025-09-09 07:29:10][357967976797117][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 07:29:10][357967976797117][289 ms][DEBUG] START check_boot_completed [2025-09-09 07:29:10][357967976797117][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:29:11][357967976797117][336 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:29:11][357967976797117][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:29:11][357967976797117][398 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:29:11][357967976797117][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:29:11][357967976797117][399 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:29:11][357967976797117][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976797117\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6033\"}'\'' -e'"" [2025-09-09 07:29:11][357967976797117][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:29:11][357967976797117][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976797117\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6033\"}'\'' -e'"" [2025-09-09 07:29:16][357967976797117][5397 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_788b70d2-7be0-43f7-9f4c-18aabf67594d","id":"QR_788b70d2-7be0-43f7-9f4c-18aabf67594d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:29:16][357967976797117][5553 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-09 07:29:16][357967976797117][5553 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-09 07:29:16][357967976797117][5553 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:31:04][350408224517236][1 ms][INFO] === Request start === [2025-09-09 07:31:04][350408224517236][1 ms][DEBUG] START check_scloud [2025-09-09 07:31:04][350408224517236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:31:04][350408224517236][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 28658 4974 24142456 183468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:31:04][350408224517236][246 ms][DEBUG] targetPkg: running [2025-09-09 07:31:04][350408224517236][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 07:31:04][350408224517236][246 ms][DEBUG] START check_boot_completed [2025-09-09 07:31:04][350408224517236][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:31:04][350408224517236][277 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:31:04][350408224517236][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:31:04][350408224517236][324 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:31:04][350408224517236][324 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:31:04][350408224517236][324 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:31:04][350408224517236][324 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224517236\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4936\"}'\'' -e'"" [2025-09-09 07:31:04][350408224517236][324 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:31:04][350408224517236][324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224517236\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4936\"}'\'' -e'"" [2025-09-09 07:31:10][350408224517236][5979 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b11662e3-cb75-466a-bf22-bc76e1c5db56","id":"QR_b11662e3-cb75-466a-bf22-bc76e1c5db56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:31:10][350408224517236][6135 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-09 07:31:10][350408224517236][6135 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-09 07:31:10][350408224517236][6135 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:31:13][350408224517236][0 ms][INFO] === Request start === [2025-09-09 07:31:13][350408224517236][1 ms][DEBUG] START check_scloud [2025-09-09 07:31:13][350408224517236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:31:14][350408224517236][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 28658 4974 24282880 194320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:31:14][350408224517236][293 ms][DEBUG] targetPkg: running [2025-09-09 07:31:14][350408224517236][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 07:31:14][350408224517236][293 ms][DEBUG] START check_boot_completed [2025-09-09 07:31:14][350408224517236][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:31:14][350408224517236][340 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:31:14][350408224517236][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:31:14][350408224517236][402 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 07:31:14][350408224517236][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:31:14][350408224517236][402 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:31:14][350408224517236][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224517236\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9117\"}'\'' -e'"" [2025-09-09 07:31:14][350408224517236][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:31:14][350408224517236][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224517236\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9117\"}'\'' -e'"" [2025-09-09 07:31:17][350408224517236][3979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0d3c27c-85f2-45c1-a621-c9948d6420f7","id":"QR_b0d3c27c-85f2-45c1-a621-c9948d6420f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:31:18][350408224517236][4136 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 07:31:18][350408224517236][4136 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 07:31:18][350408224517236][4136 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:32:06][356587431197884][0 ms][INFO] === Request start === [2025-09-09 07:32:06][356587431197884][1 ms][DEBUG] START check_scloud [2025-09-09 07:32:06][356587431197884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:32:06][356587431197884][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 28658 4974 24412608 206432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:32:06][356587431197884][312 ms][DEBUG] targetPkg: running [2025-09-09 07:32:06][356587431197884][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 07:32:06][356587431197884][312 ms][DEBUG] START check_boot_completed [2025-09-09 07:32:06][356587431197884][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:32:06][356587431197884][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:32:06][356587431197884][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:32:06][356587431197884][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:32:06][356587431197884][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:32:06][356587431197884][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:32:07][356587431197884][561 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4751\nsuccessfulTxPacketsPerSecond: 0.16700176170485878\nretriedTxPackets: 873\nretriedTxPacketsPerSecond: 0.03929453216584912\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4456\nsuccessfulRxPacketsPerSecond: 0.14080540692762603\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:32:07][356587431197884][561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:32:08][356587431197884][1967 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.694/298.694/298.694/0.000 ms\n [2025-09-09 07:32:08][356587431197884][1967 ms][DEBUG] check_internet: online [2025-09-09 07:32:08][356587431197884][1967 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:32:08][356587431197884][1968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356587431197884\",\"model\":\"SM-S901N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9308\"}'\'' -e'"" [2025-09-09 07:32:08][356587431197884][1968 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:32:08][356587431197884][1968 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356587431197884\",\"model\":\"SM-S901N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9308\"}'\'' -e'"" [2025-09-09 07:32:12][356587431197884][6404 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba4fc32b-a863-4747-a049-c1547ca093b0","id":"QR_ba4fc32b-a863-4747-a049-c1547ca093b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:32:13][356587431197884][6560 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 07:32:13][356587431197884][6560 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-09 07:32:13][356587431197884][6560 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:33:03][350756489375991][0 ms][INFO] === Request start === [2025-09-09 07:33:03][350756489375991][1 ms][DEBUG] START check_scloud [2025-09-09 07:33:03][350756489375991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:33:03][350756489375991][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 28658 4974 24557092 217104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:33:03][350756489375991][313 ms][DEBUG] targetPkg: running [2025-09-09 07:33:03][350756489375991][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 07:33:03][350756489375991][313 ms][DEBUG] START check_boot_completed [2025-09-09 07:33:03][350756489375991][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:33:03][350756489375991][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:33:03][350756489375991][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:33:04][350756489375991][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:33:04][350756489375991][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:33:04][350756489375991][406 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:33:04][350756489375991][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756489375991\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-09-09 07:33:04][350756489375991][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:33:04][350756489375991][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756489375991\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-09-09 07:33:08][350756489375991][5155 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60644362-5694-4104-b677-bcabed8751de","id":"QR_60644362-5694-4104-b677-bcabed8751de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:33:08][350756489375991][5311 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 07:33:08][350756489375991][5311 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 07:33:08][350756489375991][5311 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:33:11][350756489375991][1 ms][INFO] === Request start === [2025-09-09 07:33:11][350756489375991][1 ms][DEBUG] START check_scloud [2025-09-09 07:33:11][350756489375991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:33:11][350756489375991][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 28658 4974 24717156 201820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:33:11][350756489375991][305 ms][DEBUG] targetPkg: running [2025-09-09 07:33:11][350756489375991][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 07:33:11][350756489375991][305 ms][DEBUG] START check_boot_completed [2025-09-09 07:33:11][350756489375991][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:33:11][350756489375991][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:33:11][350756489375991][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:33:11][350756489375991][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:33:11][350756489375991][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:33:11][350756489375991][414 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:33:11][350756489375991][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756489375991\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5017\"}'\'' -e'"" [2025-09-09 07:33:11][350756489375991][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:33:11][350756489375991][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756489375991\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5017\"}'\'' -e'"" [2025-09-09 07:33:17][350756489375991][6194 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8eb0979-d00a-4077-abee-087242b402b0","id":"QR_e8eb0979-d00a-4077-abee-087242b402b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:33:17][350756489375991][6350 ms][DEBUG] proc_open done in 5935 ms; code=255; res.len=3343 [2025-09-09 07:33:17][350756489375991][6350 ms][DEBUG] END runCmdUntilRes#1 in 5935 ms [2025-09-09 07:33:17][350756489375991][6350 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:35:04][352192669516287][0 ms][INFO] === Request start === [2025-09-09 07:35:04][352192669516287][1 ms][DEBUG] START check_scloud [2025-09-09 07:35:04][352192669516287][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:35:04][352192669516287][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 28658 4974 24857508 165396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:35:04][352192669516287][297 ms][DEBUG] targetPkg: running [2025-09-09 07:35:04][352192669516287][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 07:35:04][352192669516287][297 ms][DEBUG] START check_boot_completed [2025-09-09 07:35:04][352192669516287][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:35:04][352192669516287][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:35:04][352192669516287][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:35:04][352192669516287][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:35:04][352192669516287][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:35:04][352192669516287][406 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:35:04][352192669516287][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669516287\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6580\"}'\'' -e'"" [2025-09-09 07:35:04][352192669516287][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:35:04][352192669516287][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669516287\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6580\"}'\'' -e'"" [2025-09-09 07:35:08][352192669516287][4264 ms][DEBUG] proc_open done in 3859 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 07:35:08][352192669516287][4264 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-09 07:35:08][352192669516287][4264 ms][WARN] Detected error: Process with pid 28658 either refused to load frida-agent, or terminated during injectionProcess with pid 28658 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 07:35:08][352192669516287][4264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 07:35:08][352192669516287][4546 ms][DEBUG] SU: done in 281 ms; outsystem 5388 4974 12787732 252564 ep_poll 0 S system_server\n [2025-09-09 07:35:08][352192669516287][4546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 07:35:08][352192669516287][4686 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 07:35:08][352192669516287][4686 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 07:35:08][352192669516287][4686 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 07:35:08][352192669516287][4811 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 07:35:08][352192669516287][4811 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 07:35:09][352192669516287][4999 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 07:35:11][352192669516287][7014 ms][DEBUG] START check_boot_completed [2025-09-09 07:35:11][352192669516287][7014 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:35:11][352192669516287][7061 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:35:11][352192669516287][7061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:35:11][352192669516287][7107 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:35:11][352192669516287][7107 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:35:14][352192669516287][10122 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 07:35:14][352192669516287][10122 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669516287\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6580\"}'\'' -e'"" [2025-09-09 07:35:17][352192669516287][13778 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de6a0184-6b13-4221-a333-e6a0006c35a5","id":"QR_de6a0184-6b13-4221-a333-e6a0006c35a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:35:17][352192669516287][13934 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-09 07:35:17][352192669516287][13934 ms][DEBUG] END runCmdUntilRes#2 in 3812 ms [2025-09-09 07:35:17][352192669516287][13934 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:35:20][352192669516287][1 ms][INFO] === Request start === [2025-09-09 07:35:20][352192669516287][1 ms][DEBUG] START check_scloud [2025-09-09 07:35:20][352192669516287][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:35:20][352192669516287][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 31168 4974 23530720 124420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:35:20][352192669516287][252 ms][DEBUG] targetPkg: running [2025-09-09 07:35:20][352192669516287][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-09 07:35:20][352192669516287][252 ms][DEBUG] START check_boot_completed [2025-09-09 07:35:20][352192669516287][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:35:20][352192669516287][298 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:35:20][352192669516287][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:35:20][352192669516287][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:35:20][352192669516287][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:35:20][352192669516287][345 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:35:20][352192669516287][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669516287\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7683\"}'\'' -e'"" [2025-09-09 07:35:20][352192669516287][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:35:20][352192669516287][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669516287\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7683\"}'\'' -e'"" [2025-09-09 07:35:25][352192669516287][5547 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b0d8afb-c7cd-4e56-a83b-c7ca859f10f3","id":"QR_4b0d8afb-c7cd-4e56-a83b-c7ca859f10f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:35:26][352192669516287][5704 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-09 07:35:26][352192669516287][5704 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-09 07:35:26][352192669516287][5704 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:36:03][355195304609406][0 ms][INFO] === Request start === [2025-09-09 07:36:03][355195304609406][1 ms][DEBUG] START check_scloud [2025-09-09 07:36:03][355195304609406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:36:03][355195304609406][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 31168 4974 23606140 137500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:36:03][355195304609406][319 ms][DEBUG] targetPkg: running [2025-09-09 07:36:03][355195304609406][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 07:36:03][355195304609406][319 ms][DEBUG] START check_boot_completed [2025-09-09 07:36:03][355195304609406][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:36:03][355195304609406][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:36:03][355195304609406][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:36:03][355195304609406][459 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 07:36:03][355195304609406][459 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 07:36:03][355195304609406][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:36:04][355195304609406][615 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4931\nsuccessfulTxPacketsPerSecond: 0.7237257401100867\nretriedTxPackets: 915\nretriedTxPacketsPerSecond: 0.16886933935902024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4618\nsuccessfulRxPacketsPerSecond: 0.651353166099078\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:36:04][355195304609406][615 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:36:04][355195304609406][1037 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.362/330.362/330.362/0.000 ms\n [2025-09-09 07:36:04][355195304609406][1037 ms][DEBUG] check_internet: online [2025-09-09 07:36:04][355195304609406][1037 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:36:04][355195304609406][1037 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195304609406\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3563\"}'\'' -e'"" [2025-09-09 07:36:04][355195304609406][1037 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:36:04][355195304609406][1037 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195304609406\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3563\"}'\'' -e'"" [2025-09-09 07:36:07][355195304609406][4286 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45721d15-09de-4212-a977-155fbd776766","id":"QR_45721d15-09de-4212-a977-155fbd776766","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:36:07][355195304609406][4442 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=3343 [2025-09-09 07:36:07][355195304609406][4442 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-09 07:36:07][355195304609406][4442 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:36:10][355195304609406][0 ms][INFO] === Request start === [2025-09-09 07:36:10][355195304609406][1 ms][DEBUG] START check_scloud [2025-09-09 07:36:10][355195304609406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:36:10][355195304609406][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 31168 4974 23787652 149260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:36:10][355195304609406][318 ms][DEBUG] targetPkg: running [2025-09-09 07:36:10][355195304609406][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 07:36:10][355195304609406][318 ms][DEBUG] START check_boot_completed [2025-09-09 07:36:10][355195304609406][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:36:10][355195304609406][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:36:10][355195304609406][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:36:10][355195304609406][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:36:10][355195304609406][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:36:10][355195304609406][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:36:10][355195304609406][521 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4931\nsuccessfulTxPacketsPerSecond: 0.7237257401100867\nretriedTxPackets: 915\nretriedTxPacketsPerSecond: 0.16886933935902024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4618\nsuccessfulRxPacketsPerSecond: 0.651353166099078\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:36:10][355195304609406][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:36:11][355195304609406][928 ms][DEBUG] SU: done in 407 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.525/310.525/310.525/0.000 ms\n [2025-09-09 07:36:11][355195304609406][928 ms][DEBUG] check_internet: online [2025-09-09 07:36:11][355195304609406][928 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:36:11][355195304609406][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195304609406\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6566\"}'\'' -e'"" [2025-09-09 07:36:11][355195304609406][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:36:11][355195304609406][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195304609406\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6566\"}'\'' -e'"" [2025-09-09 07:36:15][355195304609406][5676 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6135b1b9-8196-4816-8e58-376913051309","id":"QR_6135b1b9-8196-4816-8e58-376913051309","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:36:16][355195304609406][5832 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 07:36:16][355195304609406][5832 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-09 07:36:16][355195304609406][5832 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:36:20][353927110865356][0 ms][INFO] === Request start === [2025-09-09 07:36:20][353927110865356][1 ms][DEBUG] START check_scloud [2025-09-09 07:36:20][353927110865356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:36:20][353927110865356][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 31168 4974 23944588 160176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:36:20][353927110865356][315 ms][DEBUG] targetPkg: running [2025-09-09 07:36:20][353927110865356][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 07:36:20][353927110865356][316 ms][DEBUG] START check_boot_completed [2025-09-09 07:36:20][353927110865356][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:36:20][353927110865356][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:36:20][353927110865356][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:36:20][353927110865356][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:36:20][353927110865356][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:36:20][353927110865356][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:36:20][353927110865356][519 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4931\nsuccessfulTxPacketsPerSecond: 0.7237257401100867\nretriedTxPackets: 915\nretriedTxPacketsPerSecond: 0.16886933935902024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4618\nsuccessfulRxPacketsPerSecond: 0.651353166099078\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:36:20][353927110865356][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:36:21][353927110865356][987 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=328 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 328.810/328.810/328.810/0.000 ms\n [2025-09-09 07:36:21][353927110865356][987 ms][DEBUG] check_internet: online [2025-09-09 07:36:21][353927110865356][987 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:36:21][353927110865356][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353927110865356\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7853\"}'\'' -e'"" [2025-09-09 07:36:21][353927110865356][987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:36:21][353927110865356][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353927110865356\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7853\"}'\'' -e'"" [2025-09-09 07:36:25][353927110865356][5376 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17ecd9fd-aa18-4f7f-88fe-fd7fd623a6b2","id":"QR_17ecd9fd-aa18-4f7f-88fe-fd7fd623a6b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:36:25][353927110865356][5533 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-09 07:36:25][353927110865356][5533 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-09 07:36:25][353927110865356][5533 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:36:28][353927110865356][0 ms][INFO] === Request start === [2025-09-09 07:36:28][353927110865356][1 ms][DEBUG] START check_scloud [2025-09-09 07:36:28][353927110865356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:36:28][353927110865356][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 31168 4974 24076912 171180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:36:28][353927110865356][263 ms][DEBUG] targetPkg: running [2025-09-09 07:36:28][353927110865356][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 07:36:28][353927110865356][263 ms][DEBUG] START check_boot_completed [2025-09-09 07:36:28][353927110865356][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:36:28][353927110865356][294 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:36:28][353927110865356][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:36:28][353927110865356][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:36:28][353927110865356][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:36:28][353927110865356][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:36:28][353927110865356][466 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4931\nsuccessfulTxPacketsPerSecond: 0.7237257401100867\nretriedTxPackets: 915\nretriedTxPacketsPerSecond: 0.16886933935902024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4618\nsuccessfulRxPacketsPerSecond: 0.651353166099078\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:36:28][353927110865356][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:36:28][353927110865356][841 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.289/261.289/261.289/0.000 ms\n [2025-09-09 07:36:28][353927110865356][841 ms][DEBUG] check_internet: online [2025-09-09 07:36:28][353927110865356][841 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:36:28][353927110865356][841 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353927110865356\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5926\"}'\'' -e'"" [2025-09-09 07:36:28][353927110865356][841 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:36:28][353927110865356][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353927110865356\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5926\"}'\'' -e'"" [2025-09-09 07:36:33][353927110865356][5684 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc00d901-b107-492a-b3d7-677d0038afdc","id":"QR_bc00d901-b107-492a-b3d7-677d0038afdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:36:33][353927110865356][5840 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 07:36:33][353927110865356][5840 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 07:36:33][353927110865356][5840 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:37:03][350011600093523][0 ms][INFO] === Request start === [2025-09-09 07:37:03][350011600093523][1 ms][DEBUG] START check_scloud [2025-09-09 07:37:03][350011600093523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:37:03][350011600093523][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 31168 4974 24212264 183012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:37:03][350011600093523][317 ms][DEBUG] targetPkg: running [2025-09-09 07:37:03][350011600093523][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 07:37:03][350011600093523][317 ms][DEBUG] START check_boot_completed [2025-09-09 07:37:03][350011600093523][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:37:03][350011600093523][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:37:03][350011600093523][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:37:03][350011600093523][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:37:03][350011600093523][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:37:03][350011600093523][410 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:37:03][350011600093523][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011600093523\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1403\"}'\'' -e'"" [2025-09-09 07:37:03][350011600093523][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:37:03][350011600093523][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011600093523\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1403\"}'\'' -e'"" [2025-09-09 07:37:07][350011600093523][3706 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea6e190a-d7ef-420f-abd4-045055f1afc6","id":"QR_ea6e190a-d7ef-420f-abd4-045055f1afc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:37:07][350011600093523][3863 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-09 07:37:07][350011600093523][3863 ms][DEBUG] END runCmdUntilRes#1 in 3453 ms [2025-09-09 07:37:07][350011600093523][3863 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:37:09][350011600093523][0 ms][INFO] === Request start === [2025-09-09 07:37:09][350011600093523][1 ms][DEBUG] START check_scloud [2025-09-09 07:37:09][350011600093523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:37:09][350011600093523][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 31168 4974 24372068 194164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:37:09][350011600093523][277 ms][DEBUG] targetPkg: running [2025-09-09 07:37:09][350011600093523][277 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 07:37:09][350011600093523][277 ms][DEBUG] START check_boot_completed [2025-09-09 07:37:09][350011600093523][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:37:09][350011600093523][308 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:37:09][350011600093523][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:37:09][350011600093523][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:37:09][350011600093523][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:37:09][350011600093523][356 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:37:09][350011600093523][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011600093523\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4301\"}'\'' -e'"" [2025-09-09 07:37:09][350011600093523][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:37:09][350011600093523][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011600093523\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4301\"}'\'' -e'"" [2025-09-09 07:37:14][350011600093523][5073 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e22dfaeb-ea6b-4ee6-9bb5-828fb7d3aa84","id":"QR_e22dfaeb-ea6b-4ee6-9bb5-828fb7d3aa84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:37:14][350011600093523][5229 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-09 07:37:14][350011600093523][5229 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-09 07:37:14][350011600093523][5229 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:38:03][352397451800456][1 ms][INFO] === Request start === [2025-09-09 07:38:03][352397451800456][1 ms][DEBUG] START check_scloud [2025-09-09 07:38:03][352397451800456][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:38:03][352397451800456][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31168 4974 24492004 205932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:38:03][352397451800456][309 ms][DEBUG] targetPkg: running [2025-09-09 07:38:03][352397451800456][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 07:38:03][352397451800456][310 ms][DEBUG] START check_boot_completed [2025-09-09 07:38:03][352397451800456][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:38:03][352397451800456][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:38:03][352397451800456][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:38:03][352397451800456][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:38:03][352397451800456][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:38:03][352397451800456][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:38:03][352397451800456][528 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4931\nsuccessfulTxPacketsPerSecond: 0.7237257401100867\nretriedTxPackets: 915\nretriedTxPacketsPerSecond: 0.16886933935902024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4618\nsuccessfulRxPacketsPerSecond: 0.651353166099078\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:38:03][352397451800456][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:38:05][352397451800456][1918 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.046/300.046/300.046/0.000 ms\n [2025-09-09 07:38:05][352397451800456][1918 ms][DEBUG] check_internet: online [2025-09-09 07:38:05][352397451800456][1918 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:38:05][352397451800456][1918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451800456\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8851\"}'\'' -e'"" [2025-09-09 07:38:05][352397451800456][1918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:38:05][352397451800456][1918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451800456\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8851\"}'\'' -e'"" [2025-09-09 07:38:08][352397451800456][5245 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-09 07:38:08][352397451800456][5401 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=101 [2025-09-09 07:38:08][352397451800456][5401 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 07:38:08][352397451800456][5401 ms][INFO] SUCCESS response from frida (len=101) [2025-09-09 07:38:08][][0 ms][INFO] === Request start === [2025-09-09 07:38:08][][1 ms][DEBUG] START check_scloud [2025-09-09 07:38:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:38:09][][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31168 4974 24612076 216800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:38:09][][301 ms][DEBUG] targetPkg: running [2025-09-09 07:38:09][][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 07:38:09][][301 ms][DEBUG] START check_boot_completed [2025-09-09 07:38:09][][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:38:09][][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:38:09][][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:38:09][][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:38:09][][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:38:09][][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:38:09][][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5322\nsuccessfulTxPacketsPerSecond: 1.2969953493926347\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.33834661288503515\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4963\nsuccessfulRxPacketsPerSecond: 1.1444076612287952\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:38:09][][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:38:09][][879 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.887/222.887/222.887/0.000 ms\n [2025-09-09 07:38:09][][879 ms][DEBUG] check_internet: online [2025-09-09 07:38:09][][879 ms][DEBUG] rawBody.length=1131 [2025-09-09 07:38:09][][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T90V4JEW\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1922\"}'\'' -e'"" [2025-09-09 07:38:09][][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:38:09][][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T90V4JEW\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1922\"}'\'' -e'"" [2025-09-09 07:38:12][][3722 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-09 07:38:12][][3878 ms][DEBUG] proc_open done in 2999 ms; code=255; res.len=101 [2025-09-09 07:38:12][][3878 ms][DEBUG] END runCmdUntilRes#1 in 2999 ms [2025-09-09 07:38:12][][3878 ms][INFO] SUCCESS response from frida (len=101) [2025-09-09 07:38:14][352397451800456][0 ms][INFO] === Request start === [2025-09-09 07:38:14][352397451800456][1 ms][DEBUG] START check_scloud [2025-09-09 07:38:14][352397451800456][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:38:14][352397451800456][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31168 4974 24756724 226960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:38:14][352397451800456][307 ms][DEBUG] targetPkg: running [2025-09-09 07:38:14][352397451800456][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 07:38:14][352397451800456][307 ms][DEBUG] START check_boot_completed [2025-09-09 07:38:14][352397451800456][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:38:14][352397451800456][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:38:14][352397451800456][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:38:14][352397451800456][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:38:14][352397451800456][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:38:14][352397451800456][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:38:14][352397451800456][525 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5322\nsuccessfulTxPacketsPerSecond: 1.2969953493926347\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.33834661288503515\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4963\nsuccessfulRxPacketsPerSecond: 1.1444076612287952\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:38:14][352397451800456][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:38:15][352397451800456][838 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.214/224.214/224.214/0.000 ms\n [2025-09-09 07:38:15][352397451800456][838 ms][DEBUG] check_internet: online [2025-09-09 07:38:15][352397451800456][838 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:38:15][352397451800456][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451800456\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2368\"}'\'' -e'"" [2025-09-09 07:38:15][352397451800456][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:38:15][352397451800456][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451800456\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2368\"}'\'' -e'"" [2025-09-09 07:38:20][352397451800456][6040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2975a3fa-0861-4500-a04d-262c0f252331","id":"QR_2975a3fa-0861-4500-a04d-262c0f252331","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:38:20][352397451800456][6196 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-09 07:38:20][352397451800456][6196 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-09 07:38:20][352397451800456][6196 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:38:24][352397451800456][0 ms][INFO] === Request start === [2025-09-09 07:38:24][352397451800456][1 ms][DEBUG] START check_scloud [2025-09-09 07:38:24][352397451800456][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:38:24][352397451800456][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 31168 4974 24884440 237752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:38:24][352397451800456][296 ms][DEBUG] targetPkg: running [2025-09-09 07:38:24][352397451800456][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 07:38:24][352397451800456][296 ms][DEBUG] START check_boot_completed [2025-09-09 07:38:24][352397451800456][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:38:24][352397451800456][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:38:24][352397451800456][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:38:24][352397451800456][391 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 07:38:24][352397451800456][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:38:24][352397451800456][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:38:24][352397451800456][515 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5322\nsuccessfulTxPacketsPerSecond: 1.2969953493926347\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.33834661288503515\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4963\nsuccessfulRxPacketsPerSecond: 1.1444076612287952\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:38:24][352397451800456][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:38:25][352397451800456][952 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.753/327.753/327.753/0.000 ms\n [2025-09-09 07:38:25][352397451800456][952 ms][DEBUG] check_internet: online [2025-09-09 07:38:25][352397451800456][953 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:38:25][352397451800456][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451800456\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4070\"}'\'' -e'"" [2025-09-09 07:38:25][352397451800456][953 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:38:25][352397451800456][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451800456\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4070\"}'\'' -e'"" [2025-09-09 07:38:33][352397451800456][8935 ms][DEBUG] proc_open done in 7982 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 07:38:33][352397451800456][8935 ms][DEBUG] END runCmdUntilRes#1 in 7982 ms [2025-09-09 07:38:33][352397451800456][8935 ms][WARN] Detected error: Process with pid 31168 either refused to load frida-agent, or terminated during injectionProcess with pid 31168 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 07:38:33][352397451800456][8935 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 07:38:33][352397451800456][9325 ms][DEBUG] SU: done in 390 ms; out [2025-09-09 07:38:33][352397451800456][9325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 07:38:33][352397451800456][9591 ms][DEBUG] SU: done in 265 ms; out [2025-09-09 07:38:33][352397451800456][9591 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 07:38:33][352397451800456][9591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 07:38:34][352397451800456][9919 ms][DEBUG] SU: done in 328 ms; out [2025-09-09 07:38:34][352397451800456][9919 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 07:38:34][352397451800456][10403 ms][DEBUG] SU: done in 484 ms; out [2025-09-09 07:38:36][352397451800456][12418 ms][DEBUG] START check_boot_completed [2025-09-09 07:38:36][352397451800456][12418 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:38:36][352397451800456][12465 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:38:36][352397451800456][12465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:38:36][352397451800456][12512 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:38:36][352397451800456][12512 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:38:39][352397451800456][15527 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 07:38:39][352397451800456][15527 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451800456\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4070\"}'\'' -e'"" [2025-09-09 07:38:41][352397451800456][16949 ms][DEBUG] proc_open done in 1422 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 07:38:41][352397451800456][16949 ms][DEBUG] END runCmdUntilRes#2 in 1422 ms [2025-09-09 07:38:41][352397451800456][16949 ms][WARN] Detected error 2; Reboot the device [2025-09-09 07:38:41][352397451800456][16949 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 07:38:41][352397451800456][17200 ms][DEBUG] SU: done in 251 ms; outsystem 541 32667 7409896 127144 binder_ioctl 0 R system_server\n [2025-09-09 07:38:41][352397451800456][17201 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 07:38:41][352397451800456][17839 ms][DEBUG] SU: done in 638 ms; out [2025-09-09 07:49:05][350105093916487][1 ms][INFO] === Request start === [2025-09-09 07:49:05][350105093916487][1 ms][DEBUG] START check_scloud [2025-09-09 07:49:05][350105093916487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:49:05][350105093916487][330 ms][DEBUG] SU: done in 329 ms; out [2025-09-09 07:49:05][350105093916487][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 07:49:05][350105093916487][361 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 07:49:05][350105093916487][361 ms][DEBUG] check_devices: device found [2025-09-09 07:49:05][350105093916487][361 ms][WARN] targetPkg: not running, restarting [2025-09-09 07:49:05][350105093916487][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 07:49:05][350105093916487][470 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 07:49:05][350105093916487][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 07:49:05][350105093916487][658 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 07:49:07][350105093916487][2673 ms][DEBUG] END check_scloud in 2672 ms [2025-09-09 07:49:07][350105093916487][2673 ms][DEBUG] START check_boot_completed [2025-09-09 07:49:07][350105093916487][2673 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:49:07][350105093916487][2720 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:49:07][350105093916487][2720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:49:08][350105093916487][2767 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:49:08][350105093916487][2767 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 07:49:08][350105093916487][2767 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:49:08][350105093916487][2767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350105093916487\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8065\"}'\'' -e'"" [2025-09-09 07:49:08][350105093916487][2767 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:49:08][350105093916487][2767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350105093916487\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8065\"}'\'' -e'"" [2025-09-09 07:49:14][350105093916487][9062 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2499d24-376e-4ee2-8743-02dbea312962","id":"QR_d2499d24-376e-4ee2-8743-02dbea312962","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:49:14][350105093916487][9218 ms][DEBUG] proc_open done in 6451 ms; code=255; res.len=3343 [2025-09-09 07:49:14][350105093916487][9218 ms][DEBUG] END runCmdUntilRes#1 in 6452 ms [2025-09-09 07:49:14][350105093916487][9218 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:49:17][350105093916487][0 ms][INFO] === Request start === [2025-09-09 07:49:17][350105093916487][1 ms][DEBUG] START check_scloud [2025-09-09 07:49:17][350105093916487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:49:18][350105093916487][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 15758 5018 23520864 125228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:49:18][350105093916487][330 ms][DEBUG] targetPkg: running [2025-09-09 07:49:18][350105093916487][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-09 07:49:18][350105093916487][330 ms][DEBUG] START check_boot_completed [2025-09-09 07:49:18][350105093916487][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:49:18][350105093916487][377 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:49:18][350105093916487][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:49:18][350105093916487][425 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 07:49:18][350105093916487][425 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 07:49:18][350105093916487][425 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:49:18][350105093916487][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350105093916487\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5992\"}'\'' -e'"" [2025-09-09 07:49:18][350105093916487][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:49:18][350105093916487][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350105093916487\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5992\"}'\'' -e'"" [2025-09-09 07:49:22][350105093916487][4266 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c20d42ae-15e2-4e2b-9ca4-356f917169fa","id":"QR_c20d42ae-15e2-4e2b-9ca4-356f917169fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:49:22][350105093916487][4423 ms][DEBUG] proc_open done in 3997 ms; code=255; res.len=3343 [2025-09-09 07:49:22][350105093916487][4423 ms][DEBUG] END runCmdUntilRes#1 in 3997 ms [2025-09-09 07:49:22][350105093916487][4423 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:52:03][356414817839395][1 ms][INFO] === Request start === [2025-09-09 07:52:03][356414817839395][1 ms][DEBUG] START check_scloud [2025-09-09 07:52:03][356414817839395][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:52:03][356414817839395][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 15758 5018 23573836 138148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:52:03][356414817839395][266 ms][DEBUG] targetPkg: running [2025-09-09 07:52:03][356414817839395][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 07:52:03][356414817839395][266 ms][DEBUG] START check_boot_completed [2025-09-09 07:52:03][356414817839395][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:52:03][356414817839395][298 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:52:03][356414817839395][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:52:03][356414817839395][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:52:03][356414817839395][345 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:52:03][356414817839395][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:52:03][356414817839395][472 ms][DEBUG] SU: done in 127 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1205\nsuccessfulTxPacketsPerSecond: 0.47485272924096616\nretriedTxPackets: 181\nretriedTxPacketsPerSecond: 0.1129020475118381\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1524\nsuccessfulRxPacketsPerSecond: 0.42836365085373873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:52:03][356414817839395][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:52:05][356414817839395][2063 ms][DEBUG] SU: done in 1591 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.061/304.061/304.061/0.000 ms\n [2025-09-09 07:52:05][356414817839395][2063 ms][DEBUG] check_internet: online [2025-09-09 07:52:05][356414817839395][2063 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:52:05][356414817839395][2063 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817839395\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8995\"}'\'' -e'"" [2025-09-09 07:52:05][356414817839395][2063 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:52:05][356414817839395][2063 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817839395\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8995\"}'\'' -e'"" [2025-09-09 07:52:09][356414817839395][6296 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_097ed2e4-a58c-41fd-bab8-0c7b24e89cd6","id":"QR_097ed2e4-a58c-41fd-bab8-0c7b24e89cd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:52:09][356414817839395][6452 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 07:52:09][356414817839395][6452 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 07:52:09][356414817839395][6452 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:52:12][356414817839395][0 ms][INFO] === Request start === [2025-09-09 07:52:12][356414817839395][1 ms][DEBUG] START check_scloud [2025-09-09 07:52:12][356414817839395][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:52:12][356414817839395][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 15758 5018 23738644 149716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:52:12][356414817839395][285 ms][DEBUG] targetPkg: running [2025-09-09 07:52:12][356414817839395][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-09 07:52:12][356414817839395][285 ms][DEBUG] START check_boot_completed [2025-09-09 07:52:12][356414817839395][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:52:12][356414817839395][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:52:12][356414817839395][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:52:12][356414817839395][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:52:12][356414817839395][379 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:52:12][356414817839395][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:52:12][356414817839395][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1205\nsuccessfulTxPacketsPerSecond: 0.47485272924096616\nretriedTxPackets: 181\nretriedTxPacketsPerSecond: 0.1129020475118381\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1524\nsuccessfulRxPacketsPerSecond: 0.42836365085373873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:52:12][356414817839395][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:52:13][356414817839395][972 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.714/329.714/329.714/0.000 ms\n [2025-09-09 07:52:13][356414817839395][972 ms][DEBUG] check_internet: online [2025-09-09 07:52:13][356414817839395][972 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:52:13][356414817839395][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817839395\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7968\"}'\'' -e'"" [2025-09-09 07:52:13][356414817839395][973 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:52:13][356414817839395][973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817839395\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7968\"}'\'' -e'"" [2025-09-09 07:52:17][356414817839395][5908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba906734-1936-4f54-a594-9459292fd988","id":"QR_ba906734-1936-4f54-a594-9459292fd988","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:52:18][356414817839395][6065 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 07:52:18][356414817839395][6065 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 07:52:18][356414817839395][6065 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:54:03][352682502293540][1 ms][INFO] === Request start === [2025-09-09 07:54:03][352682502293540][1 ms][DEBUG] START check_scloud [2025-09-09 07:54:03][352682502293540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:54:03][352682502293540][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 15758 5018 23848212 160708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:54:03][352682502293540][304 ms][DEBUG] targetPkg: running [2025-09-09 07:54:03][352682502293540][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 07:54:03][352682502293540][304 ms][DEBUG] START check_boot_completed [2025-09-09 07:54:03][352682502293540][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:54:03][352682502293540][349 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 07:54:03][352682502293540][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:54:03][352682502293540][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:54:03][352682502293540][396 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 07:54:03][352682502293540][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:54:03][352682502293540][505 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1205\nsuccessfulTxPacketsPerSecond: 0.47485272924096616\nretriedTxPackets: 181\nretriedTxPacketsPerSecond: 0.1129020475118381\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1524\nsuccessfulRxPacketsPerSecond: 0.42836365085373873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:54:03][352682502293540][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:54:04][352682502293540][896 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.269/287.269/287.269/0.000 ms\n [2025-09-09 07:54:04][352682502293540][896 ms][DEBUG] check_internet: online [2025-09-09 07:54:04][352682502293540][896 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:54:04][352682502293540][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502293540\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2867\"}'\'' -e'"" [2025-09-09 07:54:04][352682502293540][896 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:54:04][352682502293540][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502293540\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2867\"}'\'' -e'"" [2025-09-09 07:54:08][352682502293540][5442 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5986a10-d262-4363-bcfa-e5c94b97d3d9","id":"QR_a5986a10-d262-4363-bcfa-e5c94b97d3d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:54:08][352682502293540][5598 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-09 07:54:08][352682502293540][5598 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 07:54:08][352682502293540][5598 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:54:11][352682502293540][0 ms][INFO] === Request start === [2025-09-09 07:54:11][352682502293540][1 ms][DEBUG] START check_scloud [2025-09-09 07:54:11][352682502293540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:54:11][352682502293540][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 15758 5018 24017436 173128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:54:11][352682502293540][282 ms][DEBUG] targetPkg: running [2025-09-09 07:54:11][352682502293540][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-09 07:54:11][352682502293540][282 ms][DEBUG] START check_boot_completed [2025-09-09 07:54:11][352682502293540][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:54:11][352682502293540][329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:54:11][352682502293540][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:54:11][352682502293540][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:54:11][352682502293540][376 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:54:11][352682502293540][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:54:11][352682502293540][501 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1205\nsuccessfulTxPacketsPerSecond: 0.47485272924096616\nretriedTxPackets: 181\nretriedTxPacketsPerSecond: 0.1129020475118381\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1524\nsuccessfulRxPacketsPerSecond: 0.42836365085373873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:54:11][352682502293540][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:54:12][352682502293540][907 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.235/305.235/305.235/0.000 ms\n [2025-09-09 07:54:12][352682502293540][907 ms][DEBUG] check_internet: online [2025-09-09 07:54:12][352682502293540][907 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:54:12][352682502293540][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502293540\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1273\"}'\'' -e'"" [2025-09-09 07:54:12][352682502293540][907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:54:12][352682502293540][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502293540\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1273\"}'\'' -e'"" [2025-09-09 07:54:17][352682502293540][6062 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9c04264-b4f6-4322-8b9b-42855130c4fa","id":"QR_f9c04264-b4f6-4322-8b9b-42855130c4fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:54:17][352682502293540][6218 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 07:54:17][352682502293540][6218 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 07:54:17][352682502293540][6218 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:54:21][352623174851421][0 ms][INFO] === Request start === [2025-09-09 07:54:21][352623174851421][1 ms][DEBUG] START check_scloud [2025-09-09 07:54:21][352623174851421][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:54:22][352623174851421][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 15758 5018 24200868 184024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:54:22][352623174851421][321 ms][DEBUG] targetPkg: running [2025-09-09 07:54:22][352623174851421][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 07:54:22][352623174851421][321 ms][DEBUG] START check_boot_completed [2025-09-09 07:54:22][352623174851421][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:54:22][352623174851421][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:54:22][352623174851421][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:54:22][352623174851421][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:54:22][352623174851421][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:54:22][352623174851421][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:54:22][352623174851421][525 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1205\nsuccessfulTxPacketsPerSecond: 0.47485272924096616\nretriedTxPackets: 181\nretriedTxPacketsPerSecond: 0.1129020475118381\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1524\nsuccessfulRxPacketsPerSecond: 0.42836365085373873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:54:22][352623174851421][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:54:22][352623174851421][977 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.616/326.616/326.616/0.000 ms\n [2025-09-09 07:54:22][352623174851421][977 ms][DEBUG] check_internet: online [2025-09-09 07:54:22][352623174851421][977 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:54:22][352623174851421][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174851421\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5428\"}'\'' -e'"" [2025-09-09 07:54:22][352623174851421][977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:54:22][352623174851421][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174851421\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5428\"}'\'' -e'"" [2025-09-09 07:54:25][352623174851421][4257 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40d8514d-8340-4824-8eb1-9c90ea5a02f9","id":"QR_40d8514d-8340-4824-8eb1-9c90ea5a02f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:54:26][352623174851421][4413 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-09 07:54:26][352623174851421][4413 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-09 07:54:26][352623174851421][4414 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:54:28][352623174851421][0 ms][INFO] === Request start === [2025-09-09 07:54:28][352623174851421][1 ms][DEBUG] START check_scloud [2025-09-09 07:54:28][352623174851421][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:54:28][352623174851421][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 15758 5018 24327048 196060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:54:28][352623174851421][276 ms][DEBUG] targetPkg: running [2025-09-09 07:54:28][352623174851421][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 07:54:28][352623174851421][276 ms][DEBUG] START check_boot_completed [2025-09-09 07:54:28][352623174851421][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:54:28][352623174851421][323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 07:54:28][352623174851421][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:54:28][352623174851421][385 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 07:54:28][352623174851421][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 07:54:28][352623174851421][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:54:28][352623174851421][510 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1205\nsuccessfulTxPacketsPerSecond: 0.47485272924096616\nretriedTxPackets: 181\nretriedTxPacketsPerSecond: 0.1129020475118381\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1524\nsuccessfulRxPacketsPerSecond: 0.42836365085373873\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:54:28][352623174851421][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:54:29][352623174851421][885 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.153/269.153/269.153/0.000 ms\n [2025-09-09 07:54:29][352623174851421][885 ms][DEBUG] check_internet: online [2025-09-09 07:54:29][352623174851421][886 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:54:29][352623174851421][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174851421\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6348\"}'\'' -e'"" [2025-09-09 07:54:29][352623174851421][886 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:54:29][352623174851421][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174851421\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6348\"}'\'' -e'"" [2025-09-09 07:54:33][352623174851421][5525 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_856b29ef-bd10-4069-be5a-74944e0dd622","id":"QR_856b29ef-bd10-4069-be5a-74944e0dd622","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:54:34][352623174851421][5681 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 07:54:34][352623174851421][5681 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 07:54:34][352623174851421][5681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:58:03][357962504378571][1 ms][INFO] === Request start === [2025-09-09 07:58:03][357962504378571][1 ms][DEBUG] START check_scloud [2025-09-09 07:58:03][357962504378571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:58:04][357962504378571][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 15758 5018 24457252 188180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:58:04][357962504378571][315 ms][DEBUG] targetPkg: running [2025-09-09 07:58:04][357962504378571][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 07:58:04][357962504378571][315 ms][DEBUG] START check_boot_completed [2025-09-09 07:58:04][357962504378571][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:58:04][357962504378571][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 07:58:04][357962504378571][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:58:04][357962504378571][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:58:04][357962504378571][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 07:58:04][357962504378571][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:58:04][357962504378571][549 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1547\nsuccessfulTxPacketsPerSecond: 1.0880475676007018\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.17623305672405734\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1821\nsuccessfulRxPacketsPerSecond: 0.9424637381330023\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:58:04][357962504378571][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:58:05][357962504378571][1893 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.459/301.459/301.459/0.000 ms\n [2025-09-09 07:58:05][357962504378571][1893 ms][DEBUG] check_internet: online [2025-09-09 07:58:05][357962504378571][1893 ms][DEBUG] rawBody.length=1150 [2025-09-09 07:58:05][357962504378571][1893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504378571\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2722\"}'\'' -e'"" [2025-09-09 07:58:05][357962504378571][1893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:58:05][357962504378571][1894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504378571\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2722\"}'\'' -e'"" [2025-09-09 07:58:10][357962504378571][6360 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3320f3e-2a48-4ad1-bffd-c6a0ad720ddb","id":"QR_e3320f3e-2a48-4ad1-bffd-c6a0ad720ddb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:58:10][357962504378571][6517 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-09-09 07:58:10][357962504378571][6517 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-09-09 07:58:10][357962504378571][6517 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 07:58:12][357962504378571][0 ms][INFO] === Request start === [2025-09-09 07:58:12][357962504378571][1 ms][DEBUG] START check_scloud [2025-09-09 07:58:12][357962504378571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 07:58:13][357962504378571][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 15758 5018 24628396 187256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 07:58:13][357962504378571][327 ms][DEBUG] targetPkg: running [2025-09-09 07:58:13][357962504378571][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-09 07:58:13][357962504378571][327 ms][DEBUG] START check_boot_completed [2025-09-09 07:58:13][357962504378571][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 07:58:13][357962504378571][374 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 07:58:13][357962504378571][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 07:58:13][357962504378571][420 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 07:58:13][357962504378571][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 07:58:13][357962504378571][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 07:58:13][357962504378571][530 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1547\nsuccessfulTxPacketsPerSecond: 1.0880475676007018\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.17623305672405734\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1821\nsuccessfulRxPacketsPerSecond: 0.9424637381330023\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 07:58:13][357962504378571][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 07:58:13][357962504378571][920 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.201/283.201/283.201/0.000 ms\n [2025-09-09 07:58:13][357962504378571][920 ms][DEBUG] check_internet: online [2025-09-09 07:58:13][357962504378571][920 ms][DEBUG] rawBody.length=1160 [2025-09-09 07:58:13][357962504378571][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504378571\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8080\"}'\'' -e'"" [2025-09-09 07:58:13][357962504378571][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 07:58:13][357962504378571][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504378571\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8080\"}'\'' -e'"" [2025-09-09 07:58:18][357962504378571][6075 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6616d98-79fb-4a57-8f8a-f646150f959b","id":"QR_b6616d98-79fb-4a57-8f8a-f646150f959b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 07:58:19][357962504378571][6232 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 07:58:19][357962504378571][6232 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 07:58:19][357962504378571][6232 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:05:04][352060484990567][1 ms][INFO] === Request start === [2025-09-09 08:05:04][352060484990567][1 ms][DEBUG] START check_scloud [2025-09-09 08:05:04][352060484990567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:05:04][352060484990567][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 15758 5018 24710244 199084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:05:04][352060484990567][311 ms][DEBUG] targetPkg: running [2025-09-09 08:05:04][352060484990567][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 08:05:04][352060484990567][311 ms][DEBUG] START check_boot_completed [2025-09-09 08:05:04][352060484990567][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:05:04][352060484990567][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:05:04][352060484990567][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:05:04][352060484990567][406 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:05:04][352060484990567][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 08:05:04][352060484990567][406 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:05:04][352060484990567][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060484990567\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9260\"}'\'' -e'"" [2025-09-09 08:05:04][352060484990567][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:05:04][352060484990567][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060484990567\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9260\"}'\'' -e'"" [2025-09-09 08:05:09][352060484990567][5450 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c63d6eed-ae68-4bbf-ab18-7c6a1d44c9a9","id":"QR_c63d6eed-ae68-4bbf-ab18-7c6a1d44c9a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:05:09][352060484990567][5607 ms][DEBUG] proc_open done in 5200 ms; code=255; res.len=3343 [2025-09-09 08:05:09][352060484990567][5607 ms][DEBUG] END runCmdUntilRes#1 in 5200 ms [2025-09-09 08:05:09][352060484990567][5607 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:05:12][352060484990567][0 ms][INFO] === Request start === [2025-09-09 08:05:12][352060484990567][1 ms][DEBUG] START check_scloud [2025-09-09 08:05:12][352060484990567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:05:12][352060484990567][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 15758 5018 24847800 209864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:05:12][352060484990567][267 ms][DEBUG] targetPkg: running [2025-09-09 08:05:12][352060484990567][267 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 08:05:12][352060484990567][267 ms][DEBUG] START check_boot_completed [2025-09-09 08:05:12][352060484990567][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:05:12][352060484990567][314 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:05:12][352060484990567][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:05:12][352060484990567][376 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:05:12][352060484990567][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:05:12][352060484990567][377 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:05:12][352060484990567][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060484990567\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8942\"}'\'' -e'"" [2025-09-09 08:05:12][352060484990567][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:05:12][352060484990567][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060484990567\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8942\"}'\'' -e'"" [2025-09-09 08:05:16][352060484990567][4610 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 08:05:16][352060484990567][4610 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 08:05:16][352060484990567][4610 ms][WARN] Detected error: Process with pid 15758 either refused to load frida-agent, or terminated during injectionProcess with pid 15758 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 08:05:16][352060484990567][4610 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:05:16][352060484990567][4891 ms][DEBUG] SU: done in 281 ms; outsystem 5437 5018 12350844 256848 ep_poll 0 S system_server\n [2025-09-09 08:05:16][352060484990567][4891 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 08:05:17][352060484990567][5031 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:05:17][352060484990567][5032 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 08:05:17][352060484990567][5032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:05:17][352060484990567][5172 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:05:17][352060484990567][5172 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:05:17][352060484990567][5344 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 08:05:19][352060484990567][7359 ms][DEBUG] START check_boot_completed [2025-09-09 08:05:19][352060484990567][7359 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:05:19][352060484990567][7406 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:05:19][352060484990567][7406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:05:19][352060484990567][7470 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 08:05:19][352060484990567][7470 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 08:05:22][352060484990567][10483 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 08:05:22][352060484990567][10483 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060484990567\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8942\"}'\'' -e'"" [2025-09-09 08:05:27][352060484990567][15529 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92331f42-d6d1-4c04-941b-164f4459eb75","id":"QR_92331f42-d6d1-4c04-941b-164f4459eb75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:05:27][352060484990567][15685 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 08:05:27][352060484990567][15685 ms][DEBUG] END runCmdUntilRes#2 in 5202 ms [2025-09-09 08:05:27][352060484990567][15685 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:11:03][350370494004453][1 ms][INFO] === Request start === [2025-09-09 08:11:03][350370494004453][1 ms][DEBUG] START check_scloud [2025-09-09 08:11:03][350370494004453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:11:03][350370494004453][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 17942 5018 23404292 127372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:11:03][350370494004453][306 ms][DEBUG] targetPkg: running [2025-09-09 08:11:03][350370494004453][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 08:11:03][350370494004453][306 ms][DEBUG] START check_boot_completed [2025-09-09 08:11:03][350370494004453][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:11:03][350370494004453][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:11:03][350370494004453][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:11:03][350370494004453][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:11:03][350370494004453][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:11:03][350370494004453][384 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:11:03][350370494004453][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350370494004453\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7390\"}'\'' -e'"" [2025-09-09 08:11:03][350370494004453][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:11:03][350370494004453][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350370494004453\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7390\"}'\'' -e'"" [2025-09-09 08:11:08][350370494004453][4992 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79fb07de-63b7-4fc3-9672-3de83911352d","id":"QR_79fb07de-63b7-4fc3-9672-3de83911352d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:11:08][350370494004453][5149 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-09 08:11:08][350370494004453][5149 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-09 08:11:08][350370494004453][5149 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:11:10][350370494004453][0 ms][INFO] === Request start === [2025-09-09 08:11:10][350370494004453][1 ms][DEBUG] START check_scloud [2025-09-09 08:11:10][350370494004453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:11:11][350370494004453][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 17942 5018 23568652 138108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:11:11][350370494004453][309 ms][DEBUG] targetPkg: running [2025-09-09 08:11:11][350370494004453][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 08:11:11][350370494004453][309 ms][DEBUG] START check_boot_completed [2025-09-09 08:11:11][350370494004453][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:11:11][350370494004453][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:11:11][350370494004453][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:11:11][350370494004453][450 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 08:11:11][350370494004453][450 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 08:11:11][350370494004453][450 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:11:11][350370494004453][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350370494004453\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6691\"}'\'' -e'"" [2025-09-09 08:11:11][350370494004453][450 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:11:11][350370494004453][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350370494004453\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6691\"}'\'' -e'"" [2025-09-09 08:11:16][350370494004453][5480 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b06e67f-cb41-4156-b6ff-25a63e3d93ec","id":"QR_3b06e67f-cb41-4156-b6ff-25a63e3d93ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:11:16][350370494004453][5636 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-09 08:11:16][350370494004453][5636 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-09 08:11:16][350370494004453][5636 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:12:03][352743951720308][0 ms][INFO] === Request start === [2025-09-09 08:12:03][352743951720308][1 ms][DEBUG] START check_scloud [2025-09-09 08:12:03][352743951720308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:12:04][352743951720308][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 17942 5018 23710212 150124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:12:04][352743951720308][325 ms][DEBUG] targetPkg: running [2025-09-09 08:12:04][352743951720308][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 08:12:04][352743951720308][325 ms][DEBUG] START check_boot_completed [2025-09-09 08:12:04][352743951720308][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:12:04][352743951720308][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:12:04][352743951720308][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:12:04][352743951720308][420 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 08:12:04][352743951720308][421 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-09 08:12:04][352743951720308][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:12:04][352743951720308][543 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1784\nsuccessfulTxPacketsPerSecond: 0.146056893455792\nretriedTxPackets: 314\nretriedTxPacketsPerSecond: 0.01718316393597553\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2030\nsuccessfulRxPacketsPerSecond: 0.1288737295198165\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:12:04][352743951720308][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:12:05][352743951720308][1871 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.421/305.421/305.421/0.000 ms\n [2025-09-09 08:12:05][352743951720308][1871 ms][DEBUG] check_internet: online [2025-09-09 08:12:05][352743951720308][1871 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:12:05][352743951720308][1871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743951720308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2986\"}'\'' -e'"" [2025-09-09 08:12:05][352743951720308][1871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:12:05][352743951720308][1871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743951720308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2986\"}'\'' -e'"" [2025-09-09 08:12:09][352743951720308][5589 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5d9edfd-919e-484a-8007-c5c08929b2d9","id":"QR_f5d9edfd-919e-484a-8007-c5c08929b2d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:12:09][352743951720308][5745 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 08:12:09][352743951720308][5745 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 08:12:09][352743951720308][5745 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:12:12][352743951720308][0 ms][INFO] === Request start === [2025-09-09 08:12:12][352743951720308][1 ms][DEBUG] START check_scloud [2025-09-09 08:12:12][352743951720308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:12:12][352743951720308][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 17942 5018 23844620 161280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:12:12][352743951720308][286 ms][DEBUG] targetPkg: running [2025-09-09 08:12:12][352743951720308][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-09 08:12:12][352743951720308][286 ms][DEBUG] START check_boot_completed [2025-09-09 08:12:12][352743951720308][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:12:12][352743951720308][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:12:12][352743951720308][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:12:12][352743951720308][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:12:12][352743951720308][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:12:12][352743951720308][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:12:12][352743951720308][536 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1784\nsuccessfulTxPacketsPerSecond: 0.146056893455792\nretriedTxPackets: 314\nretriedTxPacketsPerSecond: 0.01718316393597553\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2030\nsuccessfulRxPacketsPerSecond: 0.1288737295198165\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:12:12][352743951720308][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:12:12][352743951720308][942 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.107/270.107/270.107/0.000 ms\n [2025-09-09 08:12:12][352743951720308][942 ms][DEBUG] check_internet: online [2025-09-09 08:12:12][352743951720308][942 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:12:12][352743951720308][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743951720308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6086\"}'\'' -e'"" [2025-09-09 08:12:12][352743951720308][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:12:12][352743951720308][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743951720308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6086\"}'\'' -e'"" [2025-09-09 08:12:18][352743951720308][6190 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72e4f936-a7b0-4155-95f8-29d085d029df","id":"QR_72e4f936-a7b0-4155-95f8-29d085d029df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:12:18][352743951720308][6347 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-09 08:12:18][352743951720308][6347 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-09 08:12:18][352743951720308][6347 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:13:03][352927941018242][1 ms][INFO] === Request start === [2025-09-09 08:13:03][352927941018242][1 ms][DEBUG] START check_scloud [2025-09-09 08:13:03][352927941018242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:13:04][352927941018242][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 17942 5018 23986956 172388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:13:04][352927941018242][318 ms][DEBUG] targetPkg: running [2025-09-09 08:13:04][352927941018242][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 08:13:04][352927941018242][318 ms][DEBUG] START check_boot_completed [2025-09-09 08:13:04][352927941018242][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:13:04][352927941018242][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:13:04][352927941018242][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:13:04][352927941018242][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:13:04][352927941018242][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:13:04][352927941018242][427 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:13:04][352927941018242][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941018242\",\"model\":\"SM-M166P\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3027\"}'\'' -e'"" [2025-09-09 08:13:04][352927941018242][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:13:04][352927941018242][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941018242\",\"model\":\"SM-M166P\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3027\"}'\'' -e'"" [2025-09-09 08:13:07][352927941018242][3739 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce47b89e-88af-4d9b-bd5f-4c3fbce07f04","id":"QR_ce47b89e-88af-4d9b-bd5f-4c3fbce07f04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:13:07][352927941018242][3895 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 08:13:07][352927941018242][3895 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-09 08:13:07][352927941018242][3895 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:13:10][352927941018242][1 ms][INFO] === Request start === [2025-09-09 08:13:10][352927941018242][1 ms][DEBUG] START check_scloud [2025-09-09 08:13:10][352927941018242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:13:10][352927941018242][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 17942 5018 24156180 184048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:13:10][352927941018242][249 ms][DEBUG] targetPkg: running [2025-09-09 08:13:10][352927941018242][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-09 08:13:10][352927941018242][249 ms][DEBUG] START check_boot_completed [2025-09-09 08:13:10][352927941018242][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:13:10][352927941018242][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:13:10][352927941018242][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:13:10][352927941018242][343 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:13:10][352927941018242][343 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 08:13:10][352927941018242][343 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:13:10][352927941018242][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941018242\",\"model\":\"SM-M166P\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7639\"}'\'' -e'"" [2025-09-09 08:13:10][352927941018242][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:13:10][352927941018242][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941018242\",\"model\":\"SM-M166P\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7639\"}'\'' -e'"" [2025-09-09 08:13:15][352927941018242][5013 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b14b85c-20a4-4d16-9893-d5538e94cd53","id":"QR_9b14b85c-20a4-4d16-9893-d5538e94cd53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:13:15][352927941018242][5169 ms][DEBUG] proc_open done in 4825 ms; code=255; res.len=3343 [2025-09-09 08:13:15][352927941018242][5169 ms][DEBUG] END runCmdUntilRes#1 in 4826 ms [2025-09-09 08:13:15][352927941018242][5169 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:14:03][352397457957565][0 ms][INFO] === Request start === [2025-09-09 08:14:03][352397457957565][1 ms][DEBUG] START check_scloud [2025-09-09 08:14:03][352397457957565][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:14:04][352397457957565][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 17942 5018 24292564 195528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:14:04][352397457957565][313 ms][DEBUG] targetPkg: running [2025-09-09 08:14:04][352397457957565][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 08:14:04][352397457957565][313 ms][DEBUG] START check_boot_completed [2025-09-09 08:14:04][352397457957565][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:14:04][352397457957565][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:14:04][352397457957565][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:14:04][352397457957565][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:14:04][352397457957565][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:14:04][352397457957565][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:14:04][352397457957565][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1916\nsuccessfulTxPacketsPerSecond: 0.6399844852246006\nretriedTxPackets: 345\nretriedTxPacketsPerSecond: 0.150299386681535\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2148\nsuccessfulRxPacketsPerSecond: 0.5721073428522945\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:14:04][352397457957565][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:14:04][352397457957565][1001 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.765/332.765/332.765/0.000 ms\n [2025-09-09 08:14:04][352397457957565][1001 ms][DEBUG] check_internet: online [2025-09-09 08:14:04][352397457957565][1001 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:14:04][352397457957565][1001 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457957565\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8556\"}'\'' -e'"" [2025-09-09 08:14:04][352397457957565][1001 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:14:04][352397457957565][1001 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457957565\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8556\"}'\'' -e'"" [2025-09-09 08:14:09][352397457957565][5577 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ab1c65c-1a41-4aba-a6a6-7c296ad18ae1","id":"QR_3ab1c65c-1a41-4aba-a6a6-7c296ad18ae1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:14:09][352397457957565][5734 ms][DEBUG] proc_open done in 4732 ms; code=255; res.len=3343 [2025-09-09 08:14:09][352397457957565][5734 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 08:14:09][352397457957565][5734 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:14:12][352397457957565][0 ms][INFO] === Request start === [2025-09-09 08:14:12][352397457957565][1 ms][DEBUG] START check_scloud [2025-09-09 08:14:12][352397457957565][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:14:12][352397457957565][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 17942 5018 24447452 207616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:14:12][352397457957565][307 ms][DEBUG] targetPkg: running [2025-09-09 08:14:12][352397457957565][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 08:14:12][352397457957565][307 ms][DEBUG] START check_boot_completed [2025-09-09 08:14:12][352397457957565][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:14:12][352397457957565][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:14:12][352397457957565][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:14:12][352397457957565][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:14:12][352397457957565][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:14:12][352397457957565][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:14:12][352397457957565][526 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1916\nsuccessfulTxPacketsPerSecond: 0.6399844852246006\nretriedTxPackets: 345\nretriedTxPacketsPerSecond: 0.150299386681535\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2148\nsuccessfulRxPacketsPerSecond: 0.5721073428522945\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:14:12][352397457957565][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:14:12][352397457957565][839 ms][DEBUG] SU: done in 314 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.252/223.252/223.252/0.000 ms\n [2025-09-09 08:14:12][352397457957565][840 ms][DEBUG] check_internet: online [2025-09-09 08:14:12][352397457957565][840 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:14:12][352397457957565][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457957565\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5509\"}'\'' -e'"" [2025-09-09 08:14:12][352397457957565][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:14:12][352397457957565][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457957565\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5509\"}'\'' -e'"" [2025-09-09 08:14:18][352397457957565][6024 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9f2f9ad-4cb5-4cc8-a2f3-73b8c1b479b9","id":"QR_b9f2f9ad-4cb5-4cc8-a2f3-73b8c1b479b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:14:18][352397457957565][6181 ms][DEBUG] proc_open done in 5341 ms; code=255; res.len=3343 [2025-09-09 08:14:18][352397457957565][6181 ms][DEBUG] END runCmdUntilRes#1 in 5341 ms [2025-09-09 08:14:18][352397457957565][6181 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:14:22][354454657061652][0 ms][INFO] === Request start === [2025-09-09 08:14:22][354454657061652][1 ms][DEBUG] START check_scloud [2025-09-09 08:14:22][354454657061652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:14:22][354454657061652][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 17942 5018 24632036 218272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:14:22][354454657061652][315 ms][DEBUG] targetPkg: running [2025-09-09 08:14:22][354454657061652][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 08:14:22][354454657061652][315 ms][DEBUG] START check_boot_completed [2025-09-09 08:14:22][354454657061652][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:14:22][354454657061652][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:14:22][354454657061652][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:14:22][354454657061652][424 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 08:14:22][354454657061652][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:14:22][354454657061652][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:14:22][354454657061652][534 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1916\nsuccessfulTxPacketsPerSecond: 0.6399844852246006\nretriedTxPackets: 345\nretriedTxPacketsPerSecond: 0.150299386681535\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2148\nsuccessfulRxPacketsPerSecond: 0.5721073428522945\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:14:22][354454657061652][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:14:23][354454657061652][926 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.188/301.188/301.188/0.000 ms\n [2025-09-09 08:14:23][354454657061652][926 ms][DEBUG] check_internet: online [2025-09-09 08:14:23][354454657061652][926 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:14:23][354454657061652][926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657061652\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8105\"}'\'' -e'"" [2025-09-09 08:14:23][354454657061652][926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:14:23][354454657061652][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657061652\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8105\"}'\'' -e'"" [2025-09-09 08:14:26][354454657061652][4470 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f51c9bca-0f8f-450d-ada1-defe394de48f","id":"QR_f51c9bca-0f8f-450d-ada1-defe394de48f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:14:27][354454657061652][4626 ms][DEBUG] proc_open done in 3700 ms; code=255; res.len=3343 [2025-09-09 08:14:27][354454657061652][4626 ms][DEBUG] END runCmdUntilRes#1 in 3700 ms [2025-09-09 08:14:27][354454657061652][4627 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:14:29][354454657061652][0 ms][INFO] === Request start === [2025-09-09 08:14:29][354454657061652][1 ms][DEBUG] START check_scloud [2025-09-09 08:14:29][354454657061652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:14:29][354454657061652][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 17942 5018 24778696 230224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:14:29][354454657061652][318 ms][DEBUG] targetPkg: running [2025-09-09 08:14:29][354454657061652][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 08:14:29][354454657061652][318 ms][DEBUG] START check_boot_completed [2025-09-09 08:14:29][354454657061652][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:14:29][354454657061652][363 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 08:14:29][354454657061652][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:14:29][354454657061652][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:14:29][354454657061652][410 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 08:14:29][354454657061652][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:14:29][354454657061652][535 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31387 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1916\nsuccessfulTxPacketsPerSecond: 0.6399844852246006\nretriedTxPackets: 345\nretriedTxPacketsPerSecond: 0.150299386681535\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2148\nsuccessfulRxPacketsPerSecond: 0.5721073428522945\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:14:29][354454657061652][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:14:30][354454657061652][972 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.990/299.990/299.990/0.000 ms\n [2025-09-09 08:14:30][354454657061652][973 ms][DEBUG] check_internet: online [2025-09-09 08:14:30][354454657061652][973 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:14:30][354454657061652][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657061652\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8227\"}'\'' -e'"" [2025-09-09 08:14:30][354454657061652][973 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:14:30][354454657061652][973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657061652\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8227\"}'\'' -e'"" [2025-09-09 08:14:35][354454657061652][5721 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a9c318e-728b-42e9-bb43-e757bfcf14fe","id":"QR_9a9c318e-728b-42e9-bb43-e757bfcf14fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:14:35][354454657061652][5877 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 08:14:35][354454657061652][5878 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 08:14:35][354454657061652][5878 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:15:04][353353826272359][0 ms][INFO] === Request start === [2025-09-09 08:15:04][353353826272359][1 ms][DEBUG] START check_scloud [2025-09-09 08:15:04][353353826272359][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:15:05][353353826272359][278 ms][DEBUG] SU: done in 278 ms; outu0_a118 17942 5018 24894568 241436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:15:05][353353826272359][279 ms][DEBUG] targetPkg: running [2025-09-09 08:15:05][353353826272359][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 08:15:05][353353826272359][279 ms][DEBUG] START check_boot_completed [2025-09-09 08:15:05][353353826272359][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:15:05][353353826272359][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:15:05][353353826272359][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:15:05][353353826272359][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:15:05][353353826272359][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:15:05][353353826272359][372 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:15:05][353353826272359][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353826272359\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5128\"}'\'' -e'"" [2025-09-09 08:15:05][353353826272359][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:15:05][353353826272359][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353826272359\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5128\"}'\'' -e'"" [2025-09-09 08:15:13][353353826272359][8261 ms][DEBUG] proc_open done in 7889 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 08:15:13][353353826272359][8261 ms][DEBUG] END runCmdUntilRes#1 in 7889 ms [2025-09-09 08:15:13][353353826272359][8261 ms][WARN] Detected error: Process with pid 17942 either refused to load frida-agent, or terminated during injectionProcess with pid 17942 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 08:15:13][353353826272359][8261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:15:13][353353826272359][8589 ms][DEBUG] SU: done in 328 ms; out [2025-09-09 08:15:13][353353826272359][8589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 08:15:13][353353826272359][8901 ms][DEBUG] SU: done in 312 ms; out [2025-09-09 08:15:13][353353826272359][8902 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 08:15:13][353353826272359][8902 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:15:14][353353826272359][9229 ms][DEBUG] SU: done in 328 ms; out [2025-09-09 08:15:14][353353826272359][9230 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:15:14][353353826272359][9448 ms][DEBUG] SU: done in 218 ms; out [2025-09-09 08:15:16][353353826272359][11463 ms][DEBUG] START check_boot_completed [2025-09-09 08:15:16][353353826272359][11463 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:15:16][353353826272359][11510 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:15:16][353353826272359][11510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:15:16][353353826272359][11573 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:15:16][353353826272359][11573 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 08:15:19][353353826272359][14587 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 08:15:19][353353826272359][14588 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353826272359\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5128\"}'\'' -e'"" [2025-09-09 08:15:21][353353826272359][16087 ms][DEBUG] proc_open done in 1499 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 08:15:21][353353826272359][16087 ms][DEBUG] END runCmdUntilRes#2 in 1500 ms [2025-09-09 08:15:21][353353826272359][16088 ms][WARN] Detected error 2; Reboot the device [2025-09-09 08:15:21][353353826272359][16088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:15:21][353353826272359][16368 ms][DEBUG] SU: done in 281 ms; outsystem 19749 19407 7785044 140204 0 0 R system_server\n [2025-09-09 08:15:21][353353826272359][16369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 08:15:22][353353826272359][17118 ms][DEBUG] SU: done in 749 ms; out [2025-09-09 08:16:05][353353826272359][1 ms][INFO] === Request start === [2025-09-09 08:16:05][353353826272359][1 ms][DEBUG] START check_scloud [2025-09-09 08:16:05][353353826272359][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:16:05][353353826272359][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-09 08:16:05][353353826272359][43 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 08:16:05][353353826272359][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 08:16:05][353353826272359][74 ms][WARN] check_devices: no device [2025-09-09 08:16:05][353353826272359][74 ms][WARN] check_devices: no device [2025-09-09 08:16:05][353353826272359][74 ms][DEBUG] END check_scloud in 73 ms [2025-09-09 08:16:08][350637545235132][0 ms][INFO] === Request start === [2025-09-09 08:16:08][350637545235132][1 ms][DEBUG] START check_scloud [2025-09-09 08:16:08][350637545235132][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:16:08][350637545235132][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-09 08:16:08][350637545235132][43 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 08:16:08][350637545235132][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 08:16:08][350637545235132][74 ms][WARN] check_devices: no device [2025-09-09 08:16:08][350637545235132][74 ms][WARN] check_devices: no device [2025-09-09 08:16:08][350637545235132][74 ms][DEBUG] END check_scloud in 74 ms [2025-09-09 08:17:05][353353826272359][0 ms][INFO] === Request start === [2025-09-09 08:17:05][353353826272359][1 ms][DEBUG] START check_scloud [2025-09-09 08:17:05][353353826272359][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:17:05][353353826272359][395 ms][DEBUG] SU: done in 395 ms; out [2025-09-09 08:17:05][353353826272359][396 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 08:17:05][353353826272359][442 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 08:17:05][353353826272359][442 ms][DEBUG] check_devices: device found [2025-09-09 08:17:05][353353826272359][442 ms][WARN] targetPkg: not running, restarting [2025-09-09 08:17:05][353353826272359][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:17:05][353353826272359][599 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 08:17:05][353353826272359][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:17:06][353353826272359][927 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 08:17:08][353353826272359][2942 ms][DEBUG] END check_scloud in 2941 ms [2025-09-09 08:17:08][353353826272359][2942 ms][DEBUG] START check_boot_completed [2025-09-09 08:17:08][353353826272359][2942 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:17:08][353353826272359][2988 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:17:08][353353826272359][2988 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:17:08][353353826272359][3051 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:17:08][353353826272359][3051 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:17:08][353353826272359][3051 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:17:08][353353826272359][3051 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353826272359\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3520\"}'\'' -e'"" [2025-09-09 08:17:08][353353826272359][3051 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:17:08][353353826272359][3051 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353826272359\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3520\"}'\'' -e'"" [2025-09-09 08:17:16][353353826272359][11127 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_654f4ae7-e396-44b8-ac92-f37fc7db2dd3","id":"QR_654f4ae7-e396-44b8-ac92-f37fc7db2dd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:17:16][353353826272359][11283 ms][DEBUG] proc_open done in 8233 ms; code=255; res.len=3343 [2025-09-09 08:17:16][353353826272359][11283 ms][DEBUG] END runCmdUntilRes#1 in 8233 ms [2025-09-09 08:17:16][353353826272359][11284 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:17:19][353353826272359][0 ms][INFO] === Request start === [2025-09-09 08:17:19][353353826272359][1 ms][DEBUG] START check_scloud [2025-09-09 08:17:19][353353826272359][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:17:20][353353826272359][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11596 4971 23857080 106268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:17:20][353353826272359][308 ms][DEBUG] targetPkg: running [2025-09-09 08:17:20][353353826272359][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 08:17:20][353353826272359][308 ms][DEBUG] START check_boot_completed [2025-09-09 08:17:20][353353826272359][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:17:20][353353826272359][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:17:20][353353826272359][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:17:20][353353826272359][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:17:20][353353826272359][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:17:20][353353826272359][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:17:20][353353826272359][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353826272359\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2883\"}'\'' -e'"" [2025-09-09 08:17:20][353353826272359][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:17:20][353353826272359][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353826272359\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2883\"}'\'' -e'"" [2025-09-09 08:17:25][353353826272359][6041 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_681c6da2-68ec-4a7a-93f8-73a0f68a8ec2","id":"QR_681c6da2-68ec-4a7a-93f8-73a0f68a8ec2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:17:26][353353826272359][6197 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-09-09 08:17:26][353353826272359][6198 ms][DEBUG] END runCmdUntilRes#1 in 5780 ms [2025-09-09 08:17:26][353353826272359][6198 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:17:27][350637545235132][0 ms][INFO] === Request start === [2025-09-09 08:17:27][350637545235132][1 ms][DEBUG] START check_scloud [2025-09-09 08:17:27][350637545235132][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:17:28][350637545235132][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 11596 4971 24047564 120744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:17:28][350637545235132][319 ms][DEBUG] targetPkg: running [2025-09-09 08:17:28][350637545235132][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 08:17:28][350637545235132][319 ms][DEBUG] START check_boot_completed [2025-09-09 08:17:28][350637545235132][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:17:28][350637545235132][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:17:28][350637545235132][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:17:28][350637545235132][444 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 08:17:28][350637545235132][444 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 08:17:28][350637545235132][444 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:17:28][350637545235132][444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545235132\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-09-09 08:17:28][350637545235132][444 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:17:28][350637545235132][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545235132\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-09-09 08:17:31][350637545235132][4052 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80cdbaa9-29e4-4eb9-a6af-9c5d6a6198a5","id":"QR_80cdbaa9-29e4-4eb9-a6af-9c5d6a6198a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:17:32][350637545235132][4208 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-09 08:17:32][350637545235132][4208 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-09 08:17:32][350637545235132][4208 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:17:34][350637545235132][0 ms][INFO] === Request start === [2025-09-09 08:17:34][350637545235132][1 ms][DEBUG] START check_scloud [2025-09-09 08:17:34][350637545235132][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:17:34][350637545235132][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11596 4971 24204592 105420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:17:34][350637545235132][298 ms][DEBUG] targetPkg: running [2025-09-09 08:17:34][350637545235132][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 08:17:34][350637545235132][298 ms][DEBUG] START check_boot_completed [2025-09-09 08:17:34][350637545235132][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:17:34][350637545235132][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:17:34][350637545235132][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:17:34][350637545235132][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:17:34][350637545235132][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:17:34][350637545235132][391 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:17:34][350637545235132][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545235132\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3076\"}'\'' -e'"" [2025-09-09 08:17:34][350637545235132][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:17:34][350637545235132][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545235132\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3076\"}'\'' -e'"" [2025-09-09 08:17:39][350637545235132][5453 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97db6de5-18b8-4dc1-b7f7-3ec471adb275","id":"QR_97db6de5-18b8-4dc1-b7f7-3ec471adb275","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:17:40][350637545235132][5609 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 08:17:40][350637545235132][5609 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-09 08:17:40][350637545235132][5609 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:19:04][352469855760196][1 ms][INFO] === Request start === [2025-09-09 08:19:04][352469855760196][1 ms][DEBUG] START check_scloud [2025-09-09 08:19:04][352469855760196][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:19:04][352469855760196][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 11596 4971 24234140 89296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:19:04][352469855760196][333 ms][DEBUG] targetPkg: running [2025-09-09 08:19:04][352469855760196][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-09 08:19:04][352469855760196][333 ms][DEBUG] START check_boot_completed [2025-09-09 08:19:04][352469855760196][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:19:04][352469855760196][380 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:19:04][352469855760196][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:19:04][352469855760196][443 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 08:19:04][352469855760196][443 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:19:04][352469855760196][443 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:19:04][352469855760196][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855760196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5346\"}'\'' -e'"" [2025-09-09 08:19:04][352469855760196][443 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:19:04][352469855760196][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855760196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5346\"}'\'' -e'"" [2025-09-09 08:19:09][352469855760196][5285 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba585e47-8947-4e7b-9d6d-b03f880b8119","id":"QR_ba585e47-8947-4e7b-9d6d-b03f880b8119","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:19:09][352469855760196][5441 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 08:19:09][352469855760196][5441 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 08:19:09][352469855760196][5442 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:19:11][352469855760196][0 ms][INFO] === Request start === [2025-09-09 08:19:11][352469855760196][1 ms][DEBUG] START check_scloud [2025-09-09 08:19:11][352469855760196][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:19:12][352469855760196][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 11596 4971 24350424 97732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:19:12][352469855760196][332 ms][DEBUG] targetPkg: running [2025-09-09 08:19:12][352469855760196][332 ms][DEBUG] END check_scloud in 332 ms [2025-09-09 08:19:12][352469855760196][332 ms][DEBUG] START check_boot_completed [2025-09-09 08:19:12][352469855760196][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:19:12][352469855760196][379 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:19:12][352469855760196][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:19:12][352469855760196][426 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:19:12][352469855760196][426 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:19:12][352469855760196][426 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:19:12][352469855760196][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855760196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3803\"}'\'' -e'"" [2025-09-09 08:19:12][352469855760196][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:19:12][352469855760196][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855760196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3803\"}'\'' -e'"" [2025-09-09 08:19:17][352469855760196][5768 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89bd4c1c-21ed-45f2-a2a1-0e4f4f212d6e","id":"QR_89bd4c1c-21ed-45f2-a2a1-0e4f4f212d6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:19:17][352469855760196][5924 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-09-09 08:19:17][352469855760196][5924 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-09 08:19:17][352469855760196][5925 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:24:03][355322294826036][1 ms][INFO] === Request start === [2025-09-09 08:24:03][355322294826036][1 ms][DEBUG] START check_scloud [2025-09-09 08:24:03][355322294826036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:24:04][355322294826036][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 11596 4971 24441624 106652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:24:04][355322294826036][299 ms][DEBUG] targetPkg: running [2025-09-09 08:24:04][355322294826036][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 08:24:04][355322294826036][299 ms][DEBUG] START check_boot_completed [2025-09-09 08:24:04][355322294826036][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:24:04][355322294826036][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:24:04][355322294826036][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:24:04][355322294826036][379 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:24:04][355322294826036][379 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 08:24:04][355322294826036][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:24:04][355322294826036][518 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1240\nsuccessfulTxPacketsPerSecond: 1.4310026315895852\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.24254281891348903\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 1.3178159827632903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:24:04][355322294826036][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:24:06][355322294826036][2174 ms][DEBUG] SU: done in 1655 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.329/301.329/301.329/0.000 ms\n [2025-09-09 08:24:06][355322294826036][2174 ms][DEBUG] check_internet: online [2025-09-09 08:24:06][355322294826036][2174 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:24:06][355322294826036][2174 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294826036\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9248\"}'\'' -e'"" [2025-09-09 08:24:06][355322294826036][2174 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:24:06][355322294826036][2174 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294826036\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9248\"}'\'' -e'"" [2025-09-09 08:24:09][355322294826036][5939 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28f9c2b5-acc1-4869-a7c4-00a093c48037","id":"QR_28f9c2b5-acc1-4869-a7c4-00a093c48037","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:24:09][355322294826036][6095 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-09 08:24:09][355322294826036][6095 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-09 08:24:09][355322294826036][6095 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:24:12][355322294826036][0 ms][INFO] === Request start === [2025-09-09 08:24:12][355322294826036][1 ms][DEBUG] START check_scloud [2025-09-09 08:24:12][355322294826036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:24:12][355322294826036][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 11596 4971 24621088 115988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:24:12][355322294826036][314 ms][DEBUG] targetPkg: running [2025-09-09 08:24:12][355322294826036][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 08:24:12][355322294826036][315 ms][DEBUG] START check_boot_completed [2025-09-09 08:24:12][355322294826036][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:24:12][355322294826036][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:24:12][355322294826036][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:24:12][355322294826036][410 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:24:12][355322294826036][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 08:24:12][355322294826036][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:24:12][355322294826036][533 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1240\nsuccessfulTxPacketsPerSecond: 1.4310026315895852\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.24254281891348903\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 1.3178159827632903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:24:12][355322294826036][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:24:13][355322294826036][970 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=328 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 328.007/328.007/328.007/0.000 ms\n [2025-09-09 08:24:13][355322294826036][971 ms][DEBUG] check_internet: online [2025-09-09 08:24:13][355322294826036][971 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:24:13][355322294826036][971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294826036\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3769\"}'\'' -e'"" [2025-09-09 08:24:13][355322294826036][971 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:24:13][355322294826036][971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294826036\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3769\"}'\'' -e'"" [2025-09-09 08:24:18][355322294826036][6110 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cce6c06-d0c4-4e70-a71e-cccb55cded91","id":"QR_9cce6c06-d0c4-4e70-a71e-cccb55cded91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:24:18][355322294826036][6266 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 08:24:18][355322294826036][6266 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 08:24:18][355322294826036][6266 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:25:04][359259104305510][0 ms][INFO] === Request start === [2025-09-09 08:25:04][359259104305510][1 ms][DEBUG] START check_scloud [2025-09-09 08:25:04][359259104305510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:25:04][359259104305510][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 11596 4971 24765600 127972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:25:04][359259104305510][297 ms][DEBUG] targetPkg: running [2025-09-09 08:25:04][359259104305510][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 08:25:04][359259104305510][297 ms][DEBUG] START check_boot_completed [2025-09-09 08:25:04][359259104305510][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:25:04][359259104305510][342 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 08:25:04][359259104305510][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:25:04][359259104305510][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:25:04][359259104305510][405 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 08:25:04][359259104305510][405 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:25:04][359259104305510][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104305510\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6446\"}'\'' -e'"" [2025-09-09 08:25:04][359259104305510][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:25:04][359259104305510][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104305510\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6446\"}'\'' -e'"" [2025-09-09 08:25:07][359259104305510][3685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8c0c010-a7fb-4ffe-b35a-7be4c6059527","id":"QR_d8c0c010-a7fb-4ffe-b35a-7be4c6059527","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:25:08][359259104305510][3842 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-09 08:25:08][359259104305510][3842 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-09 08:25:08][359259104305510][3842 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:25:10][359259104305510][0 ms][INFO] === Request start === [2025-09-09 08:25:10][359259104305510][1 ms][DEBUG] START check_scloud [2025-09-09 08:25:10][359259104305510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:25:10][359259104305510][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11596 4971 24889768 138652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:25:10][359259104305510][320 ms][DEBUG] targetPkg: running [2025-09-09 08:25:10][359259104305510][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 08:25:10][359259104305510][320 ms][DEBUG] START check_boot_completed [2025-09-09 08:25:10][359259104305510][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:25:10][359259104305510][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:25:10][359259104305510][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:25:10][359259104305510][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:25:10][359259104305510][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:25:10][359259104305510][429 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:25:10][359259104305510][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104305510\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9947\"}'\'' -e'"" [2025-09-09 08:25:10][359259104305510][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:25:10][359259104305510][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104305510\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9947\"}'\'' -e'"" [2025-09-09 08:25:15][359259104305510][5069 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61728cac-ffc7-4c31-bee9-e32a6f58adf4","id":"QR_61728cac-ffc7-4c31-bee9-e32a6f58adf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:25:15][359259104305510][5225 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 08:25:15][359259104305510][5225 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 08:25:15][359259104305510][5225 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:25:19][358453420587890][0 ms][INFO] === Request start === [2025-09-09 08:25:19][358453420587890][1 ms][DEBUG] START check_scloud [2025-09-09 08:25:19][358453420587890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:25:20][358453420587890][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 11596 4971 25053872 150532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:25:20][358453420587890][329 ms][DEBUG] targetPkg: running [2025-09-09 08:25:20][358453420587890][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-09 08:25:20][358453420587890][329 ms][DEBUG] START check_boot_completed [2025-09-09 08:25:20][358453420587890][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:25:20][358453420587890][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:25:20][358453420587890][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:25:20][358453420587890][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:25:20][358453420587890][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:25:20][358453420587890][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:25:20][358453420587890][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453420587890\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4296\"}'\'' -e'"" [2025-09-09 08:25:20][358453420587890][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:25:20][358453420587890][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453420587890\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4296\"}'\'' -e'"" [2025-09-09 08:25:24][358453420587890][5031 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afd96941-35a2-49d1-992c-6d0b0f63f6a6","id":"QR_afd96941-35a2-49d1-992c-6d0b0f63f6a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:25:24][358453420587890][5187 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-09 08:25:24][358453420587890][5187 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-09 08:25:24][358453420587890][5187 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:25:27][358453420587890][0 ms][INFO] === Request start === [2025-09-09 08:25:27][358453420587890][1 ms][DEBUG] START check_scloud [2025-09-09 08:25:27][358453420587890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:25:27][358453420587890][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 11596 4971 25172812 158812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:25:27][358453420587890][318 ms][DEBUG] targetPkg: running [2025-09-09 08:25:27][358453420587890][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 08:25:27][358453420587890][318 ms][DEBUG] START check_boot_completed [2025-09-09 08:25:27][358453420587890][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:25:27][358453420587890][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:25:27][358453420587890][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:25:27][358453420587890][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:25:27][358453420587890][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:25:27][358453420587890][428 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:25:27][358453420587890][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453420587890\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8293\"}'\'' -e'"" [2025-09-09 08:25:27][358453420587890][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:25:27][358453420587890][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453420587890\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8293\"}'\'' -e'"" [2025-09-09 08:25:31][358453420587890][4739 ms][DEBUG] proc_open done in 4311 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 08:25:31][358453420587890][4740 ms][DEBUG] END runCmdUntilRes#1 in 4312 ms [2025-09-09 08:25:31][358453420587890][4740 ms][WARN] Detected error: Process with pid 11596 either refused to load frida-agent, or terminated during injectionProcess with pid 11596 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 08:25:31][358453420587890][4740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:25:32][358453420587890][5052 ms][DEBUG] SU: done in 312 ms; outsystem 5393 4971 13275348 584808 ep_poll 0 S system_server\n [2025-09-09 08:25:32][358453420587890][5052 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 08:25:32][358453420587890][5192 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:25:32][358453420587890][5192 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 08:25:32][358453420587890][5192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:25:32][358453420587890][5333 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:25:32][358453420587890][5333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:25:32][358453420587890][5490 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 08:25:34][358453420587890][7504 ms][DEBUG] START check_boot_completed [2025-09-09 08:25:34][358453420587890][7504 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:25:34][358453420587890][7535 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:25:34][358453420587890][7535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:25:34][358453420587890][7582 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:25:34][358453420587890][7582 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:25:37][358453420587890][10597 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 08:25:37][358453420587890][10597 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453420587890\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8293\"}'\'' -e'"" [2025-09-09 08:25:42][358453420587890][15486 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50e37abe-8592-4785-9fe1-5549902a6e0c","id":"QR_50e37abe-8592-4785-9fe1-5549902a6e0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:25:42][358453420587890][15643 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-09-09 08:25:42][358453420587890][15643 ms][DEBUG] END runCmdUntilRes#2 in 5046 ms [2025-09-09 08:25:42][358453420587890][15643 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:26:03][351240643708834][0 ms][INFO] === Request start === [2025-09-09 08:26:03][351240643708834][1 ms][DEBUG] START check_scloud [2025-09-09 08:26:03][351240643708834][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:26:03][351240643708834][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 18516 4971 23791960 127732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:26:03][351240643708834][321 ms][DEBUG] targetPkg: running [2025-09-09 08:26:03][351240643708834][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 08:26:03][351240643708834][321 ms][DEBUG] START check_boot_completed [2025-09-09 08:26:03][351240643708834][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:26:03][351240643708834][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:26:03][351240643708834][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:26:03][351240643708834][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:26:03][351240643708834][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:26:03][351240643708834][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:26:03][351240643708834][540 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1240\nsuccessfulTxPacketsPerSecond: 1.4310026315895852\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.24254281891348903\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 1.3178159827632903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:26:03][351240643708834][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:26:04][351240643708834][930 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.424/256.424/256.424/0.000 ms\n [2025-09-09 08:26:04][351240643708834][930 ms][DEBUG] check_internet: online [2025-09-09 08:26:04][351240643708834][930 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:26:04][351240643708834][930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643708834\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7766\"}'\'' -e'"" [2025-09-09 08:26:04][351240643708834][930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:26:04][351240643708834][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643708834\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7766\"}'\'' -e'"" [2025-09-09 08:26:07][351240643708834][4320 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_571a0349-2a9d-44a3-92b5-f41fba50ba42","id":"QR_571a0349-2a9d-44a3-92b5-f41fba50ba42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:26:07][351240643708834][4476 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-09 08:26:07][351240643708834][4476 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 08:26:07][351240643708834][4476 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:26:10][351240643708834][1 ms][INFO] === Request start === [2025-09-09 08:26:10][351240643708834][1 ms][DEBUG] START check_scloud [2025-09-09 08:26:10][351240643708834][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:26:10][351240643708834][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 18516 4971 23936736 138428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:26:10][351240643708834][329 ms][DEBUG] targetPkg: running [2025-09-09 08:26:10][351240643708834][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-09 08:26:10][351240643708834][329 ms][DEBUG] START check_boot_completed [2025-09-09 08:26:10][351240643708834][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:26:10][351240643708834][376 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:26:10][351240643708834][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:26:10][351240643708834][423 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:26:10][351240643708834][423 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 08:26:10][351240643708834][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:26:10][351240643708834][565 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1240\nsuccessfulTxPacketsPerSecond: 1.4310026315895852\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.24254281891348903\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 1.3178159827632903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:26:10][351240643708834][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:26:11][351240643708834][1017 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.923/312.923/312.923/0.000 ms\n [2025-09-09 08:26:11][351240643708834][1017 ms][DEBUG] check_internet: online [2025-09-09 08:26:11][351240643708834][1017 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:26:11][351240643708834][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643708834\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4196\"}'\'' -e'"" [2025-09-09 08:26:11][351240643708834][1017 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:26:11][351240643708834][1017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643708834\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4196\"}'\'' -e'"" [2025-09-09 08:26:15][351240643708834][5765 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25de1c82-ff70-4763-b38f-d0b651b88621","id":"QR_25de1c82-ff70-4763-b38f-d0b651b88621","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:26:16][351240643708834][5922 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 08:26:16][351240643708834][5922 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 08:26:16][351240643708834][5922 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:28:03][351786691722499][1 ms][INFO] === Request start === [2025-09-09 08:28:03][351786691722499][1 ms][DEBUG] START check_scloud [2025-09-09 08:28:03][351786691722499][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:28:04][351786691722499][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18516 4971 24022804 150316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:28:04][351786691722499][298 ms][DEBUG] targetPkg: running [2025-09-09 08:28:04][351786691722499][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 08:28:04][351786691722499][298 ms][DEBUG] START check_boot_completed [2025-09-09 08:28:04][351786691722499][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:28:04][351786691722499][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:28:04][351786691722499][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:28:04][351786691722499][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:28:04][351786691722499][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:28:04][351786691722499][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:28:04][351786691722499][501 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1513\nsuccessfulTxPacketsPerSecond: 0.9059744535115636\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.26216843160224734\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1625\nsuccessfulRxPacketsPerSecond: 0.7665937683559384\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:28:04][351786691722499][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:28:04][351786691722499][891 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.794/277.794/277.794/0.000 ms\n [2025-09-09 08:28:04][351786691722499][892 ms][DEBUG] check_internet: online [2025-09-09 08:28:04][351786691722499][892 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:28:04][351786691722499][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691722499\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8729\"}'\'' -e'"" [2025-09-09 08:28:04][351786691722499][892 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:28:04][351786691722499][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691722499\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8729\"}'\'' -e'"" [2025-09-09 08:28:09][351786691722499][5375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cd58fd2-25d6-4b9d-bf6c-87ce74eb72e6","id":"QR_4cd58fd2-25d6-4b9d-bf6c-87ce74eb72e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:28:09][351786691722499][5531 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 08:28:09][351786691722499][5531 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-09 08:28:09][351786691722499][5531 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:28:11][351786691722499][0 ms][INFO] === Request start === [2025-09-09 08:28:11][351786691722499][1 ms][DEBUG] START check_scloud [2025-09-09 08:28:11][351786691722499][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:28:11][351786691722499][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 18516 4971 24159068 161232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:28:11][351786691722499][279 ms][DEBUG] targetPkg: running [2025-09-09 08:28:11][351786691722499][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 08:28:11][351786691722499][279 ms][DEBUG] START check_boot_completed [2025-09-09 08:28:11][351786691722499][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:28:11][351786691722499][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:28:11][351786691722499][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:28:11][351786691722499][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:28:11][351786691722499][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:28:11][351786691722499][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:28:12][351786691722499][466 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1513\nsuccessfulTxPacketsPerSecond: 0.9059744535115636\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.26216843160224734\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1625\nsuccessfulRxPacketsPerSecond: 0.7665937683559384\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:28:12][351786691722499][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:28:12][351786691722499][794 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.638/223.638/223.638/0.000 ms\n [2025-09-09 08:28:12][351786691722499][795 ms][DEBUG] check_internet: online [2025-09-09 08:28:12][351786691722499][795 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:28:12][351786691722499][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691722499\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5551\"}'\'' -e'"" [2025-09-09 08:28:12][351786691722499][795 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:28:12][351786691722499][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691722499\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5551\"}'\'' -e'"" [2025-09-09 08:28:17][351786691722499][5621 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59ee954f-2bd4-4108-971f-c05251123953","id":"QR_59ee954f-2bd4-4108-971f-c05251123953","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:28:17][351786691722499][5777 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-09 08:28:17][351786691722499][5777 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-09 08:28:17][351786691722499][5777 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:29:03][352923544387704][1 ms][INFO] === Request start === [2025-09-09 08:29:03][352923544387704][1 ms][DEBUG] START check_scloud [2025-09-09 08:29:03][352923544387704][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:29:04][352923544387704][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18516 4971 24312760 173324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:29:04][352923544387704][309 ms][DEBUG] targetPkg: running [2025-09-09 08:29:04][352923544387704][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 08:29:04][352923544387704][309 ms][DEBUG] START check_boot_completed [2025-09-09 08:29:04][352923544387704][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:29:04][352923544387704][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:29:04][352923544387704][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:29:04][352923544387704][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:29:04][352923544387704][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:29:04][352923544387704][402 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:29:04][352923544387704][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923544387704\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-09-09 08:29:04][352923544387704][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:29:04][352923544387704][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923544387704\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-09-09 08:29:07][352923544387704][3636 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72ad25fc-7659-421e-a179-812c0bc7166b","id":"QR_72ad25fc-7659-421e-a179-812c0bc7166b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:29:07][352923544387704][3792 ms][DEBUG] proc_open done in 3390 ms; code=255; res.len=3343 [2025-09-09 08:29:07][352923544387704][3792 ms][DEBUG] END runCmdUntilRes#1 in 3390 ms [2025-09-09 08:29:07][352923544387704][3792 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:29:09][352923544387704][0 ms][INFO] === Request start === [2025-09-09 08:29:09][352923544387704][1 ms][DEBUG] START check_scloud [2025-09-09 08:29:09][352923544387704][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:29:10][352923544387704][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 18516 4971 24483840 184116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:29:10][352923544387704][312 ms][DEBUG] targetPkg: running [2025-09-09 08:29:10][352923544387704][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 08:29:10][352923544387704][312 ms][DEBUG] START check_boot_completed [2025-09-09 08:29:10][352923544387704][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:29:10][352923544387704][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:29:10][352923544387704][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:29:10][352923544387704][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:29:10][352923544387704][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:29:10][352923544387704][391 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:29:10][352923544387704][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923544387704\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1900\"}'\'' -e'"" [2025-09-09 08:29:10][352923544387704][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:29:10][352923544387704][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923544387704\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1900\"}'\'' -e'"" [2025-09-09 08:29:15][352923544387704][5233 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_badd9c80-dd25-4c20-8bb2-ea466775d8a0","id":"QR_badd9c80-dd25-4c20-8bb2-ea466775d8a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:29:15][352923544387704][5389 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 08:29:15][352923544387704][5389 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 08:29:15][352923544387704][5389 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:30:08][350525791854625][1 ms][INFO] === Request start === [2025-09-09 08:30:08][350525791854625][1 ms][DEBUG] START check_scloud [2025-09-09 08:30:08][350525791854625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:30:08][350525791854625][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18516 4971 24632384 196076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:30:08][350525791854625][304 ms][DEBUG] targetPkg: running [2025-09-09 08:30:08][350525791854625][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 08:30:08][350525791854625][304 ms][DEBUG] START check_boot_completed [2025-09-09 08:30:08][350525791854625][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:30:08][350525791854625][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:30:08][350525791854625][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:30:08][350525791854625][383 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:30:08][350525791854625][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 08:30:08][350525791854625][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:30:08][350525791854625][492 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1513\nsuccessfulTxPacketsPerSecond: 0.9059744535115636\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.26216843160224734\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1625\nsuccessfulRxPacketsPerSecond: 0.7665937683559384\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:30:08][350525791854625][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:30:10][350525791854625][1898 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.569/287.569/287.569/0.000 ms\n [2025-09-09 08:30:10][350525791854625][1898 ms][DEBUG] check_internet: online [2025-09-09 08:30:10][350525791854625][1898 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:30:10][350525791854625][1898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791854625\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8277\"}'\'' -e'"" [2025-09-09 08:30:10][350525791854625][1898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:30:10][350525791854625][1898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791854625\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8277\"}'\'' -e'"" [2025-09-09 08:30:14][350525791854625][6084 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b886d22-43e2-4c8d-9351-1d4c0fa302c6","id":"QR_7b886d22-43e2-4c8d-9351-1d4c0fa302c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:30:14][350525791854625][6240 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-09-09 08:30:14][350525791854625][6240 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-09-09 08:30:14][350525791854625][6240 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:31:03][351771923532445][0 ms][INFO] === Request start === [2025-09-09 08:31:03][351771923532445][1 ms][DEBUG] START check_scloud [2025-09-09 08:31:03][351771923532445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:31:03][351771923532445][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 18516 4971 24791332 207100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:31:03][351771923532445][292 ms][DEBUG] targetPkg: running [2025-09-09 08:31:03][351771923532445][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 08:31:03][351771923532445][292 ms][DEBUG] START check_boot_completed [2025-09-09 08:31:03][351771923532445][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:31:04][351771923532445][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:31:04][351771923532445][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:31:04][351771923532445][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:31:04][351771923532445][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:31:04][351771923532445][386 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:31:04][351771923532445][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923532445\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-09-09 08:31:04][351771923532445][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:31:04][351771923532445][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923532445\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-09-09 08:31:08][351771923532445][4447 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3773319-e11c-43cb-833c-d7f7257eb8fb","id":"QR_e3773319-e11c-43cb-833c-d7f7257eb8fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:31:08][351771923532445][4603 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-09-09 08:31:08][351771923532445][4603 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-09-09 08:31:08][351771923532445][4603 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:31:10][351771923532445][0 ms][INFO] === Request start === [2025-09-09 08:31:10][351771923532445][1 ms][DEBUG] START check_scloud [2025-09-09 08:31:10][351771923532445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:31:10][351771923532445][277 ms][DEBUG] SU: done in 277 ms; outu0_a118 18516 4971 24950188 217424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:31:10][351771923532445][278 ms][DEBUG] targetPkg: running [2025-09-09 08:31:10][351771923532445][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 08:31:10][351771923532445][278 ms][DEBUG] START check_boot_completed [2025-09-09 08:31:10][351771923532445][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:31:10][351771923532445][324 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:31:10][351771923532445][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:31:11][351771923532445][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:31:11][351771923532445][371 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:31:11][351771923532445][371 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:31:11][351771923532445][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923532445\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5421\"}'\'' -e'"" [2025-09-09 08:31:11][351771923532445][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:31:11][351771923532445][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923532445\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5421\"}'\'' -e'"" [2025-09-09 08:31:16][351771923532445][6307 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e49576f9-c367-4c2d-98e9-c4c45ed929dc","id":"QR_e49576f9-c367-4c2d-98e9-c4c45ed929dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:31:17][351771923532445][6463 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=3343 [2025-09-09 08:31:17][351771923532445][6463 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-09 08:31:17][351771923532445][6463 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:31:21][351832195694402][0 ms][INFO] === Request start === [2025-09-09 08:31:21][351832195694402][1 ms][DEBUG] START check_scloud [2025-09-09 08:31:21][351832195694402][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:31:21][351832195694402][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18516 4971 25090740 229584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:31:21][351832195694402][299 ms][DEBUG] targetPkg: running [2025-09-09 08:31:21][351832195694402][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 08:31:21][351832195694402][299 ms][DEBUG] START check_boot_completed [2025-09-09 08:31:21][351832195694402][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:31:21][351832195694402][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:31:21][351832195694402][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:31:21][351832195694402][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:31:21][351832195694402][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:31:21][351832195694402][377 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:31:21][351832195694402][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351832195694402\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4006\"}'\'' -e'"" [2025-09-09 08:31:21][351832195694402][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:31:21][351832195694402][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351832195694402\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4006\"}'\'' -e'"" [2025-09-09 08:31:25][351832195694402][4470 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_616ee794-6763-4943-ac43-fca0fcd4711e","id":"QR_616ee794-6763-4943-ac43-fca0fcd4711e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:31:26][351832195694402][4626 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-09-09 08:31:26][351832195694402][4626 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-09 08:31:26][351832195694402][4626 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:31:28][351832195694402][0 ms][INFO] === Request start === [2025-09-09 08:31:28][351832195694402][1 ms][DEBUG] START check_scloud [2025-09-09 08:31:28][351832195694402][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:31:28][351832195694402][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 18516 4971 25216920 241384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:31:28][351832195694402][255 ms][DEBUG] targetPkg: running [2025-09-09 08:31:28][351832195694402][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-09 08:31:28][351832195694402][255 ms][DEBUG] START check_boot_completed [2025-09-09 08:31:28][351832195694402][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:31:28][351832195694402][302 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:31:28][351832195694402][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:31:28][351832195694402][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:31:28][351832195694402][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:31:28][351832195694402][348 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:31:28][351832195694402][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351832195694402\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-09-09 08:31:28][351832195694402][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:31:28][351832195694402][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351832195694402\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-09-09 08:31:32][351832195694402][4222 ms][DEBUG] proc_open done in 3874 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 08:31:32][351832195694402][4223 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 08:31:32][351832195694402][4223 ms][WARN] Detected error: Process with pid 18516 either refused to load frida-agent, or terminated during injectionProcess with pid 18516 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 08:31:32][351832195694402][4223 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:31:32][351832195694402][4488 ms][DEBUG] SU: done in 266 ms; outsystem 5393 4971 12993832 263556 ep_poll 0 S system_server\n [2025-09-09 08:31:32][351832195694402][4488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 08:31:33][351832195694402][4629 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:31:33][351832195694402][4629 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 08:31:33][351832195694402][4629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:31:33][351832195694402][4754 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 08:31:33][351832195694402][4754 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:31:33][351832195694402][4926 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 08:31:35][351832195694402][6941 ms][DEBUG] START check_boot_completed [2025-09-09 08:31:35][351832195694402][6941 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:31:35][351832195694402][6988 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:31:35][351832195694402][6988 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:31:35][351832195694402][7036 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 08:31:35][351832195694402][7036 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-09 08:31:38][351832195694402][10049 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 08:31:38][351832195694402][10049 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351832195694402\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-09-09 08:31:43][351832195694402][14986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_869032c0-d7b0-478f-b057-5a0105e81cff","id":"QR_869032c0-d7b0-478f-b057-5a0105e81cff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:31:43][351832195694402][15142 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 08:31:43][351832195694402][15142 ms][DEBUG] END runCmdUntilRes#2 in 5093 ms [2025-09-09 08:31:43][351832195694402][15142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:39:04][352743950567288][1 ms][INFO] === Request start === [2025-09-09 08:39:04][352743950567288][1 ms][DEBUG] START check_scloud [2025-09-09 08:39:04][352743950567288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:39:04][352743950567288][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 19884 4971 23743704 128256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:39:04][352743950567288][254 ms][DEBUG] targetPkg: running [2025-09-09 08:39:04][352743950567288][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 08:39:04][352743950567288][254 ms][DEBUG] START check_boot_completed [2025-09-09 08:39:04][352743950567288][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:39:04][352743950567288][286 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:39:04][352743950567288][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:39:04][352743950567288][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:39:04][352743950567288][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:39:04][352743950567288][332 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:39:04][352743950567288][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743950567288\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8654\"}'\'' -e'"" [2025-09-09 08:39:04][352743950567288][333 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:39:04][352743950567288][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743950567288\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8654\"}'\'' -e'"" [2025-09-09 08:39:09][352743950567288][5097 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1af02ac1-d6c5-498c-8853-d4f9fbb8475f","id":"QR_1af02ac1-d6c5-498c-8853-d4f9fbb8475f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:39:09][352743950567288][5253 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-09 08:39:09][352743950567288][5253 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-09 08:39:09][352743950567288][5253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:39:11][356019746811074][0 ms][INFO] === Request start === [2025-09-09 08:39:11][356019746811074][1 ms][DEBUG] START check_scloud [2025-09-09 08:39:11][356019746811074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:39:11][356019746811074][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 19884 4971 23924140 139108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:39:11][356019746811074][316 ms][DEBUG] targetPkg: running [2025-09-09 08:39:11][356019746811074][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 08:39:11][356019746811074][316 ms][DEBUG] START check_boot_completed [2025-09-09 08:39:11][356019746811074][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:39:11][356019746811074][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:39:11][356019746811074][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:39:11][356019746811074][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:39:11][356019746811074][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:39:11][356019746811074][409 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:39:11][356019746811074][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746811074\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3054\"}'\'' -e'"" [2025-09-09 08:39:11][356019746811074][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:39:11][356019746811074][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746811074\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3054\"}'\'' -e'"" [2025-09-09 08:39:15][356019746811074][3783 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67ce6cba-64c0-4558-80ee-c4034ffac3a5","id":"QR_67ce6cba-64c0-4558-80ee-c4034ffac3a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:39:15][356019746811074][3939 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 08:39:15][356019746811074][3940 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 08:39:15][356019746811074][3940 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:39:17][356019746811074][0 ms][INFO] === Request start === [2025-09-09 08:39:17][356019746811074][1 ms][DEBUG] START check_scloud [2025-09-09 08:39:17][356019746811074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:39:17][356019746811074][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 19884 4971 24046324 150856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:39:17][356019746811074][304 ms][DEBUG] targetPkg: running [2025-09-09 08:39:17][356019746811074][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 08:39:17][356019746811074][304 ms][DEBUG] START check_boot_completed [2025-09-09 08:39:17][356019746811074][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:39:17][356019746811074][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:39:17][356019746811074][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:39:17][356019746811074][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:39:17][356019746811074][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:39:17][356019746811074][382 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:39:17][356019746811074][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746811074\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8668\"}'\'' -e'"" [2025-09-09 08:39:17][356019746811074][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:39:17][356019746811074][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746811074\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8668\"}'\'' -e'"" [2025-09-09 08:39:23][356019746811074][5412 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8595be3-8f2f-40a7-b613-ac2cf4cb9eca","id":"QR_a8595be3-8f2f-40a7-b613-ac2cf4cb9eca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:39:23][356019746811074][5568 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-09 08:39:23][356019746811074][5568 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-09 08:39:23][356019746811074][5568 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:43:03][352600226744044][1 ms][INFO] === Request start === [2025-09-09 08:43:03][352600226744044][1 ms][DEBUG] START check_scloud [2025-09-09 08:43:03][352600226744044][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:43:04][352600226744044][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19884 4971 24182672 161988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:43:04][352600226744044][311 ms][DEBUG] targetPkg: running [2025-09-09 08:43:04][352600226744044][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 08:43:04][352600226744044][311 ms][DEBUG] START check_boot_completed [2025-09-09 08:43:04][352600226744044][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:43:04][352600226744044][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:43:04][352600226744044][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:43:04][352600226744044][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:43:04][352600226744044][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:43:04][352600226744044][405 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:43:04][352600226744044][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226744044\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3974\"}'\'' -e'"" [2025-09-09 08:43:04][352600226744044][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:43:04][352600226744044][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226744044\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3974\"}'\'' -e'"" [2025-09-09 08:43:08][352600226744044][5153 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2ec2a18-41dc-48dd-a17e-831c7b3878d2","id":"QR_a2ec2a18-41dc-48dd-a17e-831c7b3878d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:43:09][352600226744044][5310 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 08:43:09][352600226744044][5310 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 08:43:09][352600226744044][5310 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:43:11][352600226744044][0 ms][INFO] === Request start === [2025-09-09 08:43:11][352600226744044][1 ms][DEBUG] START check_scloud [2025-09-09 08:43:11][352600226744044][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:43:11][352600226744044][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19884 4971 24360092 172272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:43:11][352600226744044][315 ms][DEBUG] targetPkg: running [2025-09-09 08:43:11][352600226744044][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 08:43:11][352600226744044][315 ms][DEBUG] START check_boot_completed [2025-09-09 08:43:11][352600226744044][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:43:11][352600226744044][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:43:11][352600226744044][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:43:11][352600226744044][455 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 08:43:11][352600226744044][455 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 08:43:11][352600226744044][455 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:43:11][352600226744044][455 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226744044\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5811\"}'\'' -e'"" [2025-09-09 08:43:11][352600226744044][455 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:43:11][352600226744044][455 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226744044\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5811\"}'\'' -e'"" [2025-09-09 08:43:17][352600226744044][5657 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0011a19e-acbd-4054-9e18-0bcd81c2f91e","id":"QR_0011a19e-acbd-4054-9e18-0bcd81c2f91e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:43:17][352600226744044][5813 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-09-09 08:43:17][352600226744044][5813 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-09 08:43:17][352600226744044][5813 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:44:03][353684141907786][0 ms][INFO] === Request start === [2025-09-09 08:44:03][353684141907786][1 ms][DEBUG] START check_scloud [2025-09-09 08:44:03][353684141907786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:44:03][353684141907786][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19884 4971 24455516 184308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:44:03][353684141907786][315 ms][DEBUG] targetPkg: running [2025-09-09 08:44:03][353684141907786][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 08:44:03][353684141907786][315 ms][DEBUG] START check_boot_completed [2025-09-09 08:44:03][353684141907786][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:44:03][353684141907786][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:44:03][353684141907786][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:44:04][353684141907786][440 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 08:44:04][353684141907786][440 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-09 08:44:04][353684141907786][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:44:04][353684141907786][565 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2090\nsuccessfulTxPacketsPerSecond: 0.5578411547311903\nretriedTxPackets: 354\nretriedTxPacketsPerSecond: 0.12949883949116917\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2133\nsuccessfulRxPacketsPerSecond: 0.5080339087730483\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:44:04][353684141907786][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:44:05][353684141907786][1893 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.079/302.079/302.079/0.000 ms\n [2025-09-09 08:44:05][353684141907786][1893 ms][DEBUG] check_internet: online [2025-09-09 08:44:05][353684141907786][1893 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:44:05][353684141907786][1893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141907786\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2605\"}'\'' -e'"" [2025-09-09 08:44:05][353684141907786][1893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:44:05][353684141907786][1893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141907786\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2605\"}'\'' -e'"" [2025-09-09 08:44:09][353684141907786][6048 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6ad54d3-05ba-4407-8dbb-f9e072fa8801","id":"QR_c6ad54d3-05ba-4407-8dbb-f9e072fa8801","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:44:09][353684141907786][6204 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-09 08:44:09][353684141907786][6204 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-09 08:44:09][353684141907786][6204 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:44:12][353684141907786][1 ms][INFO] === Request start === [2025-09-09 08:44:12][353684141907786][1 ms][DEBUG] START check_scloud [2025-09-09 08:44:12][353684141907786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:44:12][353684141907786][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 19884 4971 24604260 195356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:44:12][353684141907786][268 ms][DEBUG] targetPkg: running [2025-09-09 08:44:12][353684141907786][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 08:44:12][353684141907786][268 ms][DEBUG] START check_boot_completed [2025-09-09 08:44:12][353684141907786][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:44:12][353684141907786][314 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:44:12][353684141907786][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:44:12][353684141907786][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:44:12][353684141907786][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:44:12][353684141907786][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:44:12][353684141907786][502 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2090\nsuccessfulTxPacketsPerSecond: 0.5578411547311903\nretriedTxPackets: 354\nretriedTxPacketsPerSecond: 0.12949883949116917\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2133\nsuccessfulRxPacketsPerSecond: 0.5080339087730483\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:44:12][353684141907786][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:44:13][353684141907786][830 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.484/223.484/223.484/0.000 ms\n [2025-09-09 08:44:13][353684141907786][830 ms][DEBUG] check_internet: online [2025-09-09 08:44:13][353684141907786][830 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:44:13][353684141907786][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141907786\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6856\"}'\'' -e'"" [2025-09-09 08:44:13][353684141907786][830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:44:13][353684141907786][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141907786\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6856\"}'\'' -e'"" [2025-09-09 08:44:17][353684141907786][5547 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1be54efe-2835-43b4-88ef-04add5b06903","id":"QR_1be54efe-2835-43b4-88ef-04add5b06903","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:44:17][353684141907786][5703 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-09 08:44:17][353684141907786][5704 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-09 08:44:17][353684141907786][5704 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:45:03][351199557008369][0 ms][INFO] === Request start === [2025-09-09 08:45:03][351199557008369][1 ms][DEBUG] START check_scloud [2025-09-09 08:45:03][351199557008369][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:45:03][351199557008369][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19884 4971 24734500 194656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:45:03][351199557008369][312 ms][DEBUG] targetPkg: running [2025-09-09 08:45:03][351199557008369][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 08:45:03][351199557008369][312 ms][DEBUG] START check_boot_completed [2025-09-09 08:45:03][351199557008369][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:45:03][351199557008369][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:45:03][351199557008369][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:45:03][351199557008369][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:45:03][351199557008369][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:45:03][351199557008369][421 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:45:03][351199557008369][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199557008369\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1895\"}'\'' -e'"" [2025-09-09 08:45:03][351199557008369][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:45:03][351199557008369][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199557008369\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1895\"}'\'' -e'"" [2025-09-09 08:45:07][351199557008369][4139 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_caf6bda0-8d37-450a-8e1e-bdd301f14901","id":"QR_caf6bda0-8d37-450a-8e1e-bdd301f14901","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:45:07][351199557008369][4295 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 08:45:07][351199557008369][4295 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 08:45:07][351199557008369][4295 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:45:10][351199557008369][1 ms][INFO] === Request start === [2025-09-09 08:45:10][351199557008369][1 ms][DEBUG] START check_scloud [2025-09-09 08:45:10][351199557008369][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:45:10][351199557008369][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 19884 4971 24911916 205392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:45:10][351199557008369][258 ms][DEBUG] targetPkg: running [2025-09-09 08:45:10][351199557008369][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 08:45:10][351199557008369][258 ms][DEBUG] START check_boot_completed [2025-09-09 08:45:10][351199557008369][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:45:10][351199557008369][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:45:10][351199557008369][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:45:10][351199557008369][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:45:10][351199557008369][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 08:45:10][351199557008369][351 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:45:10][351199557008369][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199557008369\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2802\"}'\'' -e'"" [2025-09-09 08:45:10][351199557008369][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:45:10][351199557008369][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199557008369\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2802\"}'\'' -e'"" [2025-09-09 08:45:15][351199557008369][5178 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2270f7e2-a956-4515-ba36-915b8969c76b","id":"QR_2270f7e2-a956-4515-ba36-915b8969c76b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:45:15][351199557008369][5334 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-09 08:45:15][351199557008369][5334 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-09 08:45:15][351199557008369][5334 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:47:03][355416333554292][1 ms][INFO] === Request start === [2025-09-09 08:47:03][355416333554292][1 ms][DEBUG] START check_scloud [2025-09-09 08:47:03][355416333554292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:47:03][355416333554292][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 19884 4971 25015404 217340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:47:03][355416333554292][300 ms][DEBUG] targetPkg: running [2025-09-09 08:47:03][355416333554292][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 08:47:03][355416333554292][300 ms][DEBUG] START check_boot_completed [2025-09-09 08:47:03][355416333554292][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:47:04][355416333554292][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:47:04][355416333554292][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:47:04][355416333554292][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:47:04][355416333554292][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:47:04][355416333554292][409 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:47:04][355416333554292][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-09-09 08:47:04][355416333554292][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:47:04][355416333554292][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-09-09 08:47:08][355416333554292][5064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11443494-9c17-466e-a2b6-c97afcaa05cf","id":"QR_11443494-9c17-466e-a2b6-c97afcaa05cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:47:08][355416333554292][5220 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 08:47:08][355416333554292][5220 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 08:47:08][355416333554292][5220 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:47:11][355416333554292][1 ms][INFO] === Request start === [2025-09-09 08:47:11][355416333554292][1 ms][DEBUG] START check_scloud [2025-09-09 08:47:11][355416333554292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:47:11][355416333554292][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 19884 4971 25194868 222328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:47:11][355416333554292][295 ms][DEBUG] targetPkg: running [2025-09-09 08:47:11][355416333554292][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 08:47:11][355416333554292][296 ms][DEBUG] START check_boot_completed [2025-09-09 08:47:11][355416333554292][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:47:11][355416333554292][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:47:11][355416333554292][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:47:11][355416333554292][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 08:47:11][355416333554292][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:47:11][355416333554292][405 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:47:11][355416333554292][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-09 08:47:11][355416333554292][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:47:11][355416333554292][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-09 08:47:15][355416333554292][4247 ms][DEBUG] proc_open done in 3842 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 08:47:15][355416333554292][4247 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-09 08:47:15][355416333554292][4247 ms][WARN] Detected error: Process with pid 19884 either refused to load frida-agent, or terminated during injectionProcess with pid 19884 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 08:47:15][355416333554292][4247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:47:15][355416333554292][4529 ms][DEBUG] SU: done in 281 ms; outsystem 5393 4971 12661252 249476 ep_poll 0 S system_server\n [2025-09-09 08:47:15][355416333554292][4529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 08:47:15][355416333554292][4669 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:47:15][355416333554292][4669 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 08:47:15][355416333554292][4669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:47:16][355416333554292][4794 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 08:47:16][355416333554292][4794 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:47:16][355416333554292][4966 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 08:47:18][355416333554292][6981 ms][DEBUG] START check_boot_completed [2025-09-09 08:47:18][355416333554292][6981 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:47:18][355416333554292][7028 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:47:18][355416333554292][7028 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:47:18][355416333554292][7091 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 08:47:18][355416333554292][7091 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 08:47:21][355416333554292][10105 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 08:47:21][355416333554292][10105 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-09 08:47:26][355416333554292][15073 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a61ce2b-2a3e-44d2-8517-9539db9bba41","id":"QR_4a61ce2b-2a3e-44d2-8517-9539db9bba41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:47:26][355416333554292][15229 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-09 08:47:26][355416333554292][15229 ms][DEBUG] END runCmdUntilRes#2 in 5124 ms [2025-09-09 08:47:26][355416333554292][15229 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:49:03][353029495615025][0 ms][INFO] === Request start === [2025-09-09 08:49:03][353029495615025][1 ms][DEBUG] START check_scloud [2025-09-09 08:49:03][353029495615025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:49:04][353029495615025][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 21450 4971 23792472 126128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:49:04][353029495615025][313 ms][DEBUG] targetPkg: running [2025-09-09 08:49:04][353029495615025][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 08:49:04][353029495615025][314 ms][DEBUG] START check_boot_completed [2025-09-09 08:49:04][353029495615025][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:49:04][353029495615025][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:49:04][353029495615025][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:49:04][353029495615025][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:49:04][353029495615025][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:49:04][353029495615025][392 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:49:04][353029495615025][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495615025\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-09-09 08:49:04][353029495615025][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:49:04][353029495615025][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495615025\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-09-09 08:49:08][353029495615025][4797 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd320ba9-f922-4081-857b-fc31e3b0d8bc","id":"QR_fd320ba9-f922-4081-857b-fc31e3b0d8bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:49:08][353029495615025][4953 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 08:49:08][353029495615025][4953 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 08:49:08][353029495615025][4953 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:49:11][353029495615025][0 ms][INFO] === Request start === [2025-09-09 08:49:11][353029495615025][1 ms][DEBUG] START check_scloud [2025-09-09 08:49:11][353029495615025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:49:11][353029495615025][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 21450 4971 23970840 136756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:49:11][353029495615025][270 ms][DEBUG] targetPkg: running [2025-09-09 08:49:11][353029495615025][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 08:49:11][353029495615025][270 ms][DEBUG] START check_boot_completed [2025-09-09 08:49:11][353029495615025][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:49:11][353029495615025][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:49:11][353029495615025][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:49:11][353029495615025][379 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:49:11][353029495615025][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:49:11][353029495615025][379 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:49:11][353029495615025][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495615025\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7768\"}'\'' -e'"" [2025-09-09 08:49:11][353029495615025][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:49:11][353029495615025][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495615025\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7768\"}'\'' -e'"" [2025-09-09 08:49:16][353029495615025][5456 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1243777-94e7-4f0d-bee4-bb77f95a7c6c","id":"QR_f1243777-94e7-4f0d-bee4-bb77f95a7c6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:49:16][353029495615025][5612 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-09 08:49:16][353029495615025][5612 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-09 08:49:16][353029495615025][5612 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:50:03][353310804537617][1 ms][INFO] === Request start === [2025-09-09 08:50:03][353310804537617][1 ms][DEBUG] START check_scloud [2025-09-09 08:50:03][353310804537617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:50:03][353310804537617][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 21450 4971 24050764 149140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:50:03][353310804537617][284 ms][DEBUG] targetPkg: running [2025-09-09 08:50:03][353310804537617][284 ms][DEBUG] END check_scloud in 282 ms [2025-09-09 08:50:03][353310804537617][284 ms][DEBUG] START check_boot_completed [2025-09-09 08:50:03][353310804537617][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:50:03][353310804537617][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:50:03][353310804537617][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:50:03][353310804537617][377 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 08:50:03][353310804537617][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 08:50:03][353310804537617][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:50:03][353310804537617][533 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2210\nsuccessfulTxPacketsPerSecond: 1.0230440676232129\nretriedTxPackets: 386\nretriedTxPacketsPerSecond: 0.2728117513661901\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2236\nsuccessfulRxPacketsPerSecond: 0.8781128247099244\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:50:03][353310804537617][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:50:05][353310804537617][1877 ms][DEBUG] SU: done in 1344 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.254/302.254/302.254/0.000 ms\n [2025-09-09 08:50:05][353310804537617][1877 ms][DEBUG] check_internet: online [2025-09-09 08:50:05][353310804537617][1877 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:50:05][353310804537617][1877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804537617\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7810\"}'\'' -e'"" [2025-09-09 08:50:05][353310804537617][1878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:50:05][353310804537617][1878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804537617\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7810\"}'\'' -e'"" [2025-09-09 08:50:09][353310804537617][5720 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ef9d76c-87a8-412d-9298-ab9b9b368d86","id":"QR_5ef9d76c-87a8-412d-9298-ab9b9b368d86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:50:09][353310804537617][5876 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-09 08:50:09][353310804537617][5876 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-09-09 08:50:09][353310804537617][5876 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:50:11][353310804537617][0 ms][INFO] === Request start === [2025-09-09 08:50:11][353310804537617][1 ms][DEBUG] START check_scloud [2025-09-09 08:50:11][353310804537617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:50:11][353310804537617][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 21450 4971 24193172 159972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:50:11][353310804537617][315 ms][DEBUG] targetPkg: running [2025-09-09 08:50:11][353310804537617][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 08:50:11][353310804537617][315 ms][DEBUG] START check_boot_completed [2025-09-09 08:50:11][353310804537617][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:50:11][353310804537617][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:50:11][353310804537617][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:50:12][353310804537617][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:50:12][353310804537617][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:50:12][353310804537617][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:50:12][353310804537617][518 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2210\nsuccessfulTxPacketsPerSecond: 1.0230440676232129\nretriedTxPackets: 386\nretriedTxPacketsPerSecond: 0.2728117513661901\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2236\nsuccessfulRxPacketsPerSecond: 0.8781128247099244\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:50:12][353310804537617][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:50:12][353310804537617][893 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.737/274.737/274.737/0.000 ms\n [2025-09-09 08:50:12][353310804537617][893 ms][DEBUG] check_internet: online [2025-09-09 08:50:12][353310804537617][893 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:50:12][353310804537617][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804537617\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7688\"}'\'' -e'"" [2025-09-09 08:50:12][353310804537617][894 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:50:12][353310804537617][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804537617\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7688\"}'\'' -e'"" [2025-09-09 08:50:17][353310804537617][6032 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b69b43e-35fa-4c64-bcca-962119ed2ab1","id":"QR_4b69b43e-35fa-4c64-bcca-962119ed2ab1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:50:17][353310804537617][6188 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 08:50:17][353310804537617][6188 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 08:50:17][353310804537617][6188 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:53:03][354464119528651][1 ms][INFO] === Request start === [2025-09-09 08:53:03][354464119528651][1 ms][DEBUG] START check_scloud [2025-09-09 08:53:03][354464119528651][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:53:04][354464119528651][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 21450 4971 24347916 171240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:53:04][354464119528651][269 ms][DEBUG] targetPkg: running [2025-09-09 08:53:04][354464119528651][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 08:53:04][354464119528651][269 ms][DEBUG] START check_boot_completed [2025-09-09 08:53:04][354464119528651][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:53:04][354464119528651][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:53:04][354464119528651][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:53:04][354464119528651][348 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:53:04][354464119528651][349 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 08:53:04][354464119528651][349 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:53:04][354464119528651][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464119528651\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9768\"}'\'' -e'"" [2025-09-09 08:53:04][354464119528651][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:53:04][354464119528651][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464119528651\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9768\"}'\'' -e'"" [2025-09-09 08:53:08][354464119528651][4455 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58327f2e-4b31-4e83-8912-c9ba152e1f67","id":"QR_58327f2e-4b31-4e83-8912-c9ba152e1f67","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:53:08][354464119528651][4611 ms][DEBUG] proc_open done in 4263 ms; code=255; res.len=3343 [2025-09-09 08:53:08][354464119528651][4612 ms][DEBUG] END runCmdUntilRes#1 in 4263 ms [2025-09-09 08:53:08][354464119528651][4612 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:53:10][354464119528651][0 ms][INFO] === Request start === [2025-09-09 08:53:10][354464119528651][1 ms][DEBUG] START check_scloud [2025-09-09 08:53:10][354464119528651][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:53:11][354464119528651][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 21450 4971 24498196 180876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:53:11][354464119528651][270 ms][DEBUG] targetPkg: running [2025-09-09 08:53:11][354464119528651][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-09 08:53:11][354464119528651][271 ms][DEBUG] START check_boot_completed [2025-09-09 08:53:11][354464119528651][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:53:11][354464119528651][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:53:11][354464119528651][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:53:11][354464119528651][395 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 08:53:11][354464119528651][395 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 08:53:11][354464119528651][395 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:53:11][354464119528651][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464119528651\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8379\"}'\'' -e'"" [2025-09-09 08:53:11][354464119528651][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:53:11][354464119528651][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464119528651\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8379\"}'\'' -e'"" [2025-09-09 08:53:16][354464119528651][5253 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf808429-b323-4a40-8c6d-d4b0b3a41cdf","id":"QR_cf808429-b323-4a40-8c6d-d4b0b3a41cdf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:53:16][354464119528651][5409 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-09 08:53:16][354464119528651][5409 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-09 08:53:16][354464119528651][5409 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:53:20][357760270109000][0 ms][INFO] === Request start === [2025-09-09 08:53:20][357760270109000][1 ms][DEBUG] START check_scloud [2025-09-09 08:53:20][357760270109000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:53:20][357760270109000][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 21450 4971 24674588 191736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:53:20][357760270109000][307 ms][DEBUG] targetPkg: running [2025-09-09 08:53:20][357760270109000][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 08:53:20][357760270109000][307 ms][DEBUG] START check_boot_completed [2025-09-09 08:53:20][357760270109000][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:53:20][357760270109000][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:53:20][357760270109000][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:53:20][357760270109000][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:53:20][357760270109000][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:53:20][357760270109000][401 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:53:20][357760270109000][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357760270109000\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7037\"}'\'' -e'"" [2025-09-09 08:53:20][357760270109000][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:53:20][357760270109000][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357760270109000\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7037\"}'\'' -e'"" [2025-09-09 08:53:24][357760270109000][3712 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b162e17f-7c4b-43a8-bb11-008b9a8b0402","id":"QR_b162e17f-7c4b-43a8-bb11-008b9a8b0402","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:53:24][357760270109000][3869 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-09 08:53:24][357760270109000][3869 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-09 08:53:24][357760270109000][3869 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:53:26][357760270109000][0 ms][INFO] === Request start === [2025-09-09 08:53:26][357760270109000][1 ms][DEBUG] START check_scloud [2025-09-09 08:53:26][357760270109000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:53:26][357760270109000][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 21450 4971 24786432 202988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:53:26][357760270109000][262 ms][DEBUG] targetPkg: running [2025-09-09 08:53:26][357760270109000][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 08:53:26][357760270109000][262 ms][DEBUG] START check_boot_completed [2025-09-09 08:53:26][357760270109000][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:53:26][357760270109000][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:53:26][357760270109000][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:53:26][357760270109000][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:53:26][357760270109000][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:53:26][357760270109000][372 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:53:26][357760270109000][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357760270109000\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8414\"}'\'' -e'"" [2025-09-09 08:53:26][357760270109000][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:53:26][357760270109000][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357760270109000\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8414\"}'\'' -e'"" [2025-09-09 08:53:31][357760270109000][5058 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10e74b6e-32f9-4fc0-9e4b-09293007ce15","id":"QR_10e74b6e-32f9-4fc0-9e4b-09293007ce15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:53:31][357760270109000][5214 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-09 08:53:31][357760270109000][5214 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-09 08:53:31][357760270109000][5214 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:54:03][350471125762806][0 ms][INFO] === Request start === [2025-09-09 08:54:03][350471125762806][1 ms][DEBUG] START check_scloud [2025-09-09 08:54:03][350471125762806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:54:03][350471125762806][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21450 4971 24873500 213892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:54:03][350471125762806][301 ms][DEBUG] targetPkg: running [2025-09-09 08:54:03][350471125762806][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 08:54:03][350471125762806][301 ms][DEBUG] START check_boot_completed [2025-09-09 08:54:03][350471125762806][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:54:03][350471125762806][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:54:03][350471125762806][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:54:03][350471125762806][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:54:03][350471125762806][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 08:54:03][350471125762806][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:54:03][350471125762806][504 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:54:03][350471125762806][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:54:04][350471125762806][1035 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=403 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 403.584/403.584/403.584/0.000 ms\n [2025-09-09 08:54:04][350471125762806][1035 ms][DEBUG] check_internet: online [2025-09-09 08:54:04][350471125762806][1035 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:54:04][350471125762806][1036 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125762806\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-09-09 08:54:04][350471125762806][1036 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:54:04][350471125762806][1036 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125762806\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-09-09 08:54:08][350471125762806][5596 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1622a819-fa40-4ec2-a517-7e551622badb","id":"QR_1622a819-fa40-4ec2-a517-7e551622badb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:54:08][350471125762806][5753 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-09 08:54:08][350471125762806][5753 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-09 08:54:08][350471125762806][5753 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:54:11][350471125762806][0 ms][INFO] === Request start === [2025-09-09 08:54:11][350471125762806][1 ms][DEBUG] START check_scloud [2025-09-09 08:54:11][350471125762806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:54:11][350471125762806][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 21450 4971 24994716 225664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:54:11][350471125762806][246 ms][DEBUG] targetPkg: running [2025-09-09 08:54:11][350471125762806][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 08:54:11][350471125762806][246 ms][DEBUG] START check_boot_completed [2025-09-09 08:54:11][350471125762806][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:54:11][350471125762806][292 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 08:54:11][350471125762806][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:54:11][350471125762806][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:54:11][350471125762806][338 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 08:54:11][350471125762806][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:54:11][350471125762806][448 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:54:11][350471125762806][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:54:12][350471125762806][776 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.167/223.167/223.167/0.000 ms\n [2025-09-09 08:54:12][350471125762806][776 ms][DEBUG] check_internet: online [2025-09-09 08:54:12][350471125762806][776 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:54:12][350471125762806][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125762806\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7574\"}'\'' -e'"" [2025-09-09 08:54:12][350471125762806][776 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:54:12][350471125762806][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125762806\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7574\"}'\'' -e'"" [2025-09-09 08:54:16][350471125762806][5212 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4d11f7d-9822-4414-9687-649712877130","id":"QR_e4d11f7d-9822-4414-9687-649712877130","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:54:16][350471125762806][5368 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 08:54:16][350471125762806][5368 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-09 08:54:16][350471125762806][5368 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:54:20][350635889141049][0 ms][INFO] === Request start === [2025-09-09 08:54:20][350635889141049][1 ms][DEBUG] START check_scloud [2025-09-09 08:54:20][350635889141049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:54:21][350635889141049][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 21450 4971 25167972 223596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:54:21][350635889141049][317 ms][DEBUG] targetPkg: running [2025-09-09 08:54:21][350635889141049][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 08:54:21][350635889141049][317 ms][DEBUG] START check_boot_completed [2025-09-09 08:54:21][350635889141049][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:54:21][350635889141049][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:54:21][350635889141049][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:54:21][350635889141049][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:54:21][350635889141049][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 08:54:21][350635889141049][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:54:21][350635889141049][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:54:21][350635889141049][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:54:21][350635889141049][911 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.349/303.349/303.349/0.000 ms\n [2025-09-09 08:54:21][350635889141049][911 ms][DEBUG] check_internet: online [2025-09-09 08:54:21][350635889141049][911 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:54:21][350635889141049][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635889141049\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8866\"}'\'' -e'"" [2025-09-09 08:54:21][350635889141049][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:54:21][350635889141049][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635889141049\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8866\"}'\'' -e'"" [2025-09-09 08:54:25][350635889141049][4894 ms][DEBUG] proc_open done in 3983 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 08:54:25][350635889141049][4894 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-09 08:54:25][350635889141049][4894 ms][WARN] Detected error: Process with pid 21450 either refused to load frida-agent, or terminated during injectionProcess with pid 21450 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 08:54:25][350635889141049][4894 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:54:26][350635889141049][5160 ms][DEBUG] SU: done in 266 ms; outsystem 5393 4971 12673908 217188 ep_poll 0 S system_server\n [2025-09-09 08:54:26][350635889141049][5160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 08:54:26][350635889141049][5301 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:54:26][350635889141049][5301 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 08:54:26][350635889141049][5301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:54:26][350635889141049][5457 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 08:54:26][350635889141049][5457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:54:26][350635889141049][5629 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 08:54:28][350635889141049][7644 ms][DEBUG] START check_boot_completed [2025-09-09 08:54:28][350635889141049][7644 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:54:28][350635889141049][7691 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:54:28][350635889141049][7691 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:54:28][350635889141049][7740 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 08:54:28][350635889141049][7740 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-09 08:54:31][350635889141049][10752 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 08:54:31][350635889141049][10752 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635889141049\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8866\"}'\'' -e'"" [2025-09-09 08:54:34][350635889141049][13955 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0b31a00-a468-47a7-81f0-22b2b52c4c28","id":"QR_f0b31a00-a468-47a7-81f0-22b2b52c4c28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:54:34][350635889141049][14111 ms][DEBUG] proc_open done in 3359 ms; code=255; res.len=3343 [2025-09-09 08:54:34][350635889141049][14111 ms][DEBUG] END runCmdUntilRes#2 in 3359 ms [2025-09-09 08:54:34][350635889141049][14111 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:54:37][350635889141049][0 ms][INFO] === Request start === [2025-09-09 08:54:37][350635889141049][1 ms][DEBUG] START check_scloud [2025-09-09 08:54:37][350635889141049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:54:37][350635889141049][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 23774 4971 23867744 124428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:54:37][350635889141049][246 ms][DEBUG] targetPkg: running [2025-09-09 08:54:37][350635889141049][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 08:54:37][350635889141049][246 ms][DEBUG] START check_boot_completed [2025-09-09 08:54:37][350635889141049][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:54:37][350635889141049][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:54:37][350635889141049][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:54:37][350635889141049][355 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:54:37][350635889141049][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:54:37][350635889141049][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:54:37][350635889141049][451 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:54:37][350635889141049][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:54:38][350635889141049][871 ms][DEBUG] SU: done in 419 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.158/313.158/313.158/0.000 ms\n [2025-09-09 08:54:38][350635889141049][871 ms][DEBUG] check_internet: online [2025-09-09 08:54:38][350635889141049][871 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:54:38][350635889141049][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635889141049\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5260\"}'\'' -e'"" [2025-09-09 08:54:38][350635889141049][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:54:38][350635889141049][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635889141049\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5260\"}'\'' -e'"" [2025-09-09 08:54:45][350635889141049][7744 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_279dece8-8ed7-4364-a70b-d16ee2446e16","id":"QR_279dece8-8ed7-4364-a70b-d16ee2446e16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:54:45][350635889141049][7900 ms][DEBUG] proc_open done in 7029 ms; code=255; res.len=3343 [2025-09-09 08:54:45][350635889141049][7900 ms][DEBUG] END runCmdUntilRes#1 in 7029 ms [2025-09-09 08:54:45][350635889141049][7900 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:55:04][355819211911627][1 ms][INFO] === Request start === [2025-09-09 08:55:04][355819211911627][1 ms][DEBUG] START check_scloud [2025-09-09 08:55:04][355819211911627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:55:05][355819211911627][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 23774 4971 23903548 138748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:55:05][355819211911627][270 ms][DEBUG] targetPkg: running [2025-09-09 08:55:05][355819211911627][270 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 08:55:05][355819211911627][270 ms][DEBUG] START check_boot_completed [2025-09-09 08:55:05][355819211911627][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:55:05][355819211911627][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:55:05][355819211911627][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:55:05][355819211911627][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:55:05][355819211911627][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:55:05][355819211911627][363 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:55:05][355819211911627][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819211911627\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R92Y1014N0A\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4982\"}'\'' -e'"" [2025-09-09 08:55:05][355819211911627][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:55:05][355819211911627][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819211911627\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R92Y1014N0A\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4982\"}'\'' -e'"" [2025-09-09 08:55:09][355819211911627][4846 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e714a387-9522-46b4-8fd2-64a3270e4a77","id":"QR_e714a387-9522-46b4-8fd2-64a3270e4a77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:55:09][355819211911627][5002 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 08:55:09][355819211911627][5002 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-09 08:55:09][355819211911627][5002 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:55:11][350731018641361][0 ms][INFO] === Request start === [2025-09-09 08:55:11][350731018641361][1 ms][DEBUG] START check_scloud [2025-09-09 08:55:11][350731018641361][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:55:12][350731018641361][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 23774 4971 24060356 150360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:55:12][350731018641361][276 ms][DEBUG] targetPkg: running [2025-09-09 08:55:12][350731018641361][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 08:55:12][350731018641361][276 ms][DEBUG] START check_boot_completed [2025-09-09 08:55:12][350731018641361][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:55:12][350731018641361][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:55:12][350731018641361][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:55:12][350731018641361][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:55:12][350731018641361][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:55:12][350731018641361][369 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:55:12][350731018641361][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018641361\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3652\"}'\'' -e'"" [2025-09-09 08:55:12][350731018641361][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:55:12][350731018641361][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018641361\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3652\"}'\'' -e'"" [2025-09-09 08:55:15][350731018641361][3634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_158fbf32-9f15-402c-aacf-18146149fd73","id":"QR_158fbf32-9f15-402c-aacf-18146149fd73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:55:15][350731018641361][3790 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-09 08:55:15][350731018641361][3790 ms][DEBUG] END runCmdUntilRes#1 in 3420 ms [2025-09-09 08:55:15][350731018641361][3790 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:55:17][350731018760591][0 ms][INFO] === Request start === [2025-09-09 08:55:17][350731018760591][1 ms][DEBUG] START check_scloud [2025-09-09 08:55:17][350731018760591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:55:18][350731018760591][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 23774 4971 24196684 161528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:55:18][350731018760591][287 ms][DEBUG] targetPkg: running [2025-09-09 08:55:18][350731018760591][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 08:55:18][350731018760591][287 ms][DEBUG] START check_boot_completed [2025-09-09 08:55:18][350731018760591][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:55:18][350731018760591][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:55:18][350731018760591][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:55:18][350731018760591][381 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 08:55:18][350731018760591][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 08:55:18][350731018760591][381 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:55:18][350731018760591][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018760591\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9716\"}'\'' -e'"" [2025-09-09 08:55:18][350731018760591][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:55:18][350731018760591][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018760591\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9716\"}'\'' -e'"" [2025-09-09 08:55:21][350731018760591][3645 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df010fa5-e322-41b4-aaf1-66b34129cf44","id":"QR_df010fa5-e322-41b4-aaf1-66b34129cf44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:55:21][350731018760591][3801 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-09 08:55:21][350731018760591][3801 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-09 08:55:21][350731018760591][3801 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:55:23][350731018938148][0 ms][INFO] === Request start === [2025-09-09 08:55:23][350731018938148][1 ms][DEBUG] START check_scloud [2025-09-09 08:55:23][350731018938148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:55:24][350731018938148][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 23774 4971 24316756 172520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:55:24][350731018938148][320 ms][DEBUG] targetPkg: running [2025-09-09 08:55:24][350731018938148][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 08:55:24][350731018938148][320 ms][DEBUG] START check_boot_completed [2025-09-09 08:55:24][350731018938148][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:55:24][350731018938148][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:55:24][350731018938148][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:55:24][350731018938148][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:55:24][350731018938148][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:55:24][350731018938148][430 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:55:24][350731018938148][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018938148\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8578\"}'\'' -e'"" [2025-09-09 08:55:24][350731018938148][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:55:24][350731018938148][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731018938148\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8578\"}'\'' -e'"" [2025-09-09 08:55:27][350731018938148][3756 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e086a5f5-afc6-4335-b362-ac6f666c603f","id":"QR_e086a5f5-afc6-4335-b362-ac6f666c603f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:55:27][350731018938148][3912 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 08:55:27][350731018938148][3912 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 08:55:27][350731018938148][3913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:55:29][350731019019468][0 ms][INFO] === Request start === [2025-09-09 08:55:29][350731019019468][1 ms][DEBUG] START check_scloud [2025-09-09 08:55:29][350731019019468][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:55:29][350731019019468][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 23774 4971 24459320 182968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:55:29][350731019019468][292 ms][DEBUG] targetPkg: running [2025-09-09 08:55:29][350731019019468][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 08:55:29][350731019019468][292 ms][DEBUG] START check_boot_completed [2025-09-09 08:55:29][350731019019468][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:55:29][350731019019468][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:55:29][350731019019468][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:55:30][350731019019468][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:55:30][350731019019468][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:55:30][350731019019468][385 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:55:30][350731019019468][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019019468\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2192\"}'\'' -e'"" [2025-09-09 08:55:30][350731019019468][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:55:30][350731019019468][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019019468\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2192\"}'\'' -e'"" [2025-09-09 08:55:33][350731019019468][3744 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_596e60fb-d831-44b4-9ac3-3459c11f761d","id":"QR_596e60fb-d831-44b4-9ac3-3459c11f761d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:55:33][350731019019468][3900 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-09 08:55:33][350731019019468][3900 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-09 08:55:33][350731019019468][3900 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:56:03][350731019065933][0 ms][INFO] === Request start === [2025-09-09 08:56:03][350731019065933][1 ms][DEBUG] START check_scloud [2025-09-09 08:56:03][350731019065933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:56:03][350731019065933][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 23774 4971 24513712 192840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:56:03][350731019065933][270 ms][DEBUG] targetPkg: running [2025-09-09 08:56:03][350731019065933][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 08:56:03][350731019065933][270 ms][DEBUG] START check_boot_completed [2025-09-09 08:56:03][350731019065933][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:56:04][350731019065933][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:56:04][350731019065933][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:56:04][350731019065933][365 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 08:56:04][350731019065933][365 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 08:56:04][350731019065933][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:56:04][350731019065933][489 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:56:04][350731019065933][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:56:05][350731019065933][1878 ms][DEBUG] SU: done in 1389 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.403/299.403/299.403/0.000 ms\n [2025-09-09 08:56:05][350731019065933][1879 ms][DEBUG] check_internet: online [2025-09-09 08:56:05][350731019065933][1879 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:56:05][350731019065933][1879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019065933\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9233\"}'\'' -e'"" [2025-09-09 08:56:05][350731019065933][1879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:56:05][350731019065933][1879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019065933\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9233\"}'\'' -e'"" [2025-09-09 08:56:09][350731019065933][5315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c73f2c70-9236-429a-b4ba-2c4b8f326a5f","id":"QR_c73f2c70-9236-429a-b4ba-2c4b8f326a5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:56:09][350731019065933][5471 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-09 08:56:09][350731019065933][5471 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-09 08:56:09][350731019065933][5471 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:56:11][350731019065933][0 ms][INFO] === Request start === [2025-09-09 08:56:11][350731019065933][1 ms][DEBUG] START check_scloud [2025-09-09 08:56:11][350731019065933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:56:11][350731019065933][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 23774 4971 24671572 204624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:56:11][350731019065933][301 ms][DEBUG] targetPkg: running [2025-09-09 08:56:11][350731019065933][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 08:56:11][350731019065933][301 ms][DEBUG] START check_boot_completed [2025-09-09 08:56:11][350731019065933][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:56:11][350731019065933][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:56:11][350731019065933][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:56:11][350731019065933][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:56:11][350731019065933][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:56:11][350731019065933][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:56:12][350731019065933][550 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:56:12][350731019065933][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:56:12][350731019065933][910 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.763/223.763/223.763/0.000 ms\n [2025-09-09 08:56:12][350731019065933][910 ms][DEBUG] check_internet: online [2025-09-09 08:56:12][350731019065933][910 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:56:12][350731019065933][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019065933\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2439\"}'\'' -e'"" [2025-09-09 08:56:12][350731019065933][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:56:12][350731019065933][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019065933\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2439\"}'\'' -e'"" [2025-09-09 08:56:17][350731019065933][6080 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfd905af-59aa-470b-93a1-320fa9a205e8","id":"QR_bfd905af-59aa-470b-93a1-320fa9a205e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:56:17][350731019065933][6236 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-09 08:56:17][350731019065933][6237 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-09 08:56:17][350731019065933][6237 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:56:21][350731019071600][0 ms][INFO] === Request start === [2025-09-09 08:56:21][350731019071600][1 ms][DEBUG] START check_scloud [2025-09-09 08:56:21][350731019071600][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:56:22][350731019071600][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 23774 4971 24797788 215388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:56:22][350731019071600][286 ms][DEBUG] targetPkg: running [2025-09-09 08:56:22][350731019071600][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 08:56:22][350731019071600][287 ms][DEBUG] START check_boot_completed [2025-09-09 08:56:22][350731019071600][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:56:22][350731019071600][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:56:22][350731019071600][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:56:22][350731019071600][396 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 08:56:22][350731019071600][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:56:22][350731019071600][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:56:22][350731019071600][536 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:56:22][350731019071600][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:56:22][350731019071600][864 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.015/225.015/225.015/0.000 ms\n [2025-09-09 08:56:22][350731019071600][865 ms][DEBUG] check_internet: online [2025-09-09 08:56:22][350731019071600][865 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:56:22][350731019071600][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019071600\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2203\"}'\'' -e'"" [2025-09-09 08:56:22][350731019071600][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:56:22][350731019071600][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019071600\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2203\"}'\'' -e'"" [2025-09-09 08:56:26][350731019071600][4473 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcae60ad-c1d5-4e9a-be53-34697113abf4","id":"QR_dcae60ad-c1d5-4e9a-be53-34697113abf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:56:26][350731019071600][4629 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-09 08:56:26][350731019071600][4629 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-09 08:56:26][350731019071600][4629 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:56:28][350731019071600][0 ms][INFO] === Request start === [2025-09-09 08:56:28][350731019071600][1 ms][DEBUG] START check_scloud [2025-09-09 08:56:28][350731019071600][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:56:29][350731019071600][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 23774 4971 24941304 227576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:56:29][350731019071600][268 ms][DEBUG] targetPkg: running [2025-09-09 08:56:29][350731019071600][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 08:56:29][350731019071600][268 ms][DEBUG] START check_boot_completed [2025-09-09 08:56:29][350731019071600][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:56:29][350731019071600][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:56:29][350731019071600][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:56:29][350731019071600][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:56:29][350731019071600][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 08:56:29][350731019071600][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:56:29][350731019071600][471 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2439\nsuccessfulTxPacketsPerSecond: 0.17330121484151603\nretriedTxPackets: 448\nretriedTxPacketsPerSecond: 0.034660242968303216\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2439\nsuccessfulRxPacketsPerSecond: 0.15597109335736445\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:56:29][350731019071600][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:56:29][350731019071600][877 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.576/301.576/301.576/0.000 ms\n [2025-09-09 08:56:29][350731019071600][877 ms][DEBUG] check_internet: online [2025-09-09 08:56:29][350731019071600][877 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:56:29][350731019071600][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019071600\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4370\"}'\'' -e'"" [2025-09-09 08:56:29][350731019071600][878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:56:29][350731019071600][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019071600\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4370\"}'\'' -e'"" [2025-09-09 08:56:34][350731019071600][5517 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78b75eea-7b5c-497f-b59b-11ba8478a6eb","id":"QR_78b75eea-7b5c-497f-b59b-11ba8478a6eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:56:34][350731019071600][5673 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 08:56:34][350731019071600][5673 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 08:56:34][350731019071600][5673 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:57:03][353302725299443][0 ms][INFO] === Request start === [2025-09-09 08:57:03][353302725299443][1 ms][DEBUG] START check_scloud [2025-09-09 08:57:03][353302725299443][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:57:03][353302725299443][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 23774 4971 25029908 239432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:57:03][353302725299443][319 ms][DEBUG] targetPkg: running [2025-09-09 08:57:03][353302725299443][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 08:57:03][353302725299443][319 ms][DEBUG] START check_boot_completed [2025-09-09 08:57:03][353302725299443][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:57:03][353302725299443][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:57:03][353302725299443][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:57:03][353302725299443][444 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 08:57:03][353302725299443][444 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 08:57:03][353302725299443][444 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:57:03][353302725299443][444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302725299443\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9104\"}'\'' -e'"" [2025-09-09 08:57:03][353302725299443][444 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:57:03][353302725299443][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302725299443\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9104\"}'\'' -e'"" [2025-09-09 08:57:07][353302725299443][4115 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 08:57:07][353302725299443][4115 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 08:57:07][353302725299443][4115 ms][WARN] Detected error: Process with pid 23774 either refused to load frida-agent, or terminated during injectionProcess with pid 23774 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 08:57:07][353302725299443][4115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 08:57:07][353302725299443][4427 ms][DEBUG] SU: done in 312 ms; outsystem 5393 4971 12673908 212108 ep_poll 0 S system_server\n [2025-09-09 08:57:07][353302725299443][4428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 08:57:07][353302725299443][4568 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 08:57:07][353302725299443][4568 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 08:57:07][353302725299443][4568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 08:57:07][353302725299443][4693 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 08:57:07][353302725299443][4693 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 08:57:07][353302725299443][4849 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 08:57:09][353302725299443][6864 ms][DEBUG] START check_boot_completed [2025-09-09 08:57:09][353302725299443][6864 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:57:09][353302725299443][6911 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:57:09][353302725299443][6911 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:57:10][353302725299443][6958 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:57:10][353302725299443][6958 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 08:57:13][353302725299443][9973 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 08:57:13][353302725299443][9973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302725299443\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9104\"}'\'' -e'"" [2025-09-09 08:57:17][353302725299443][14034 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef48ffea-3541-41e8-b471-fbc8891a6370","id":"QR_ef48ffea-3541-41e8-b471-fbc8891a6370","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:57:17][353302725299443][14191 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-09-09 08:57:17][353302725299443][14191 ms][DEBUG] END runCmdUntilRes#2 in 4218 ms [2025-09-09 08:57:17][353302725299443][14191 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:57:19][353302725299443][1 ms][INFO] === Request start === [2025-09-09 08:57:19][353302725299443][1 ms][DEBUG] START check_scloud [2025-09-09 08:57:19][353302725299443][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:57:19][353302725299443][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 25109 4971 23893856 124548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:57:19][353302725299443][240 ms][DEBUG] targetPkg: running [2025-09-09 08:57:19][353302725299443][240 ms][DEBUG] END check_scloud in 239 ms [2025-09-09 08:57:19][353302725299443][240 ms][DEBUG] START check_boot_completed [2025-09-09 08:57:19][353302725299443][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:57:19][353302725299443][285 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 08:57:19][353302725299443][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:57:19][353302725299443][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:57:19][353302725299443][331 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 08:57:19][353302725299443][331 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:57:19][353302725299443][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302725299443\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8057\"}'\'' -e'"" [2025-09-09 08:57:19][353302725299443][331 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:57:19][353302725299443][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302725299443\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8057\"}'\'' -e'"" [2025-09-09 08:57:26][353302725299443][7033 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46c7aa28-e552-4e17-b364-26290d5f0a3c","id":"QR_46c7aa28-e552-4e17-b364-26290d5f0a3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:57:26][353302725299443][7189 ms][DEBUG] proc_open done in 6858 ms; code=255; res.len=3343 [2025-09-09 08:57:26][353302725299443][7189 ms][DEBUG] END runCmdUntilRes#1 in 6858 ms [2025-09-09 08:57:26][353302725299443][7189 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:58:03][358215332768284][0 ms][INFO] === Request start === [2025-09-09 08:58:03][358215332768284][1 ms][DEBUG] START check_scloud [2025-09-09 08:58:03][358215332768284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:58:03][358215332768284][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 25109 4971 23928508 138156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:58:03][358215332768284][313 ms][DEBUG] targetPkg: running [2025-09-09 08:58:03][358215332768284][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 08:58:03][358215332768284][313 ms][DEBUG] START check_boot_completed [2025-09-09 08:58:03][358215332768284][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:58:03][358215332768284][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 08:58:03][358215332768284][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:58:03][358215332768284][393 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 08:58:03][358215332768284][393 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 08:58:03][358215332768284][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:58:03][358215332768284][516 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3081\nsuccessfulTxPacketsPerSecond: 2.0974086222442927\nretriedTxPackets: 607\nretriedTxPacketsPerSecond: 0.5194516681259229\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2971\nsuccessfulRxPacketsPerSecond: 1.73803954366661\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:58:03][358215332768284][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:58:04][358215332768284][969 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=325 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 325.483/325.483/325.483/0.000 ms\n [2025-09-09 08:58:04][358215332768284][969 ms][DEBUG] check_internet: online [2025-09-09 08:58:04][358215332768284][969 ms][DEBUG] rawBody.length=1149 [2025-09-09 08:58:04][358215332768284][969 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358215332768284\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7227\"}'\'' -e'"" [2025-09-09 08:58:04][358215332768284][969 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:58:04][358215332768284][969 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358215332768284\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7227\"}'\'' -e'"" [2025-09-09 08:58:08][358215332768284][5327 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bf6ab18-af64-4249-9e77-a3b26ea18824","id":"QR_7bf6ab18-af64-4249-9e77-a3b26ea18824","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:58:08][358215332768284][5483 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-09 08:58:08][358215332768284][5483 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-09 08:58:08][358215332768284][5483 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:58:11][358215332768284][0 ms][INFO] === Request start === [2025-09-09 08:58:11][358215332768284][1 ms][DEBUG] START check_scloud [2025-09-09 08:58:11][358215332768284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:58:11][358215332768284][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 25109 4971 24052548 149112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:58:11][358215332768284][277 ms][DEBUG] targetPkg: running [2025-09-09 08:58:11][358215332768284][277 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 08:58:11][358215332768284][277 ms][DEBUG] START check_boot_completed [2025-09-09 08:58:11][358215332768284][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:58:11][358215332768284][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:58:11][358215332768284][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:58:11][358215332768284][387 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:58:11][358215332768284][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:58:11][358215332768284][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 08:58:11][358215332768284][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3081\nsuccessfulTxPacketsPerSecond: 2.0974086222442927\nretriedTxPackets: 607\nretriedTxPacketsPerSecond: 0.5194516681259229\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2971\nsuccessfulRxPacketsPerSecond: 1.73803954366661\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 08:58:11][358215332768284][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 08:58:11][358215332768284][933 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.415/320.415/320.415/0.000 ms\n [2025-09-09 08:58:11][358215332768284][933 ms][DEBUG] check_internet: online [2025-09-09 08:58:11][358215332768284][934 ms][DEBUG] rawBody.length=1159 [2025-09-09 08:58:11][358215332768284][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358215332768284\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1571\"}'\'' -e'"" [2025-09-09 08:58:11][358215332768284][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:58:11][358215332768284][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358215332768284\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1571\"}'\'' -e'"" [2025-09-09 08:58:16][358215332768284][5682 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5a7799b-eacd-4e96-be51-c6a9922cd6e5","id":"QR_e5a7799b-eacd-4e96-be51-c6a9922cd6e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:58:16][358215332768284][5838 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 08:58:16][358215332768284][5838 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 08:58:16][358215332768284][5838 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:59:03][350020272637186][0 ms][INFO] === Request start === [2025-09-09 08:59:03][350020272637186][1 ms][DEBUG] START check_scloud [2025-09-09 08:59:03][350020272637186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:59:03][350020272637186][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25109 4971 24181664 160256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:59:03][350020272637186][304 ms][DEBUG] targetPkg: running [2025-09-09 08:59:03][350020272637186][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 08:59:03][350020272637186][304 ms][DEBUG] START check_boot_completed [2025-09-09 08:59:03][350020272637186][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:59:03][350020272637186][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:59:03][350020272637186][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:59:03][350020272637186][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 08:59:03][350020272637186][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 08:59:03][350020272637186][414 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:59:03][350020272637186][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020272637186\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5361\"}'\'' -e'"" [2025-09-09 08:59:03][350020272637186][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:59:03][350020272637186][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020272637186\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5361\"}'\'' -e'"" [2025-09-09 08:59:07][350020272637186][3772 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_525735cc-08b0-4168-9c1a-90f0f1596f62","id":"QR_525735cc-08b0-4168-9c1a-90f0f1596f62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:59:07][350020272637186][3928 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-09 08:59:07][350020272637186][3928 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-09 08:59:07][350020272637186][3928 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:59:09][350020272637186][0 ms][INFO] === Request start === [2025-09-09 08:59:09][350020272637186][1 ms][DEBUG] START check_scloud [2025-09-09 08:59:09][350020272637186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:59:09][350020272637186][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 25109 4971 24335452 171320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:59:09][350020272637186][268 ms][DEBUG] targetPkg: running [2025-09-09 08:59:09][350020272637186][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 08:59:09][350020272637186][268 ms][DEBUG] START check_boot_completed [2025-09-09 08:59:09][350020272637186][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:59:09][350020272637186][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:59:09][350020272637186][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:59:10][350020272637186][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:59:10][350020272637186][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:59:10][350020272637186][362 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:59:10][350020272637186][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020272637186\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6353\"}'\'' -e'"" [2025-09-09 08:59:10][350020272637186][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:59:10][350020272637186][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020272637186\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6353\"}'\'' -e'"" [2025-09-09 08:59:15][350020272637186][6235 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_689d5a25-fe1f-4298-84d8-8c93af8fc4fd","id":"QR_689d5a25-fe1f-4298-84d8-8c93af8fc4fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:59:16][350020272637186][6391 ms][DEBUG] proc_open done in 6030 ms; code=255; res.len=3343 [2025-09-09 08:59:16][350020272637186][6391 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-09-09 08:59:16][350020272637186][6391 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:59:20][357866608967363][1 ms][INFO] === Request start === [2025-09-09 08:59:20][357866608967363][1 ms][DEBUG] START check_scloud [2025-09-09 08:59:20][357866608967363][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:59:20][357866608967363][263 ms][DEBUG] SU: done in 261 ms; outu0_a118 25109 4971 24492260 183040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:59:20][357866608967363][263 ms][DEBUG] targetPkg: running [2025-09-09 08:59:20][357866608967363][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 08:59:20][357866608967363][263 ms][DEBUG] START check_boot_completed [2025-09-09 08:59:20][357866608967363][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:59:20][357866608967363][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 08:59:20][357866608967363][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:59:20][357866608967363][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 08:59:20][357866608967363][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 08:59:20][357866608967363][356 ms][DEBUG] rawBody.length=1150 [2025-09-09 08:59:20][357866608967363][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866608967363\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6552\"}'\'' -e'"" [2025-09-09 08:59:20][357866608967363][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:59:20][357866608967363][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866608967363\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6552\"}'\'' -e'"" [2025-09-09 08:59:24][357866608967363][3996 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ff94954-752d-4429-85b2-22a9ade311e2","id":"QR_5ff94954-752d-4429-85b2-22a9ade311e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:59:24][357866608967363][4152 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-09 08:59:24][357866608967363][4152 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-09 08:59:24][357866608967363][4152 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 08:59:26][357866608967363][0 ms][INFO] === Request start === [2025-09-09 08:59:26][357866608967363][0 ms][DEBUG] START check_scloud [2025-09-09 08:59:26][357866608967363][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 08:59:26][357866608967363][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 25109 4971 24643016 194112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 08:59:26][357866608967363][288 ms][DEBUG] targetPkg: running [2025-09-09 08:59:26][357866608967363][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 08:59:26][357866608967363][289 ms][DEBUG] START check_boot_completed [2025-09-09 08:59:26][357866608967363][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 08:59:26][357866608967363][335 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 08:59:26][357866608967363][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 08:59:27][357866608967363][413 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 08:59:27][357866608967363][413 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 08:59:27][357866608967363][413 ms][DEBUG] rawBody.length=1160 [2025-09-09 08:59:27][357866608967363][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866608967363\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3869\"}'\'' -e'"" [2025-09-09 08:59:27][357866608967363][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 08:59:27][357866608967363][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866608967363\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3869\"}'\'' -e'"" [2025-09-09 08:59:31][357866608967363][5131 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec7be5e4-2fb6-40e7-af53-c06f579e69ff","id":"QR_ec7be5e4-2fb6-40e7-af53-c06f579e69ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 08:59:31][357866608967363][5287 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-09 08:59:31][357866608967363][5287 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-09 08:59:31][357866608967363][5287 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:01:03][358799699635012][0 ms][INFO] === Request start === [2025-09-09 09:01:03][358799699635012][1 ms][DEBUG] START check_scloud [2025-09-09 09:01:03][358799699635012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:01:03][358799699635012][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 25109 4971 24721892 206172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:01:03][358799699635012][260 ms][DEBUG] targetPkg: running [2025-09-09 09:01:03][358799699635012][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 09:01:03][358799699635012][260 ms][DEBUG] START check_boot_completed [2025-09-09 09:01:03][358799699635012][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:01:03][358799699635012][291 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:01:03][358799699635012][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:01:03][358799699635012][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:01:03][358799699635012][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:01:03][358799699635012][338 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:01:03][358799699635012][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699635012\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5354\"}'\'' -e'"" [2025-09-09 09:01:03][358799699635012][338 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:01:03][358799699635012][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699635012\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5354\"}'\'' -e'"" [2025-09-09 09:01:08][358799699635012][4915 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4231c744-9192-464e-be50-16a3b9e09099","id":"QR_4231c744-9192-464e-be50-16a3b9e09099","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:01:08][358799699635012][5071 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 09:01:08][358799699635012][5071 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 09:01:08][358799699635012][5071 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:01:10][358799699635012][0 ms][INFO] === Request start === [2025-09-09 09:01:10][358799699635012][1 ms][DEBUG] START check_scloud [2025-09-09 09:01:10][358799699635012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:01:11][358799699635012][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 25109 4971 24884844 216728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:01:11][358799699635012][310 ms][DEBUG] targetPkg: running [2025-09-09 09:01:11][358799699635012][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 09:01:11][358799699635012][310 ms][DEBUG] START check_boot_completed [2025-09-09 09:01:11][358799699635012][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:01:11][358799699635012][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:01:11][358799699635012][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:01:11][358799699635012][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:01:11][358799699635012][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:01:11][358799699635012][388 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:01:11][358799699635012][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699635012\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7574\"}'\'' -e'"" [2025-09-09 09:01:11][358799699635012][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:01:11][358799699635012][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699635012\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7574\"}'\'' -e'"" [2025-09-09 09:01:16][358799699635012][5512 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64dba90c-9098-4344-8e9f-39e1b0e0f826","id":"QR_64dba90c-9098-4344-8e9f-39e1b0e0f826","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:01:16][358799699635012][5668 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-09 09:01:16][358799699635012][5668 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-09 09:01:16][358799699635012][5668 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:01:20][350013883904715][0 ms][INFO] === Request start === [2025-09-09 09:01:20][350013883904715][1 ms][DEBUG] START check_scloud [2025-09-09 09:01:20][350013883904715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:01:20][350013883904715][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 25109 4971 25011060 228864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:01:20][350013883904715][317 ms][DEBUG] targetPkg: running [2025-09-09 09:01:20][350013883904715][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 09:01:20][350013883904715][317 ms][DEBUG] START check_boot_completed [2025-09-09 09:01:20][350013883904715][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:01:21][350013883904715][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:01:21][350013883904715][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:01:21][350013883904715][428 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 09:01:21][350013883904715][428 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 09:01:21][350013883904715][428 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:01:21][350013883904715][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883904715\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2849\"}'\'' -e'"" [2025-09-09 09:01:21][350013883904715][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:01:21][350013883904715][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883904715\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2849\"}'\'' -e'"" [2025-09-09 09:01:24][350013883904715][3738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4957f1d9-ec8c-4ae6-b534-624c02cd42b6","id":"QR_4957f1d9-ec8c-4ae6-b534-624c02cd42b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:01:24][350013883904715][3894 ms][DEBUG] proc_open done in 3466 ms; code=255; res.len=3343 [2025-09-09 09:01:24][350013883904715][3894 ms][DEBUG] END runCmdUntilRes#1 in 3466 ms [2025-09-09 09:01:24][350013883904715][3894 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:01:26][350013883904715][1 ms][INFO] === Request start === [2025-09-09 09:01:26][350013883904715][1 ms][DEBUG] START check_scloud [2025-09-09 09:01:26][350013883904715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:01:27][350013883904715][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 25109 4971 25122908 239780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:01:27][350013883904715][300 ms][DEBUG] targetPkg: running [2025-09-09 09:01:27][350013883904715][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 09:01:27][350013883904715][300 ms][DEBUG] START check_boot_completed [2025-09-09 09:01:27][350013883904715][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:01:27][350013883904715][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:01:27][350013883904715][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:01:27][350013883904715][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:01:27][350013883904715][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:01:27][350013883904715][378 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:01:27][350013883904715][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883904715\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2855\"}'\'' -e'"" [2025-09-09 09:01:27][350013883904715][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:01:27][350013883904715][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883904715\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2855\"}'\'' -e'"" [2025-09-09 09:01:30][350013883904715][4034 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 09:01:30][350013883904715][4034 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 09:01:30][350013883904715][4034 ms][WARN] Detected error: Process with pid 25109 either refused to load frida-agent, or terminated during injectionProcess with pid 25109 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 09:01:30][350013883904715][4034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 09:01:31][350013883904715][4285 ms][DEBUG] SU: done in 251 ms; outsystem 5393 4971 12673908 209440 ep_poll 0 S system_server\n [2025-09-09 09:01:31][350013883904715][4285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 09:01:31][350013883904715][4424 ms][DEBUG] SU: done in 139 ms; out [2025-09-09 09:01:31][350013883904715][4424 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 09:01:31][350013883904715][4424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 09:01:31][350013883904715][4549 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 09:01:31][350013883904715][4549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 09:01:31][350013883904715][4690 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 09:01:33][350013883904715][6705 ms][DEBUG] START check_boot_completed [2025-09-09 09:01:33][350013883904715][6705 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:01:33][350013883904715][6752 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:01:33][350013883904715][6752 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:01:33][350013883904715][6799 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:01:33][350013883904715][6799 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:01:36][350013883904715][9813 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 09:01:36][350013883904715][9813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883904715\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2855\"}'\'' -e'"" [2025-09-09 09:01:41][350013883904715][14656 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b420ab90-c3d2-4e32-b39b-6908229f4147","id":"QR_b420ab90-c3d2-4e32-b39b-6908229f4147","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:01:41][350013883904715][14812 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 09:01:41][350013883904715][14812 ms][DEBUG] END runCmdUntilRes#2 in 4999 ms [2025-09-09 09:01:41][350013883904715][14812 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:03:03][350731019322722][0 ms][INFO] === Request start === [2025-09-09 09:03:03][350731019322722][1 ms][DEBUG] START check_scloud [2025-09-09 09:03:03][350731019322722][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:03:04][350731019322722][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 26308 4971 23792212 126828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:03:04][350731019322722][290 ms][DEBUG] targetPkg: running [2025-09-09 09:03:04][350731019322722][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 09:03:04][350731019322722][290 ms][DEBUG] START check_boot_completed [2025-09-09 09:03:04][350731019322722][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:03:04][350731019322722][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:03:04][350731019322722][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:03:04][350731019322722][385 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 09:03:04][350731019322722][385 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 09:03:04][350731019322722][385 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:03:04][350731019322722][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019322722\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2845\"}'\'' -e'"" [2025-09-09 09:03:04][350731019322722][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:03:04][350731019322722][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019322722\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2845\"}'\'' -e'"" [2025-09-09 09:03:08][350731019322722][4913 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_590b7aac-f14e-413d-be7b-1e6b12835246","id":"QR_590b7aac-f14e-413d-be7b-1e6b12835246","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:03:09][350731019322722][5069 ms][DEBUG] proc_open done in 4684 ms; code=255; res.len=3343 [2025-09-09 09:03:09][350731019322722][5069 ms][DEBUG] END runCmdUntilRes#1 in 4684 ms [2025-09-09 09:03:09][350731019322722][5070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:03:11][350731019373402][0 ms][INFO] === Request start === [2025-09-09 09:03:11][350731019373402][1 ms][DEBUG] START check_scloud [2025-09-09 09:03:11][350731019373402][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:03:11][350731019373402][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 26308 4971 23950876 137336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:03:11][350731019373402][265 ms][DEBUG] targetPkg: running [2025-09-09 09:03:11][350731019373402][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 09:03:11][350731019373402][265 ms][DEBUG] START check_boot_completed [2025-09-09 09:03:11][350731019373402][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:03:11][350731019373402][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:03:11][350731019373402][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:03:11][350731019373402][389 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 09:03:11][350731019373402][389 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 09:03:11][350731019373402][389 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:03:11][350731019373402][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019373402\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9273\"}'\'' -e'"" [2025-09-09 09:03:11][350731019373402][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:03:11][350731019373402][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019373402\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9273\"}'\'' -e'"" [2025-09-09 09:03:14][350731019373402][3701 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2ef60e7-8f6b-4fef-8136-4cec409b2945","id":"QR_d2ef60e7-8f6b-4fef-8136-4cec409b2945","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:03:14][350731019373402][3857 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-09 09:03:14][350731019373402][3857 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-09 09:03:14][350731019373402][3857 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:03:17][352631698573835][0 ms][INFO] === Request start === [2025-09-09 09:03:17][352631698573835][1 ms][DEBUG] START check_scloud [2025-09-09 09:03:17][352631698573835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:03:17][352631698573835][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 26308 4971 24070948 149052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:03:17][352631698573835][303 ms][DEBUG] targetPkg: running [2025-09-09 09:03:17][352631698573835][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 09:03:17][352631698573835][303 ms][DEBUG] START check_boot_completed [2025-09-09 09:03:17][352631698573835][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:03:17][352631698573835][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:03:17][352631698573835][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:03:17][352631698573835][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:03:17][352631698573835][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:03:17][352631698573835][412 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:03:17][352631698573835][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631698573835\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6766\"}'\'' -e'"" [2025-09-09 09:03:17][352631698573835][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:03:17][352631698573835][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631698573835\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6766\"}'\'' -e'"" [2025-09-09 09:03:20][352631698573835][3848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88aa1eb9-0e5e-4b88-909c-574ea861a3fd","id":"QR_88aa1eb9-0e5e-4b88-909c-574ea861a3fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:03:21][352631698573835][4005 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-09 09:03:21][352631698573835][4005 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-09 09:03:21][352631698573835][4005 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:03:23][350731019423140][0 ms][INFO] === Request start === [2025-09-09 09:03:23][350731019423140][1 ms][DEBUG] START check_scloud [2025-09-09 09:03:23][350731019423140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:03:23][350731019423140][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 26308 4971 24236012 159972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:03:23][350731019423140][310 ms][DEBUG] targetPkg: running [2025-09-09 09:03:23][350731019423140][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 09:03:23][350731019423140][310 ms][DEBUG] START check_boot_completed [2025-09-09 09:03:23][350731019423140][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:03:23][350731019423140][355 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 09:03:23][350731019423140][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:03:23][350731019423140][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:03:23][350731019423140][402 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 09:03:23][350731019423140][402 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:03:23][350731019423140][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019423140\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1617\"}'\'' -e'"" [2025-09-09 09:03:23][350731019423140][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:03:23][350731019423140][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731019423140\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1617\"}'\'' -e'"" [2025-09-09 09:03:26][350731019423140][3729 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d48c23ed-d35e-4f13-8da1-1176c1b156bd","id":"QR_d48c23ed-d35e-4f13-8da1-1176c1b156bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:03:26][350731019423140][3885 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 09:03:26][350731019423140][3885 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 09:03:26][350731019423140][3885 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:03:29][352946244801633][1 ms][INFO] === Request start === [2025-09-09 09:03:29][352946244801633][1 ms][DEBUG] START check_scloud [2025-09-09 09:03:29][352946244801633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:03:29][352946244801633][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 26308 4971 24390868 172204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:03:29][352946244801633][270 ms][DEBUG] targetPkg: running [2025-09-09 09:03:29][352946244801633][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 09:03:29][352946244801633][270 ms][DEBUG] START check_boot_completed [2025-09-09 09:03:29][352946244801633][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:03:29][352946244801633][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:03:29][352946244801633][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:03:29][352946244801633][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:03:29][352946244801633][364 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:03:29][352946244801633][364 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:03:29][352946244801633][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946244801633\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6176\"}'\'' -e'"" [2025-09-09 09:03:29][352946244801633][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:03:29][352946244801633][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946244801633\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6176\"}'\'' -e'"" [2025-09-09 09:03:32][352946244801633][3441 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 09:03:32][352946244801633][3597 ms][DEBUG] proc_open done in 3233 ms; code=255; res.len=115 [2025-09-09 09:03:32][352946244801633][3597 ms][DEBUG] END runCmdUntilRes#1 in 3233 ms [2025-09-09 09:03:32][352946244801633][3597 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 09:03:32][][0 ms][INFO] === Request start === [2025-09-09 09:03:32][][1 ms][DEBUG] START check_scloud [2025-09-09 09:03:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:03:33][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 26308 4971 24493420 183272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:03:33][][306 ms][DEBUG] targetPkg: running [2025-09-09 09:03:33][][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 09:03:33][][306 ms][DEBUG] START check_boot_completed [2025-09-09 09:03:33][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:03:33][][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:03:33][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:03:33][][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:03:33][][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:03:33][][384 ms][DEBUG] rawBody.length=1131 [2025-09-09 09:03:33][][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT3171ZEP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5918\"}'\'' -e'"" [2025-09-09 09:03:33][][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:03:33][][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT3171ZEP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5918\"}'\'' -e'"" [2025-09-09 09:03:36][][3352 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 09:03:36][][3508 ms][DEBUG] proc_open done in 3124 ms; code=255; res.len=115 [2025-09-09 09:03:36][][3508 ms][DEBUG] END runCmdUntilRes#1 in 3124 ms [2025-09-09 09:03:36][][3508 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 09:03:38][352946244801633][0 ms][INFO] === Request start === [2025-09-09 09:03:38][352946244801633][1 ms][DEBUG] START check_scloud [2025-09-09 09:03:38][352946244801633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:03:38][352946244801633][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 26308 4971 24615504 195160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:03:38][352946244801633][313 ms][DEBUG] targetPkg: running [2025-09-09 09:03:38][352946244801633][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 09:03:38][352946244801633][313 ms][DEBUG] START check_boot_completed [2025-09-09 09:03:38][352946244801633][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:03:38][352946244801633][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:03:38][352946244801633][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:03:38][352946244801633][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:03:38][352946244801633][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:03:38][352946244801633][407 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:03:38][352946244801633][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946244801633\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1437\"}'\'' -e'"" [2025-09-09 09:03:38][352946244801633][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:03:38][352946244801633][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946244801633\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1437\"}'\'' -e'"" [2025-09-09 09:03:44][352946244801633][6358 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9cfbd7d-61a3-46cb-a8d8-18a69220a01c","id":"QR_d9cfbd7d-61a3-46cb-a8d8-18a69220a01c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:03:44][352946244801633][6514 ms][DEBUG] proc_open done in 6107 ms; code=255; res.len=3343 [2025-09-09 09:03:44][352946244801633][6514 ms][DEBUG] END runCmdUntilRes#1 in 6107 ms [2025-09-09 09:03:44][352946244801633][6514 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:04:03][353372914329640][0 ms][INFO] === Request start === [2025-09-09 09:04:03][353372914329640][1 ms][DEBUG] START check_scloud [2025-09-09 09:04:03][353372914329640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:04:03][353372914329640][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 26308 4971 24699712 206420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:04:03][353372914329640][290 ms][DEBUG] targetPkg: running [2025-09-09 09:04:03][353372914329640][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 09:04:03][353372914329640][290 ms][DEBUG] START check_boot_completed [2025-09-09 09:04:03][353372914329640][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:04:03][353372914329640][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:04:03][353372914329640][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:04:03][353372914329640][369 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:04:03][353372914329640][369 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 09:04:03][353372914329640][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:04:03][353372914329640][508 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3370\nsuccessfulTxPacketsPerSecond: 0.9594093490955327\nretriedTxPackets: 681\nretriedTxPacketsPerSecond: 0.2456619094569876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3217\nsuccessfulRxPacketsPerSecond: 0.8166598611678236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:04:03][353372914329640][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:04:05][353372914329640][1867 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.079/306.079/306.079/0.000 ms\n [2025-09-09 09:04:05][353372914329640][1867 ms][DEBUG] check_internet: online [2025-09-09 09:04:05][353372914329640][1868 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:04:05][353372914329640][1868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372914329640\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5583\"}'\'' -e'"" [2025-09-09 09:04:05][353372914329640][1868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:04:05][353372914329640][1868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372914329640\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5583\"}'\'' -e'"" [2025-09-09 09:04:08][353372914329640][4898 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 09:04:08][353372914329640][5054 ms][DEBUG] proc_open done in 3187 ms; code=255; res.len=115 [2025-09-09 09:04:08][353372914329640][5054 ms][DEBUG] END runCmdUntilRes#1 in 3187 ms [2025-09-09 09:04:08][353372914329640][5054 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 09:04:08][][1 ms][INFO] === Request start === [2025-09-09 09:04:08][][1 ms][DEBUG] START check_scloud [2025-09-09 09:04:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:04:08][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 26308 4971 24838216 218288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:04:08][][308 ms][DEBUG] targetPkg: running [2025-09-09 09:04:08][][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 09:04:08][][308 ms][DEBUG] START check_boot_completed [2025-09-09 09:04:08][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:04:08][][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:04:08][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:04:08][][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:04:08][][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:04:08][][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:04:09][][511 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3370\nsuccessfulTxPacketsPerSecond: 0.9594093490955327\nretriedTxPackets: 681\nretriedTxPacketsPerSecond: 0.2456619094569876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3217\nsuccessfulRxPacketsPerSecond: 0.8166598611678236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:04:09][][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:04:09][][871 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.477/222.477/222.477/0.000 ms\n [2025-09-09 09:04:09][][871 ms][DEBUG] check_internet: online [2025-09-09 09:04:09][][871 ms][DEBUG] rawBody.length=1131 [2025-09-09 09:04:09][][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCTB0W65DB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7778\"}'\'' -e'"" [2025-09-09 09:04:09][][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:04:09][][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCTB0W65DB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7778\"}'\'' -e'"" [2025-09-09 09:04:12][][4198 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 09:04:12][][4354 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=115 [2025-09-09 09:04:12][][4354 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 09:04:12][][4354 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 09:04:14][353372914329640][0 ms][INFO] === Request start === [2025-09-09 09:04:14][353372914329640][1 ms][DEBUG] START check_scloud [2025-09-09 09:04:14][353372914329640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:04:14][353372914329640][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 26308 4971 24980816 229432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:04:14][353372914329640][309 ms][DEBUG] targetPkg: running [2025-09-09 09:04:14][353372914329640][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 09:04:14][353372914329640][309 ms][DEBUG] START check_boot_completed [2025-09-09 09:04:14][353372914329640][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:04:14][353372914329640][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:04:14][353372914329640][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:04:14][353372914329640][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:04:14][353372914329640][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:04:14][353372914329640][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:04:15][353372914329640][497 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3370\nsuccessfulTxPacketsPerSecond: 0.9594093490955327\nretriedTxPackets: 681\nretriedTxPacketsPerSecond: 0.2456619094569876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3217\nsuccessfulRxPacketsPerSecond: 0.8166598611678236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:04:15][353372914329640][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:04:15][353372914329640][825 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.460/222.460/222.460/0.000 ms\n [2025-09-09 09:04:15][353372914329640][825 ms][DEBUG] check_internet: online [2025-09-09 09:04:15][353372914329640][825 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:04:15][353372914329640][825 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372914329640\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5658\"}'\'' -e'"" [2025-09-09 09:04:15][353372914329640][825 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:04:15][353372914329640][825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372914329640\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5658\"}'\'' -e'"" [2025-09-09 09:04:20][353372914329640][5526 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d08a170-390b-4fa6-8434-2f53444137e9","id":"QR_3d08a170-390b-4fa6-8434-2f53444137e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:04:20][353372914329640][5683 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-09 09:04:20][353372914329640][5683 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-09-09 09:04:20][353372914329640][5683 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:04:24][356328980483213][0 ms][INFO] === Request start === [2025-09-09 09:04:24][356328980483213][1 ms][DEBUG] START check_scloud [2025-09-09 09:04:24][356328980483213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:04:24][356328980483213][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 26308 4971 25123380 241400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:04:24][356328980483213][279 ms][DEBUG] targetPkg: running [2025-09-09 09:04:24][356328980483213][279 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 09:04:24][356328980483213][280 ms][DEBUG] START check_boot_completed [2025-09-09 09:04:24][356328980483213][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:04:24][356328980483213][324 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 09:04:24][356328980483213][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:04:25][356328980483213][418 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 09:04:25][356328980483213][418 ms][DEBUG] END check_boot_completed in 139 ms [2025-09-09 09:04:25][356328980483213][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:04:25][356328980483213][544 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3370\nsuccessfulTxPacketsPerSecond: 0.9594093490955327\nretriedTxPackets: 681\nretriedTxPacketsPerSecond: 0.2456619094569876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3217\nsuccessfulRxPacketsPerSecond: 0.8166598611678236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:04:25][356328980483213][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:04:25][356328980483213][902 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.669/253.669/253.669/0.000 ms\n [2025-09-09 09:04:25][356328980483213][902 ms][DEBUG] check_internet: online [2025-09-09 09:04:25][356328980483213][902 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:04:25][356328980483213][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356328980483213\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9320\"}'\'' -e'"" [2025-09-09 09:04:25][356328980483213][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:04:25][356328980483213][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356328980483213\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9320\"}'\'' -e'"" [2025-09-09 09:04:29][356328980483213][4542 ms][DEBUG] proc_open done in 3640 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 09:04:29][356328980483213][4542 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-09 09:04:29][356328980483213][4542 ms][WARN] Detected error: Process with pid 26308 either refused to load frida-agent, or terminated during injectionProcess with pid 26308 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 09:04:29][356328980483213][4543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 09:04:29][356328980483213][4839 ms][DEBUG] SU: done in 296 ms; outsystem 5393 4971 12673908 198896 ep_poll 0 S system_server\n [2025-09-09 09:04:29][356328980483213][4839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 09:04:29][356328980483213][4980 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 09:04:29][356328980483213][4980 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 09:04:29][356328980483213][4980 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 09:04:29][356328980483213][5136 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 09:04:29][356328980483213][5136 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 09:04:29][356328980483213][5308 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 09:04:31][356328980483213][7323 ms][DEBUG] START check_boot_completed [2025-09-09 09:04:31][356328980483213][7323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:04:31][356328980483213][7370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:04:31][356328980483213][7370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:04:32][356328980483213][7416 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:04:32][356328980483213][7416 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:04:35][356328980483213][10431 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 09:04:35][356328980483213][10431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356328980483213\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9320\"}'\'' -e'"" [2025-09-09 09:04:38][356328980483213][13727 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8ff9478-6037-4fb5-9b82-aa881127fdca","id":"QR_b8ff9478-6037-4fb5-9b82-aa881127fdca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:04:38][356328980483213][13884 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-09 09:04:38][356328980483213][13884 ms][DEBUG] END runCmdUntilRes#2 in 3453 ms [2025-09-09 09:04:38][356328980483213][13884 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:04:40][356328980483213][0 ms][INFO] === Request start === [2025-09-09 09:04:40][356328980483213][1 ms][DEBUG] START check_scloud [2025-09-09 09:04:40][356328980483213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:04:41][356328980483213][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 27581 4971 23865756 124540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:04:41][356328980483213][270 ms][DEBUG] targetPkg: running [2025-09-09 09:04:41][356328980483213][270 ms][DEBUG] END check_scloud in 270 ms [2025-09-09 09:04:41][356328980483213][270 ms][DEBUG] START check_boot_completed [2025-09-09 09:04:41][356328980483213][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:04:41][356328980483213][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:04:41][356328980483213][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:04:41][356328980483213][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:04:41][356328980483213][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:04:41][356328980483213][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:04:41][356328980483213][458 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3370\nsuccessfulTxPacketsPerSecond: 0.9594093490955327\nretriedTxPackets: 681\nretriedTxPacketsPerSecond: 0.2456619094569876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3217\nsuccessfulRxPacketsPerSecond: 0.8166598611678236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:04:41][356328980483213][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:04:41][356328980483213][848 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.750/296.750/296.750/0.000 ms\n [2025-09-09 09:04:41][356328980483213][848 ms][DEBUG] check_internet: online [2025-09-09 09:04:41][356328980483213][848 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:04:41][356328980483213][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356328980483213\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3815\"}'\'' -e'"" [2025-09-09 09:04:41][356328980483213][849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:04:41][356328980483213][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356328980483213\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3815\"}'\'' -e'"" [2025-09-09 09:04:47][356328980483213][6862 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4a2ca12-ef35-42f6-9c91-d633b3e7ecb5","id":"QR_d4a2ca12-ef35-42f6-9c91-d633b3e7ecb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:04:47][356328980483213][7019 ms][DEBUG] proc_open done in 6170 ms; code=255; res.len=3343 [2025-09-09 09:04:47][356328980483213][7019 ms][DEBUG] END runCmdUntilRes#1 in 6170 ms [2025-09-09 09:04:47][356328980483213][7019 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:08:03][351886692407650][1 ms][INFO] === Request start === [2025-09-09 09:08:03][351886692407650][1 ms][DEBUG] START check_scloud [2025-09-09 09:08:03][351886692407650][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:08:03][351886692407650][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 27581 4971 23927984 137928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:08:03][351886692407650][296 ms][DEBUG] targetPkg: running [2025-09-09 09:08:03][351886692407650][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 09:08:03][351886692407650][296 ms][DEBUG] START check_boot_completed [2025-09-09 09:08:03][351886692407650][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:08:03][351886692407650][326 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 09:08:03][351886692407650][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:08:03][351886692407650][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:08:03][351886692407650][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:08:03][351886692407650][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:08:03][351886692407650][498 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3702\nsuccessfulTxPacketsPerSecond: 1.1024662701772912\nretriedTxPackets: 766\nretriedTxPacketsPerSecond: 0.28225793061767995\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3492\nsuccessfulRxPacketsPerSecond: 0.9131874225866117\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:08:03][351886692407650][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:08:04][351886692407650][1029 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=390 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 390.506/390.506/390.506/0.000 ms\n [2025-09-09 09:08:04][351886692407650][1029 ms][DEBUG] check_internet: online [2025-09-09 09:08:04][351886692407650][1029 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:08:04][351886692407650][1029 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886692407650\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7264\"}'\'' -e'"" [2025-09-09 09:08:04][351886692407650][1029 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:08:04][351886692407650][1029 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886692407650\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7264\"}'\'' -e'"" [2025-09-09 09:08:08][351886692407650][5513 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9831851a-f6d3-44bb-aec5-f6b470204934","id":"QR_9831851a-f6d3-44bb-aec5-f6b470204934","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:08:09][351886692407650][5669 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 09:08:09][351886692407650][5669 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-09 09:08:09][351886692407650][5669 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:08:11][351886692407650][0 ms][INFO] === Request start === [2025-09-09 09:08:11][351886692407650][1 ms][DEBUG] START check_scloud [2025-09-09 09:08:11][351886692407650][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:08:11][351886692407650][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 27581 4971 24110100 149708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:08:11][351886692407650][301 ms][DEBUG] targetPkg: running [2025-09-09 09:08:11][351886692407650][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 09:08:11][351886692407650][301 ms][DEBUG] START check_boot_completed [2025-09-09 09:08:11][351886692407650][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:08:11][351886692407650][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:08:11][351886692407650][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:08:11][351886692407650][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:08:11][351886692407650][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:08:11][351886692407650][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:08:12][351886692407650][566 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3702\nsuccessfulTxPacketsPerSecond: 1.1024662701772912\nretriedTxPackets: 766\nretriedTxPacketsPerSecond: 0.28225793061767995\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3492\nsuccessfulRxPacketsPerSecond: 0.9131874225866117\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:08:12][351886692407650][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:08:12][351886692407650][910 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.653/222.653/222.653/0.000 ms\n [2025-09-09 09:08:12][351886692407650][910 ms][DEBUG] check_internet: online [2025-09-09 09:08:12][351886692407650][910 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:08:12][351886692407650][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886692407650\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-09-09 09:08:12][351886692407650][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:08:12][351886692407650][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886692407650\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-09-09 09:08:17][351886692407650][5987 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0556c23d-0804-46db-84f4-6142975fc4ca","id":"QR_0556c23d-0804-46db-84f4-6142975fc4ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:08:17][351886692407650][6143 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-09 09:08:17][351886692407650][6143 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-09 09:08:17][351886692407650][6143 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:10:03][358104900599281][0 ms][INFO] === Request start === [2025-09-09 09:10:03][358104900599281][1 ms][DEBUG] START check_scloud [2025-09-09 09:10:03][358104900599281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:10:03][358104900599281][263 ms][DEBUG] SU: done in 263 ms; outu0_a118 27581 4971 24250452 160844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:10:03][358104900599281][263 ms][DEBUG] targetPkg: running [2025-09-09 09:10:03][358104900599281][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 09:10:03][358104900599281][263 ms][DEBUG] START check_boot_completed [2025-09-09 09:10:03][358104900599281][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:10:03][358104900599281][294 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:10:03][358104900599281][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:10:03][358104900599281][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:10:03][358104900599281][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:10:03][358104900599281][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:10:03][358104900599281][452 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3702\nsuccessfulTxPacketsPerSecond: 1.1024662701772912\nretriedTxPackets: 766\nretriedTxPacketsPerSecond: 0.28225793061767995\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3492\nsuccessfulRxPacketsPerSecond: 0.9131874225866117\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:10:03][358104900599281][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:10:05][358104900599281][2169 ms][DEBUG] SU: done in 1717 ms; outPING google.com (142.250.68.46) 56(84) bytes of data.\n64 bytes from lax17s46-in-f14.1e100.net (142.250.68.46): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.172/304.172/304.172/0.000 ms\n [2025-09-09 09:10:05][358104900599281][2169 ms][DEBUG] check_internet: online [2025-09-09 09:10:05][358104900599281][2169 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:10:05][358104900599281][2169 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104900599281\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1626\"}'\'' -e'"" [2025-09-09 09:10:05][358104900599281][2169 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:10:05][358104900599281][2169 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104900599281\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1626\"}'\'' -e'"" [2025-09-09 09:10:09][358104900599281][6059 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8a2f500-9254-460e-9e27-2017701e31c2","id":"QR_a8a2f500-9254-460e-9e27-2017701e31c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:10:09][358104900599281][6215 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-09 09:10:09][358104900599281][6215 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-09 09:10:09][358104900599281][6215 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:11:04][353204667239918][1 ms][INFO] === Request start === [2025-09-09 09:11:04][353204667239918][1 ms][DEBUG] START check_scloud [2025-09-09 09:11:04][353204667239918][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:11:04][353204667239918][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 27581 4971 24392952 171912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:11:04][353204667239918][308 ms][DEBUG] targetPkg: running [2025-09-09 09:11:04][353204667239918][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 09:11:04][353204667239918][308 ms][DEBUG] START check_boot_completed [2025-09-09 09:11:04][353204667239918][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:11:04][353204667239918][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:11:04][353204667239918][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:11:04][353204667239918][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:11:04][353204667239918][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:11:04][353204667239918][401 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:11:04][353204667239918][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667239918\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3481\"}'\'' -e'"" [2025-09-09 09:11:04][353204667239918][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:11:04][353204667239918][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667239918\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3481\"}'\'' -e'"" [2025-09-09 09:11:07][353204667239918][3650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d2a8820-90eb-4ed3-a69e-9fcc72b04551","id":"QR_5d2a8820-90eb-4ed3-a69e-9fcc72b04551","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:11:07][353204667239918][3807 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=3343 [2025-09-09 09:11:07][353204667239918][3807 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-09 09:11:07][353204667239918][3807 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:11:10][353204667239918][0 ms][INFO] === Request start === [2025-09-09 09:11:10][353204667239918][1 ms][DEBUG] START check_scloud [2025-09-09 09:11:10][353204667239918][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:11:10][353204667239918][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 27581 4971 24521216 183784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:11:10][353204667239918][244 ms][DEBUG] targetPkg: running [2025-09-09 09:11:10][353204667239918][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-09 09:11:10][353204667239918][244 ms][DEBUG] START check_boot_completed [2025-09-09 09:11:10][353204667239918][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:11:10][353204667239918][291 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:11:10][353204667239918][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:11:10][353204667239918][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:11:10][353204667239918][337 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:11:10][353204667239918][337 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:11:10][353204667239918][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667239918\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7899\"}'\'' -e'"" [2025-09-09 09:11:10][353204667239918][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:11:10][353204667239918][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667239918\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7899\"}'\'' -e'"" [2025-09-09 09:11:16][353204667239918][6211 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b8da164-65b8-4baf-8b65-9caf284b0f2e","id":"QR_1b8da164-65b8-4baf-8b65-9caf284b0f2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:11:16][353204667239918][6367 ms][DEBUG] proc_open done in 6030 ms; code=255; res.len=3343 [2025-09-09 09:11:16][353204667239918][6367 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-09-09 09:11:16][353204667239918][6368 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:11:20][353718689303378][1 ms][INFO] === Request start === [2025-09-09 09:11:20][353718689303378][1 ms][DEBUG] START check_scloud [2025-09-09 09:11:20][353718689303378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:11:21][353718689303378][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 27581 4971 24688392 194796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:11:21][353718689303378][287 ms][DEBUG] targetPkg: running [2025-09-09 09:11:21][353718689303378][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 09:11:21][353718689303378][287 ms][DEBUG] START check_boot_completed [2025-09-09 09:11:21][353718689303378][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:11:21][353718689303378][333 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 09:11:21][353718689303378][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:11:21][353718689303378][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:11:21][353718689303378][396 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 09:11:21][353718689303378][396 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:11:21][353718689303378][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718689303378\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3567\"}'\'' -e'"" [2025-09-09 09:11:21][353718689303378][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:11:21][353718689303378][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718689303378\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3567\"}'\'' -e'"" [2025-09-09 09:11:25][353718689303378][4316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba3475e6-d0b8-4fef-94ec-06fd67eb291c","id":"QR_ba3475e6-d0b8-4fef-94ec-06fd67eb291c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:11:25][353718689303378][4472 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-09 09:11:25][353718689303378][4472 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-09 09:11:25][353718689303378][4472 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:11:27][353718689303378][0 ms][INFO] === Request start === [2025-09-09 09:11:27][353718689303378][1 ms][DEBUG] START check_scloud [2025-09-09 09:11:27][353718689303378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:11:27][353718689303378][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 27581 4971 24802284 207048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:11:27][353718689303378][303 ms][DEBUG] targetPkg: running [2025-09-09 09:11:27][353718689303378][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 09:11:27][353718689303378][303 ms][DEBUG] START check_boot_completed [2025-09-09 09:11:27][353718689303378][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:11:27][353718689303378][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:11:27][353718689303378][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:11:28][353718689303378][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:11:28][353718689303378][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:11:28][353718689303378][397 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:11:28][353718689303378][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718689303378\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6612\"}'\'' -e'"" [2025-09-09 09:11:28][353718689303378][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:11:28][353718689303378][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718689303378\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6612\"}'\'' -e'"" [2025-09-09 09:11:32][353718689303378][5224 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aec3cc63-ab7a-4de6-9815-ff4cecb4df27","id":"QR_aec3cc63-ab7a-4de6-9815-ff4cecb4df27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:11:33][353718689303378][5380 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-09 09:11:33][353718689303378][5380 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-09 09:11:33][353718689303378][5380 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:12:03][355041118550164][0 ms][INFO] === Request start === [2025-09-09 09:12:03][355041118550164][1 ms][DEBUG] START check_scloud [2025-09-09 09:12:03][355041118550164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:12:03][355041118550164][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 27581 4971 24918024 217964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:12:03][355041118550164][309 ms][DEBUG] targetPkg: running [2025-09-09 09:12:03][355041118550164][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 09:12:03][355041118550164][310 ms][DEBUG] START check_boot_completed [2025-09-09 09:12:03][355041118550164][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:12:03][355041118550164][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:12:03][355041118550164][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:12:03][355041118550164][405 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 09:12:03][355041118550164][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 09:12:03][355041118550164][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:12:03][355041118550164][512 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3702\nsuccessfulTxPacketsPerSecond: 1.1024662701772912\nretriedTxPackets: 766\nretriedTxPacketsPerSecond: 0.28225793061767995\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3492\nsuccessfulRxPacketsPerSecond: 0.9131874225866117\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:12:03][355041118550164][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:12:04][355041118550164][903 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.46) 56(84) bytes of data.\n64 bytes from lax17s46-in-f14.1e100.net (142.250.68.46): icmp_seq=1 ttl=109 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.353/272.353/272.353/0.000 ms\n [2025-09-09 09:12:04][355041118550164][903 ms][DEBUG] check_internet: online [2025-09-09 09:12:04][355041118550164][903 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:12:04][355041118550164][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355041118550164\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7793\"}'\'' -e'"" [2025-09-09 09:12:04][355041118550164][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:12:04][355041118550164][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355041118550164\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7793\"}'\'' -e'"" [2025-09-09 09:12:07][355041118550164][4418 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91b1ff07-f13c-4679-a326-62e117692c73","id":"QR_91b1ff07-f13c-4679-a326-62e117692c73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:12:08][355041118550164][4574 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-09-09 09:12:08][355041118550164][4574 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-09-09 09:12:08][355041118550164][4574 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:12:10][355041118550164][0 ms][INFO] === Request start === [2025-09-09 09:12:10][355041118550164][1 ms][DEBUG] START check_scloud [2025-09-09 09:12:10][355041118550164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:12:10][355041118550164][245 ms][DEBUG] SU: done in 245 ms; outu0_a118 27581 4971 25080080 230116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:12:10][355041118550164][245 ms][DEBUG] targetPkg: running [2025-09-09 09:12:10][355041118550164][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 09:12:10][355041118550164][246 ms][DEBUG] START check_boot_completed [2025-09-09 09:12:10][355041118550164][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:12:10][355041118550164][292 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:12:10][355041118550164][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:12:10][355041118550164][386 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 09:12:10][355041118550164][386 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 09:12:10][355041118550164][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:12:10][355041118550164][511 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3702\nsuccessfulTxPacketsPerSecond: 1.1024662701772912\nretriedTxPackets: 766\nretriedTxPacketsPerSecond: 0.28225793061767995\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3492\nsuccessfulRxPacketsPerSecond: 0.9131874225866117\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:12:10][355041118550164][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:12:11][355041118550164][902 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.68.46) 56(84) bytes of data.\n64 bytes from lax17s46-in-f14.1e100.net (142.250.68.46): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.209/299.209/299.209/0.000 ms\n [2025-09-09 09:12:11][355041118550164][902 ms][DEBUG] check_internet: online [2025-09-09 09:12:11][355041118550164][902 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:12:11][355041118550164][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355041118550164\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7094\"}'\'' -e'"" [2025-09-09 09:12:11][355041118550164][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:12:11][355041118550164][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355041118550164\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7094\"}'\'' -e'"" [2025-09-09 09:12:16][355041118550164][6572 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52b46f1e-53d4-46b5-bd70-1c1495f1405f","id":"QR_52b46f1e-53d4-46b5-bd70-1c1495f1405f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:12:17][355041118550164][6728 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-09-09 09:12:17][355041118550164][6728 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-09-09 09:12:17][355041118550164][6728 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:14:03][355506802787561][1 ms][INFO] === Request start === [2025-09-09 09:14:03][355506802787561][1 ms][DEBUG] START check_scloud [2025-09-09 09:14:03][355506802787561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:14:03][355506802787561][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 27581 4971 25171408 241272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:14:03][355506802787561][280 ms][DEBUG] targetPkg: running [2025-09-09 09:14:03][355506802787561][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 09:14:03][355506802787561][280 ms][DEBUG] START check_boot_completed [2025-09-09 09:14:03][355506802787561][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:14:03][355506802787561][326 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:14:03][355506802787561][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:14:03][355506802787561][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:14:03][355506802787561][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:14:03][355506802787561][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:14:04][355506802787561][530 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3988\nsuccessfulTxPacketsPerSecond: 0.9492326482927088\nretriedTxPackets: 842\nretriedTxPacketsPerSecond: 0.2522436408050555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3739\nsuccessfulRxPacketsPerSecond: 0.8197918326164304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:14:04][355506802787561][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:14:04][355506802787561][936 ms][DEBUG] SU: done in 405 ms; outPING google.com (142.250.68.46) 56(84) bytes of data.\n64 bytes from lax17s46-in-f14.1e100.net (142.250.68.46): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.913/299.913/299.913/0.000 ms\n [2025-09-09 09:14:04][355506802787561][936 ms][DEBUG] check_internet: online [2025-09-09 09:14:04][355506802787561][936 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:14:04][355506802787561][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802787561\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8181\"}'\'' -e'"" [2025-09-09 09:14:04][355506802787561][936 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:14:04][355506802787561][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802787561\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8181\"}'\'' -e'"" [2025-09-09 09:14:08][355506802787561][4607 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 09:14:08][355506802787561][4607 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 09:14:08][355506802787561][4607 ms][WARN] Detected error: Process with pid 27581 either refused to load frida-agent, or terminated during injectionProcess with pid 27581 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 09:14:08][355506802787561][4607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 09:14:08][355506802787561][4872 ms][DEBUG] SU: done in 265 ms; outsystem 5393 4971 12673908 191924 ep_poll 0 S system_server\n [2025-09-09 09:14:08][355506802787561][4872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 09:14:08][355506802787561][4997 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 09:14:08][355506802787561][4997 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 09:14:08][355506802787561][4997 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 09:14:08][355506802787561][5107 ms][DEBUG] SU: done in 110 ms; out [2025-09-09 09:14:08][355506802787561][5107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 09:14:08][355506802787561][5263 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 09:14:10][355506802787561][7278 ms][DEBUG] START check_boot_completed [2025-09-09 09:14:10][355506802787561][7278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:14:10][355506802787561][7325 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:14:10][355506802787561][7325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:14:10][355506802787561][7372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:14:10][355506802787561][7372 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:14:13][355506802787561][10386 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 09:14:13][355506802787561][10387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802787561\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8181\"}'\'' -e'"" [2025-09-09 09:14:18][355506802787561][15104 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9ddce08-4871-4750-a166-be1dc6eb5d69","id":"QR_f9ddce08-4871-4750-a166-be1dc6eb5d69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:14:18][355506802787561][15260 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-09 09:14:18][355506802787561][15261 ms][DEBUG] END runCmdUntilRes#2 in 4874 ms [2025-09-09 09:14:18][355506802787561][15261 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:14:21][355506802787561][0 ms][INFO] === Request start === [2025-09-09 09:14:21][355506802787561][1 ms][DEBUG] START check_scloud [2025-09-09 09:14:21][355506802787561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:14:21][355506802787561][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 29022 4971 23801948 123932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:14:21][355506802787561][246 ms][DEBUG] targetPkg: running [2025-09-09 09:14:21][355506802787561][246 ms][DEBUG] END check_scloud in 246 ms [2025-09-09 09:14:21][355506802787561][246 ms][DEBUG] START check_boot_completed [2025-09-09 09:14:21][355506802787561][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:14:21][355506802787561][308 ms][DEBUG] ADB: done in 62 ms; out [2025-09-09 09:14:21][355506802787561][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:14:21][355506802787561][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:14:21][355506802787561][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:14:21][355506802787561][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:14:21][355506802787561][449 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3988\nsuccessfulTxPacketsPerSecond: 0.9492326482927088\nretriedTxPackets: 842\nretriedTxPacketsPerSecond: 0.2522436408050555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3739\nsuccessfulRxPacketsPerSecond: 0.8197918326164304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:14:21][355506802787561][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:14:21][355506802787561][855 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.46) 56(84) bytes of data.\n64 bytes from lax17s46-in-f14.1e100.net (142.250.68.46): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.840/288.840/288.840/0.000 ms\n [2025-09-09 09:14:21][355506802787561][855 ms][DEBUG] check_internet: online [2025-09-09 09:14:21][355506802787561][855 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:14:21][355506802787561][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802787561\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7848\"}'\'' -e'"" [2025-09-09 09:14:21][355506802787561][856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:14:21][355506802787561][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802787561\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7848\"}'\'' -e'"" [2025-09-09 09:14:27][355506802787561][5994 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8f64947-91ac-48f9-85e9-445aac4dcaab","id":"QR_e8f64947-91ac-48f9-85e9-445aac4dcaab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:14:27][355506802787561][6151 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 09:14:27][355506802787561][6151 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 09:14:27][355506802787561][6151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:15:03][353881488253879][0 ms][INFO] === Request start === [2025-09-09 09:15:03][353881488253879][1 ms][DEBUG] START check_scloud [2025-09-09 09:15:03][353881488253879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:15:04][353881488253879][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 29022 4971 23883900 137772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:15:04][353881488253879][264 ms][DEBUG] targetPkg: running [2025-09-09 09:15:04][353881488253879][264 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 09:15:04][353881488253879][264 ms][DEBUG] START check_boot_completed [2025-09-09 09:15:04][353881488253879][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:15:04][353881488253879][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:15:04][353881488253879][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:15:04][353881488253879][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:15:04][353881488253879][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:15:04][353881488253879][358 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:15:04][353881488253879][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881488253879\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2251\"}'\'' -e'"" [2025-09-09 09:15:04][353881488253879][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:15:04][353881488253879][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881488253879\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2251\"}'\'' -e'"" [2025-09-09 09:15:07][353881488253879][3576 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7389e62d-a70c-4774-a578-2a77ca636733","id":"QR_7389e62d-a70c-4774-a578-2a77ca636733","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:15:07][353881488253879][3732 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=3343 [2025-09-09 09:15:07][353881488253879][3732 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-09 09:15:07][353881488253879][3732 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:15:09][353881488253879][0 ms][INFO] === Request start === [2025-09-09 09:15:09][353881488253879][1 ms][DEBUG] START check_scloud [2025-09-09 09:15:09][353881488253879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:15:10][353881488253879][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 29022 4971 24011140 149156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:15:10][353881488253879][261 ms][DEBUG] targetPkg: running [2025-09-09 09:15:10][353881488253879][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 09:15:10][353881488253879][261 ms][DEBUG] START check_boot_completed [2025-09-09 09:15:10][353881488253879][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:15:10][353881488253879][307 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:15:10][353881488253879][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:15:10][353881488253879][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:15:10][353881488253879][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:15:10][353881488253879][354 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:15:10][353881488253879][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881488253879\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4302\"}'\'' -e'"" [2025-09-09 09:15:10][353881488253879][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:15:10][353881488253879][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881488253879\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4302\"}'\'' -e'"" [2025-09-09 09:15:14][353881488253879][4916 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b550f383-dcee-48a3-9d88-78ae00484850","id":"QR_b550f383-dcee-48a3-9d88-78ae00484850","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:15:15][353881488253879][5072 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-09 09:15:15][353881488253879][5072 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-09 09:15:15][353881488253879][5072 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:19:03][352599507112501][1 ms][INFO] === Request start === [2025-09-09 09:19:03][352599507112501][1 ms][DEBUG] START check_scloud [2025-09-09 09:19:03][352599507112501][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:19:04][352599507112501][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 29022 4971 24143572 160552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:19:04][352599507112501][308 ms][DEBUG] targetPkg: running [2025-09-09 09:19:04][352599507112501][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 09:19:04][352599507112501][308 ms][DEBUG] START check_boot_completed [2025-09-09 09:19:04][352599507112501][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:19:04][352599507112501][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:19:04][352599507112501][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:19:04][352599507112501][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:19:04][352599507112501][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:19:04][352599507112501][386 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:19:04][352599507112501][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352599507112501\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2259\"}'\'' -e'"" [2025-09-09 09:19:04][352599507112501][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:19:04][352599507112501][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352599507112501\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2259\"}'\'' -e'"" [2025-09-09 09:19:08][352599507112501][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04bebc5a-fe86-4407-97cf-cddad5af5cb5","id":"QR_04bebc5a-fe86-4407-97cf-cddad5af5cb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:19:08][352599507112501][4932 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-09 09:19:08][352599507112501][4932 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-09 09:19:08][352599507112501][4932 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:19:11][352599507112501][0 ms][INFO] === Request start === [2025-09-09 09:19:11][352599507112501][1 ms][DEBUG] START check_scloud [2025-09-09 09:19:11][352599507112501][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:19:11][352599507112501][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 29022 4971 24285048 171312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:19:11][352599507112501][317 ms][DEBUG] targetPkg: running [2025-09-09 09:19:11][352599507112501][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 09:19:11][352599507112501][317 ms][DEBUG] START check_boot_completed [2025-09-09 09:19:11][352599507112501][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:19:11][352599507112501][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:19:11][352599507112501][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:19:11][352599507112501][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:19:11][352599507112501][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:19:11][352599507112501][411 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:19:11][352599507112501][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352599507112501\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6941\"}'\'' -e'"" [2025-09-09 09:19:11][352599507112501][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:19:11][352599507112501][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352599507112501\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6941\"}'\'' -e'"" [2025-09-09 09:19:16][352599507112501][5519 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d0184de-de3f-414c-ac34-ffe0b09faf02","id":"QR_7d0184de-de3f-414c-ac34-ffe0b09faf02","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:19:16][352599507112501][5675 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-09 09:19:16][352599507112501][5675 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-09 09:19:16][352599507112501][5675 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:19:20][356990918854268][0 ms][INFO] === Request start === [2025-09-09 09:19:20][356990918854268][1 ms][DEBUG] START check_scloud [2025-09-09 09:19:20][356990918854268][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:19:21][356990918854268][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 29022 4971 24459228 115660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:19:21][356990918854268][301 ms][DEBUG] targetPkg: running [2025-09-09 09:19:21][356990918854268][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 09:19:21][356990918854268][301 ms][DEBUG] START check_boot_completed [2025-09-09 09:19:21][356990918854268][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:19:21][356990918854268][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:19:21][356990918854268][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:19:21][356990918854268][410 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 09:19:21][356990918854268][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:19:21][356990918854268][410 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:19:21][356990918854268][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990918854268\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7624\"}'\'' -e'"" [2025-09-09 09:19:21][356990918854268][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:19:21][356990918854268][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990918854268\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7624\"}'\'' -e'"" [2025-09-09 09:19:25][356990918854268][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_babd9e21-ce7a-41ac-9e59-ee20d460aef6","id":"QR_babd9e21-ce7a-41ac-9e59-ee20d460aef6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:19:25][356990918854268][4690 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-09-09 09:19:25][356990918854268][4690 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-09-09 09:19:25][356990918854268][4690 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:19:27][356990918854268][0 ms][INFO] === Request start === [2025-09-09 09:19:27][356990918854268][1 ms][DEBUG] START check_scloud [2025-09-09 09:19:27][356990918854268][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:19:28][356990918854268][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 29022 4971 24562752 138572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:19:28][356990918854268][258 ms][DEBUG] targetPkg: running [2025-09-09 09:19:28][356990918854268][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 09:19:28][356990918854268][258 ms][DEBUG] START check_boot_completed [2025-09-09 09:19:28][356990918854268][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:19:28][356990918854268][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:19:28][356990918854268][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:19:28][356990918854268][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:19:28][356990918854268][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:19:28][356990918854268][351 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:19:28][356990918854268][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990918854268\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5887\"}'\'' -e'"" [2025-09-09 09:19:28][356990918854268][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:19:28][356990918854268][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990918854268\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5887\"}'\'' -e'"" [2025-09-09 09:19:32][356990918854268][4928 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91141753-e5a6-45df-84bb-40b8b682b433","id":"QR_91141753-e5a6-45df-84bb-40b8b682b433","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:19:32][356990918854268][5084 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 09:19:32][356990918854268][5084 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 09:19:32][356990918854268][5084 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:20:03][352075826265288][0 ms][INFO] === Request start === [2025-09-09 09:20:03][352075826265288][1 ms][DEBUG] START check_scloud [2025-09-09 09:20:03][352075826265288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:20:03][352075826265288][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 29022 4971 24645724 153296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:20:03][352075826265288][314 ms][DEBUG] targetPkg: running [2025-09-09 09:20:03][352075826265288][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 09:20:03][352075826265288][314 ms][DEBUG] START check_boot_completed [2025-09-09 09:20:03][352075826265288][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:20:03][352075826265288][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:20:03][352075826265288][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:20:04][352075826265288][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 09:20:04][352075826265288][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:20:04][352075826265288][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:20:04][352075826265288][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4111\nsuccessfulTxPacketsPerSecond: 0.7209974384074749\nretriedTxPackets: 875\nretriedTxPacketsPerSecond: 0.19343833713371278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3847\nsuccessfulRxPacketsPerSecond: 0.6330709215285145\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:20:04][352075826265288][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:20:05][352075826265288][1969 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.480/286.480/286.480/0.000 ms\n [2025-09-09 09:20:05][352075826265288][1969 ms][DEBUG] check_internet: online [2025-09-09 09:20:05][352075826265288][1970 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:20:05][352075826265288][1970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075826265288\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6522\"}'\'' -e'"" [2025-09-09 09:20:05][352075826265288][1970 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:20:05][352075826265288][1970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075826265288\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6522\"}'\'' -e'"" [2025-09-09 09:20:09][352075826265288][5671 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e20685f6-f229-4067-a24c-4a23ec3c9c8b","id":"QR_e20685f6-f229-4067-a24c-4a23ec3c9c8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:20:09][352075826265288][5828 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-09 09:20:09][352075826265288][5828 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 09:20:09][352075826265288][5828 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:20:11][352075826265288][0 ms][INFO] === Request start === [2025-09-09 09:20:11][352075826265288][1 ms][DEBUG] START check_scloud [2025-09-09 09:20:11][352075826265288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:20:12][352075826265288][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 29022 4971 24820964 165292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:20:12][352075826265288][310 ms][DEBUG] targetPkg: running [2025-09-09 09:20:12][352075826265288][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 09:20:12][352075826265288][310 ms][DEBUG] START check_boot_completed [2025-09-09 09:20:12][352075826265288][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:20:12][352075826265288][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:20:12][352075826265288][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:20:12][352075826265288][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:20:12][352075826265288][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:20:12][352075826265288][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:20:12][352075826265288][497 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4111\nsuccessfulTxPacketsPerSecond: 0.7209974384074749\nretriedTxPackets: 875\nretriedTxPacketsPerSecond: 0.19343833713371278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3847\nsuccessfulRxPacketsPerSecond: 0.6330709215285145\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:20:12][352075826265288][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:20:12][352075826265288][825 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.498/223.498/223.498/0.000 ms\n [2025-09-09 09:20:12][352075826265288][825 ms][DEBUG] check_internet: online [2025-09-09 09:20:12][352075826265288][825 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:20:12][352075826265288][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075826265288\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5574\"}'\'' -e'"" [2025-09-09 09:20:12][352075826265288][826 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:20:12][352075826265288][826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075826265288\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5574\"}'\'' -e'"" [2025-09-09 09:20:17][352075826265288][5980 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_706931ff-017b-44bb-a1bd-0a63e2df1b96","id":"QR_706931ff-017b-44bb-a1bd-0a63e2df1b96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:20:17][352075826265288][6137 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 09:20:17][352075826265288][6137 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 09:20:17][352075826265288][6137 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:20:22][352946245061880][0 ms][INFO] === Request start === [2025-09-09 09:20:22][352946245061880][1 ms][DEBUG] START check_scloud [2025-09-09 09:20:22][352946245061880][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:20:22][352946245061880][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 29022 4971 24993772 177396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:20:22][352946245061880][307 ms][DEBUG] targetPkg: running [2025-09-09 09:20:22][352946245061880][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 09:20:22][352946245061880][307 ms][DEBUG] START check_boot_completed [2025-09-09 09:20:22][352946245061880][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:20:22][352946245061880][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:20:22][352946245061880][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:20:22][352946245061880][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:20:22][352946245061880][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:20:22][352946245061880][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:20:22][352946245061880][542 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4111\nsuccessfulTxPacketsPerSecond: 0.7209974384074749\nretriedTxPackets: 875\nretriedTxPacketsPerSecond: 0.19343833713371278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3847\nsuccessfulRxPacketsPerSecond: 0.6330709215285145\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:20:22][352946245061880][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:20:23][352946245061880][994 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=338 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 338.460/338.460/338.460/0.000 ms\n [2025-09-09 09:20:23][352946245061880][994 ms][DEBUG] check_internet: online [2025-09-09 09:20:23][352946245061880][994 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:20:23][352946245061880][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946245061880\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3095\"}'\'' -e'"" [2025-09-09 09:20:23][352946245061880][994 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:20:23][352946245061880][994 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946245061880\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3095\"}'\'' -e'"" [2025-09-09 09:20:26][352946245061880][4337 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8085e03-87fa-457e-aeb8-d7c5aec27985","id":"QR_e8085e03-87fa-457e-aeb8-d7c5aec27985","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:20:26][352946245061880][4493 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=3343 [2025-09-09 09:20:26][352946245061880][4493 ms][DEBUG] END runCmdUntilRes#1 in 3498 ms [2025-09-09 09:20:26][352946245061880][4493 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:20:29][352946245061880][0 ms][INFO] === Request start === [2025-09-09 09:20:29][352946245061880][1 ms][DEBUG] START check_scloud [2025-09-09 09:20:29][352946245061880][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:20:29][352946245061880][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 29022 4971 25134164 189288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:20:29][352946245061880][288 ms][DEBUG] targetPkg: running [2025-09-09 09:20:29][352946245061880][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 09:20:29][352946245061880][288 ms][DEBUG] START check_boot_completed [2025-09-09 09:20:29][352946245061880][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:20:29][352946245061880][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:20:29][352946245061880][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:20:29][352946245061880][382 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 09:20:29][352946245061880][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:20:29][352946245061880][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:20:29][352946245061880][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4111\nsuccessfulTxPacketsPerSecond: 0.7209974384074749\nretriedTxPackets: 875\nretriedTxPacketsPerSecond: 0.19343833713371278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3847\nsuccessfulRxPacketsPerSecond: 0.6330709215285145\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:20:29][352946245061880][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:20:29][352946245061880][819 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.352/223.352/223.352/0.000 ms\n [2025-09-09 09:20:29][352946245061880][819 ms][DEBUG] check_internet: online [2025-09-09 09:20:29][352946245061880][819 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:20:29][352946245061880][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946245061880\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3436\"}'\'' -e'"" [2025-09-09 09:20:29][352946245061880][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:20:29][352946245061880][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946245061880\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3436\"}'\'' -e'"" [2025-09-09 09:20:33][352946245061880][4443 ms][DEBUG] proc_open done in 3624 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 09:20:33][352946245061880][4443 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-09 09:20:33][352946245061880][4443 ms][WARN] Detected error: Process with pid 29022 either refused to load frida-agent, or terminated during injectionProcess with pid 29022 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 09:20:33][352946245061880][4443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 09:20:33][352946245061880][4740 ms][DEBUG] SU: done in 297 ms; outsystem 5393 4971 12782872 192020 ep_poll 0 S system_server\n [2025-09-09 09:20:33][352946245061880][4740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 09:20:33][352946245061880][4865 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 09:20:33][352946245061880][4865 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 09:20:33][352946245061880][4865 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 09:20:34][352946245061880][4974 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 09:20:34][352946245061880][4974 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 09:20:34][352946245061880][5146 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 09:20:36][352946245061880][7161 ms][DEBUG] START check_boot_completed [2025-09-09 09:20:36][352946245061880][7161 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:20:36][352946245061880][7208 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:20:36][352946245061880][7208 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:20:36][352946245061880][7256 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:20:36][352946245061880][7256 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 09:20:39][352946245061880][10270 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 09:20:39][352946245061880][10270 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946245061880\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3436\"}'\'' -e'"" [2025-09-09 09:20:43][352946245061880][14706 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac92c4d0-6df3-4192-b763-0fc1b3afedba","id":"QR_ac92c4d0-6df3-4192-b763-0fc1b3afedba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:20:43][352946245061880][14862 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 09:20:43][352946245061880][14862 ms][DEBUG] END runCmdUntilRes#2 in 4593 ms [2025-09-09 09:20:43][352946245061880][14863 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:21:03][353173734743485][0 ms][INFO] === Request start === [2025-09-09 09:21:03][353173734743485][1 ms][DEBUG] START check_scloud [2025-09-09 09:21:03][353173734743485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:21:03][353173734743485][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 30767 4971 23829732 127040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:21:03][353173734743485][307 ms][DEBUG] targetPkg: running [2025-09-09 09:21:03][353173734743485][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 09:21:03][353173734743485][307 ms][DEBUG] START check_boot_completed [2025-09-09 09:21:03][353173734743485][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:21:03][353173734743485][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:21:03][353173734743485][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:21:03][353173734743485][418 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 09:21:03][353173734743485][418 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 09:21:03][353173734743485][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:21:03][353173734743485][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734743485\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUX\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7283\"}'\'' -e'"" [2025-09-09 09:21:03][353173734743485][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:21:03][353173734743485][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734743485\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUX\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7283\"}'\'' -e'"" [2025-09-09 09:21:06][353173734743485][3634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5870547d-be21-485b-8bfd-13ad6e6c0423","id":"QR_5870547d-be21-485b-8bfd-13ad6e6c0423","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:21:07][353173734743485][3790 ms][DEBUG] proc_open done in 3372 ms; code=255; res.len=3343 [2025-09-09 09:21:07][353173734743485][3790 ms][DEBUG] END runCmdUntilRes#1 in 3372 ms [2025-09-09 09:21:07][353173734743485][3790 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:21:09][353173734743485][1 ms][INFO] === Request start === [2025-09-09 09:21:09][353173734743485][1 ms][DEBUG] START check_scloud [2025-09-09 09:21:09][353173734743485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:21:09][353173734743485][279 ms][DEBUG] SU: done in 277 ms; outu0_a118 30767 4971 23909564 137976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:21:09][353173734743485][279 ms][DEBUG] targetPkg: running [2025-09-09 09:21:09][353173734743485][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 09:21:09][353173734743485][279 ms][DEBUG] START check_boot_completed [2025-09-09 09:21:09][353173734743485][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:21:09][353173734743485][325 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:21:09][353173734743485][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:21:09][353173734743485][388 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:21:09][353173734743485][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:21:09][353173734743485][388 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:21:09][353173734743485][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734743485\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUX\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6736\"}'\'' -e'"" [2025-09-09 09:21:09][353173734743485][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:21:09][353173734743485][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734743485\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUX\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6736\"}'\'' -e'"" [2025-09-09 09:21:14][353173734743485][4965 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_160c6975-dade-46c8-a90e-4cbad8253fef","id":"QR_160c6975-dade-46c8-a90e-4cbad8253fef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:21:14][353173734743485][5121 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 09:21:14][353173734743485][5121 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 09:21:14][353173734743485][5121 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:21:18][352736910522674][0 ms][INFO] === Request start === [2025-09-09 09:21:18][352736910522674][1 ms][DEBUG] START check_scloud [2025-09-09 09:21:18][352736910522674][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:21:19][352736910522674][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 30767 4971 24085892 149588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:21:19][352736910522674][316 ms][DEBUG] targetPkg: running [2025-09-09 09:21:19][352736910522674][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 09:21:19][352736910522674][316 ms][DEBUG] START check_boot_completed [2025-09-09 09:21:19][352736910522674][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:21:19][352736910522674][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:21:19][352736910522674][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:21:19][352736910522674][410 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:21:19][352736910522674][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:21:19][352736910522674][410 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:21:19][352736910522674][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910522674\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2963\"}'\'' -e'"" [2025-09-09 09:21:19][352736910522674][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:21:19][352736910522674][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910522674\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2963\"}'\'' -e'"" [2025-09-09 09:21:23][352736910522674][4908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de1188ba-be22-457b-b542-acadc184eb38","id":"QR_de1188ba-be22-457b-b542-acadc184eb38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:21:23][352736910522674][5064 ms][DEBUG] proc_open done in 4654 ms; code=255; res.len=3343 [2025-09-09 09:21:23][352736910522674][5064 ms][DEBUG] END runCmdUntilRes#1 in 4654 ms [2025-09-09 09:21:23][352736910522674][5065 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:21:26][352736910522674][0 ms][INFO] === Request start === [2025-09-09 09:21:26][352736910522674][1 ms][DEBUG] START check_scloud [2025-09-09 09:21:26][352736910522674][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:21:26][352736910522674][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 30767 4971 24205928 160624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:21:26][352736910522674][318 ms][DEBUG] targetPkg: running [2025-09-09 09:21:26][352736910522674][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 09:21:26][352736910522674][318 ms][DEBUG] START check_boot_completed [2025-09-09 09:21:26][352736910522674][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:21:26][352736910522674][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:21:26][352736910522674][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:21:26][352736910522674][442 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 09:21:26][352736910522674][442 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-09 09:21:26][352736910522674][442 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:21:26][352736910522674][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910522674\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-09-09 09:21:26][352736910522674][442 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:21:26][352736910522674][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352736910522674\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-09-09 09:21:31][352736910522674][5472 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa53eda6-b18e-4bfb-8067-2ae9f0e24469","id":"QR_fa53eda6-b18e-4bfb-8067-2ae9f0e24469","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:21:31][352736910522674][5629 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-09 09:21:31][352736910522674][5629 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-09 09:21:31][352736910522674][5629 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:27:03][357967973038176][1 ms][INFO] === Request start === [2025-09-09 09:27:03][357967973038176][1 ms][DEBUG] START check_scloud [2025-09-09 09:27:03][357967973038176][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:27:03][357967973038176][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 30767 4971 24309332 172776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:27:03][357967973038176][312 ms][DEBUG] targetPkg: running [2025-09-09 09:27:03][357967973038176][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 09:27:03][357967973038176][312 ms][DEBUG] START check_boot_completed [2025-09-09 09:27:03][357967973038176][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:27:03][357967973038176][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:27:03][357967973038176][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:27:04][357967973038176][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:27:04][357967973038176][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:27:04][357967973038176][390 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:27:04][357967973038176][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973038176\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4538\"}'\'' -e'"" [2025-09-09 09:27:04][357967973038176][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:27:04][357967973038176][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973038176\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4538\"}'\'' -e'"" [2025-09-09 09:27:08][357967973038176][5061 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3396277d-19f4-497f-a326-e802f0c960db","id":"QR_3396277d-19f4-497f-a326-e802f0c960db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:27:08][357967973038176][5217 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-09 09:27:08][357967973038176][5217 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-09 09:27:08][357967973038176][5217 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:28:03][353074281049229][0 ms][INFO] === Request start === [2025-09-09 09:28:03][353074281049229][1 ms][DEBUG] START check_scloud [2025-09-09 09:28:03][353074281049229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:28:04][353074281049229][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 30767 4971 24425208 183608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:28:04][353074281049229][293 ms][DEBUG] targetPkg: running [2025-09-09 09:28:04][353074281049229][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 09:28:04][353074281049229][293 ms][DEBUG] START check_boot_completed [2025-09-09 09:28:04][353074281049229][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:28:04][353074281049229][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:28:04][353074281049229][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:28:04][353074281049229][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:28:04][353074281049229][388 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 09:28:04][353074281049229][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:28:04][353074281049229][512 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4486\nsuccessfulTxPacketsPerSecond: 0.44830987178337667\nretriedTxPackets: 963\nretriedTxPacketsPerSecond: 0.09962441595186149\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4171\nsuccessfulRxPacketsPerSecond: 0.40846010540263206\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:28:04][353074281049229][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:28:05][353074281049229][1918 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.540/299.540/299.540/0.000 ms\n [2025-09-09 09:28:05][353074281049229][1918 ms][DEBUG] check_internet: online [2025-09-09 09:28:05][353074281049229][1918 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:28:05][353074281049229][1918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281049229\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5312\"}'\'' -e'"" [2025-09-09 09:28:05][353074281049229][1918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:28:05][353074281049229][1918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281049229\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5312\"}'\'' -e'"" [2025-09-09 09:28:09][353074281049229][5463 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 09:28:09][353074281049229][5620 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=115 [2025-09-09 09:28:09][353074281049229][5620 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-09 09:28:09][353074281049229][5620 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 09:28:09][][0 ms][INFO] === Request start === [2025-09-09 09:28:09][][1 ms][DEBUG] START check_scloud [2025-09-09 09:28:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:28:09][][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 30767 4971 24547200 195248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:28:09][][315 ms][DEBUG] targetPkg: running [2025-09-09 09:28:09][][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 09:28:09][][315 ms][DEBUG] START check_boot_completed [2025-09-09 09:28:09][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:28:10][][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:28:10][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:28:10][][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:28:10][][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:28:10][][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:28:10][][518 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4486\nsuccessfulTxPacketsPerSecond: 0.44830987178337667\nretriedTxPackets: 963\nretriedTxPacketsPerSecond: 0.09962441595186149\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4171\nsuccessfulRxPacketsPerSecond: 0.40846010540263206\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:28:10][][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:28:10][][846 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.280/223.280/223.280/0.000 ms\n [2025-09-09 09:28:10][][846 ms][DEBUG] check_internet: online [2025-09-09 09:28:10][][846 ms][DEBUG] rawBody.length=1131 [2025-09-09 09:28:10][][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT20JGFAM\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1792\"}'\'' -e'"" [2025-09-09 09:28:10][][846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:28:10][][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT20JGFAM\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1792\"}'\'' -e'"" [2025-09-09 09:28:13][][3939 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-09 09:28:13][][4095 ms][DEBUG] proc_open done in 3249 ms; code=255; res.len=95 [2025-09-09 09:28:13][][4095 ms][DEBUG] END runCmdUntilRes#1 in 3249 ms [2025-09-09 09:28:13][][4095 ms][INFO] SUCCESS response from frida (len=95) [2025-09-09 09:28:15][353074281049229][0 ms][INFO] === Request start === [2025-09-09 09:28:15][353074281049229][1 ms][DEBUG] START check_scloud [2025-09-09 09:28:15][353074281049229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:28:15][353074281049229][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 30767 4971 24671240 206364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:28:15][353074281049229][306 ms][DEBUG] targetPkg: running [2025-09-09 09:28:15][353074281049229][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 09:28:15][353074281049229][306 ms][DEBUG] START check_boot_completed [2025-09-09 09:28:15][353074281049229][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:28:15][353074281049229][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:28:15][353074281049229][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:28:15][353074281049229][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:28:15][353074281049229][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:28:15][353074281049229][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:28:15][353074281049229][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4486\nsuccessfulTxPacketsPerSecond: 0.44830987178337667\nretriedTxPackets: 963\nretriedTxPacketsPerSecond: 0.09962441595186149\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4171\nsuccessfulRxPacketsPerSecond: 0.40846010540263206\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:28:15][353074281049229][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:28:16][353074281049229][837 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.185/223.185/223.185/0.000 ms\n [2025-09-09 09:28:16][353074281049229][837 ms][DEBUG] check_internet: online [2025-09-09 09:28:16][353074281049229][837 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:28:16][353074281049229][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281049229\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2106\"}'\'' -e'"" [2025-09-09 09:28:16][353074281049229][837 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:28:16][353074281049229][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281049229\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2106\"}'\'' -e'"" [2025-09-09 09:28:21][353074281049229][5913 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18b49ad0-cf8b-400f-b546-a8278fc722ed","id":"QR_18b49ad0-cf8b-400f-b546-a8278fc722ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:28:21][353074281049229][6070 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-09 09:28:21][353074281049229][6070 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-09 09:28:21][353074281049229][6070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:28:27][354519746278713][0 ms][INFO] === Request start === [2025-09-09 09:28:27][354519746278713][1 ms][DEBUG] START check_scloud [2025-09-09 09:28:27][354519746278713][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:28:27][354519746278713][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 30767 4971 24832044 217228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:28:27][354519746278713][310 ms][DEBUG] targetPkg: running [2025-09-09 09:28:27][354519746278713][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 09:28:27][354519746278713][310 ms][DEBUG] START check_boot_completed [2025-09-09 09:28:27][354519746278713][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:28:27][354519746278713][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:28:27][354519746278713][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:28:27][354519746278713][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:28:27][354519746278713][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:28:27][354519746278713][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:28:27][354519746278713][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4486\nsuccessfulTxPacketsPerSecond: 0.44830987178337667\nretriedTxPackets: 963\nretriedTxPacketsPerSecond: 0.09962441595186149\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4171\nsuccessfulRxPacketsPerSecond: 0.40846010540263206\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:28:27][354519746278713][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:28:27][354519746278713][904 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.088/272.088/272.088/0.000 ms\n [2025-09-09 09:28:27][354519746278713][904 ms][DEBUG] check_internet: online [2025-09-09 09:28:27][354519746278713][904 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:28:27][354519746278713][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519746278713\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WA0QW4JJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9094\"}'\'' -e'"" [2025-09-09 09:28:27][354519746278713][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:28:27][354519746278713][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519746278713\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WA0QW4JJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9094\"}'\'' -e'"" [2025-09-09 09:28:31][354519746278713][4247 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2663e4ef-0965-47d1-b66b-8fc8706d27f1","id":"QR_2663e4ef-0965-47d1-b66b-8fc8706d27f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:28:31][354519746278713][4403 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=3343 [2025-09-09 09:28:31][354519746278713][4403 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 09:28:31][354519746278713][4403 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:29:03][352566272536545][1 ms][INFO] === Request start === [2025-09-09 09:29:03][352566272536545][1 ms][DEBUG] START check_scloud [2025-09-09 09:29:03][352566272536545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:29:04][352566272536545][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 30767 4971 24912968 229316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:29:04][352566272536545][294 ms][DEBUG] targetPkg: running [2025-09-09 09:29:04][352566272536545][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 09:29:04][352566272536545][294 ms][DEBUG] START check_boot_completed [2025-09-09 09:29:04][352566272536545][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:29:04][352566272536545][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:29:04][352566272536545][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:29:04][352566272536545][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:29:04][352566272536545][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:29:04][352566272536545][372 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:29:04][352566272536545][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352566272536545\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7783\"}'\'' -e'"" [2025-09-09 09:29:04][352566272536545][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:29:04][352566272536545][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352566272536545\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7783\"}'\'' -e'"" [2025-09-09 09:29:07][352566272536545][3575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5054906-cf4c-4aee-abd2-4f35eb067d5c","id":"QR_f5054906-cf4c-4aee-abd2-4f35eb067d5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:29:07][352566272536545][3731 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=3343 [2025-09-09 09:29:07][352566272536545][3731 ms][DEBUG] END runCmdUntilRes#1 in 3359 ms [2025-09-09 09:29:07][352566272536545][3731 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:29:09][352566272536545][1 ms][INFO] === Request start === [2025-09-09 09:29:09][352566272536545][1 ms][DEBUG] START check_scloud [2025-09-09 09:29:09][352566272536545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:29:10][352566272536545][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 30767 4971 25089744 241072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:29:10][352566272536545][304 ms][DEBUG] targetPkg: running [2025-09-09 09:29:10][352566272536545][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 09:29:10][352566272536545][304 ms][DEBUG] START check_boot_completed [2025-09-09 09:29:10][352566272536545][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:29:10][352566272536545][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:29:10][352566272536545][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:29:10][352566272536545][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:29:10][352566272536545][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:29:10][352566272536545][413 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:29:10][352566272536545][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352566272536545\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1376\"}'\'' -e'"" [2025-09-09 09:29:10][352566272536545][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:29:10][352566272536545][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352566272536545\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1376\"}'\'' -e'"" [2025-09-09 09:29:13][352566272536545][4084 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 09:29:13][352566272536545][4084 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 09:29:13][352566272536545][4084 ms][WARN] Detected error: Process with pid 30767 either refused to load frida-agent, or terminated during injectionProcess with pid 30767 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 09:29:13][352566272536545][4084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 09:29:14][352566272536545][4350 ms][DEBUG] SU: done in 266 ms; outsystem 5393 4971 12675892 183552 ep_poll 0 S system_server\n [2025-09-09 09:29:14][352566272536545][4350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 09:29:14][352566272536545][4475 ms][DEBUG] SU: done in 124 ms; out [2025-09-09 09:29:14][352566272536545][4475 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 09:29:14][352566272536545][4475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 09:29:14][352566272536545][4599 ms][DEBUG] SU: done in 124 ms; out [2025-09-09 09:29:14][352566272536545][4599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 09:29:14][352566272536545][4740 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 09:29:16][352566272536545][6755 ms][DEBUG] START check_boot_completed [2025-09-09 09:29:16][352566272536545][6755 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:29:16][352566272536545][6802 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:29:16][352566272536545][6802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:29:16][352566272536545][6849 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:29:16][352566272536545][6849 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:29:19][352566272536545][9864 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 09:29:19][352566272536545][9864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352566272536545\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1376\"}'\'' -e'"" [2025-09-09 09:29:25][352566272536545][15612 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_099e84c4-5492-42cd-85ad-62e85c2acc99","id":"QR_099e84c4-5492-42cd-85ad-62e85c2acc99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:29:25][352566272536545][15768 ms][DEBUG] proc_open done in 5905 ms; code=255; res.len=3343 [2025-09-09 09:29:25][352566272536545][15769 ms][DEBUG] END runCmdUntilRes#2 in 5905 ms [2025-09-09 09:29:25][352566272536545][15769 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:31:03][350026554742230][0 ms][INFO] === Request start === [2025-09-09 09:31:03][350026554742230][1 ms][DEBUG] START check_scloud [2025-09-09 09:31:03][350026554742230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:31:03][350026554742230][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 32089 4971 23776024 126636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:31:03][350026554742230][318 ms][DEBUG] targetPkg: running [2025-09-09 09:31:03][350026554742230][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 09:31:03][350026554742230][318 ms][DEBUG] START check_boot_completed [2025-09-09 09:31:03][350026554742230][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:31:03][350026554742230][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:31:03][350026554742230][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:31:03][350026554742230][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:31:03][350026554742230][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:31:03][350026554742230][411 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:31:03][350026554742230][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026554742230\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5263\"}'\'' -e'"" [2025-09-09 09:31:03][350026554742230][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:31:03][350026554742230][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026554742230\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5263\"}'\'' -e'"" [2025-09-09 09:31:08][350026554742230][5379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c7bbf99-7db7-49dc-affa-88f67e613b6c","id":"QR_4c7bbf99-7db7-49dc-affa-88f67e613b6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:31:08][350026554742230][5535 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-09 09:31:08][350026554742230][5535 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-09 09:31:08][350026554742230][5535 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:31:11][350026554742230][1 ms][INFO] === Request start === [2025-09-09 09:31:11][350026554742230][1 ms][DEBUG] START check_scloud [2025-09-09 09:31:11][350026554742230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:31:11][350026554742230][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 32089 4971 23950752 137288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:31:11][350026554742230][287 ms][DEBUG] targetPkg: running [2025-09-09 09:31:11][350026554742230][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 09:31:11][350026554742230][287 ms][DEBUG] START check_boot_completed [2025-09-09 09:31:11][350026554742230][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:31:11][350026554742230][318 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 09:31:11][350026554742230][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:31:11][350026554742230][365 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:31:11][350026554742230][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:31:11][350026554742230][366 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:31:11][350026554742230][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026554742230\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8413\"}'\'' -e'"" [2025-09-09 09:31:11][350026554742230][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:31:11][350026554742230][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026554742230\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8413\"}'\'' -e'"" [2025-09-09 09:31:16][350026554742230][5488 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3824ddb-a26b-431b-aac4-da5ee21936ea","id":"QR_b3824ddb-a26b-431b-aac4-da5ee21936ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:31:16][350026554742230][5645 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-09 09:31:16][350026554742230][5645 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-09-09 09:31:16][350026554742230][5645 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:31:21][351240643350652][0 ms][INFO] === Request start === [2025-09-09 09:31:21][351240643350652][1 ms][DEBUG] START check_scloud [2025-09-09 09:31:21][351240643350652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:31:21][351240643350652][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 32089 4971 24110428 149020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:31:21][351240643350652][258 ms][DEBUG] targetPkg: running [2025-09-09 09:31:21][351240643350652][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 09:31:21][351240643350652][258 ms][DEBUG] START check_boot_completed [2025-09-09 09:31:21][351240643350652][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:31:21][351240643350652][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:31:21][351240643350652][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:31:21][351240643350652][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:31:21][351240643350652][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:31:21][351240643350652][351 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:31:21][351240643350652][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643350652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8169\"}'\'' -e'"" [2025-09-09 09:31:21][351240643350652][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:31:21][351240643350652][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643350652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8169\"}'\'' -e'"" [2025-09-09 09:31:24][351240643350652][3585 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae909ea1-b7bf-473c-acdd-db06bc0ecaac","id":"QR_ae909ea1-b7bf-473c-acdd-db06bc0ecaac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:31:24][351240643350652][3741 ms][DEBUG] proc_open done in 3390 ms; code=255; res.len=3343 [2025-09-09 09:31:24][351240643350652][3741 ms][DEBUG] END runCmdUntilRes#1 in 3390 ms [2025-09-09 09:31:24][351240643350652][3741 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:31:27][351240643350652][0 ms][INFO] === Request start === [2025-09-09 09:31:27][351240643350652][1 ms][DEBUG] START check_scloud [2025-09-09 09:31:27][351240643350652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:31:27][351240643350652][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 32089 4971 24224384 160272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:31:27][351240643350652][298 ms][DEBUG] targetPkg: running [2025-09-09 09:31:27][351240643350652][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 09:31:27][351240643350652][298 ms][DEBUG] START check_boot_completed [2025-09-09 09:31:27][351240643350652][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:31:27][351240643350652][328 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 09:31:27][351240643350652][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:31:27][351240643350652][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:31:27][351240643350652][375 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 09:31:27][351240643350652][375 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:31:27][351240643350652][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643350652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4940\"}'\'' -e'"" [2025-09-09 09:31:27][351240643350652][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:31:27][351240643350652][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643350652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4940\"}'\'' -e'"" [2025-09-09 09:31:32][351240643350652][5171 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85179172-f7a9-4c05-868a-d356f7c74733","id":"QR_85179172-f7a9-4c05-868a-d356f7c74733","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:31:32][351240643350652][5327 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-09 09:31:32][351240643350652][5327 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-09 09:31:32][351240643350652][5327 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:33:03][350268310207013][0 ms][INFO] === Request start === [2025-09-09 09:33:03][350268310207013][1 ms][DEBUG] START check_scloud [2025-09-09 09:33:03][350268310207013][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:33:03][350268310207013][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 32089 4971 24299164 172332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:33:03][350268310207013][309 ms][DEBUG] targetPkg: running [2025-09-09 09:33:03][350268310207013][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 09:33:03][350268310207013][309 ms][DEBUG] START check_boot_completed [2025-09-09 09:33:03][350268310207013][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:33:04][350268310207013][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:33:04][350268310207013][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:33:04][350268310207013][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:33:04][350268310207013][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:33:04][350268310207013][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:33:04][350268310207013][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350268310207013\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4348\"}'\'' -e'"" [2025-09-09 09:33:04][350268310207013][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:33:04][350268310207013][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350268310207013\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4348\"}'\'' -e'"" [2025-09-09 09:33:08][350268310207013][4917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98d42db8-98ac-42bf-bd2a-d27668a7714a","id":"QR_98d42db8-98ac-42bf-bd2a-d27668a7714a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:33:08][350268310207013][5073 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-09 09:33:08][350268310207013][5073 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-09 09:33:08][350268310207013][5073 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:33:11][350268310207013][0 ms][INFO] === Request start === [2025-09-09 09:33:11][350268310207013][1 ms][DEBUG] START check_scloud [2025-09-09 09:33:11][350268310207013][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:33:11][350268310207013][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 32089 4971 24466276 183236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:33:11][350268310207013][269 ms][DEBUG] targetPkg: running [2025-09-09 09:33:11][350268310207013][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 09:33:11][350268310207013][269 ms][DEBUG] START check_boot_completed [2025-09-09 09:33:11][350268310207013][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:33:11][350268310207013][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:33:11][350268310207013][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:33:11][350268310207013][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:33:11][350268310207013][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:33:11][350268310207013][363 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:33:11][350268310207013][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350268310207013\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2003\"}'\'' -e'"" [2025-09-09 09:33:11][350268310207013][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:33:11][350268310207013][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350268310207013\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2003\"}'\'' -e'"" [2025-09-09 09:33:16][350268310207013][5455 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9249e7a-e593-462b-a781-04efe941ff72","id":"QR_e9249e7a-e593-462b-a781-04efe941ff72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:33:16][350268310207013][5611 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-09 09:33:16][350268310207013][5611 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-09 09:33:16][350268310207013][5611 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:34:03][350867774012759][1 ms][INFO] === Request start === [2025-09-09 09:34:03][350867774012759][1 ms][DEBUG] START check_scloud [2025-09-09 09:34:03][350867774012759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:34:03][350867774012759][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 32089 4971 24565796 195316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:34:03][350867774012759][301 ms][DEBUG] targetPkg: running [2025-09-09 09:34:03][350867774012759][302 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 09:34:03][350867774012759][302 ms][DEBUG] START check_boot_completed [2025-09-09 09:34:03][350867774012759][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:34:03][350867774012759][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:34:03][350867774012759][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:34:03][350867774012759][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:34:03][350867774012759][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:34:03][350867774012759][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:34:03][350867774012759][504 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4697\nsuccessfulTxPacketsPerSecond: 0.7004381888195459\nretriedTxPackets: 1032\nretriedTxPacketsPerSecond: 0.22905324658079937\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4343\nsuccessfulRxPacketsPerSecond: 0.570973310317355\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:34:03][350867774012759][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:34:05][350867774012759][1879 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.884/299.884/299.884/0.000 ms\n [2025-09-09 09:34:05][350867774012759][1879 ms][DEBUG] check_internet: online [2025-09-09 09:34:05][350867774012759][1879 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:34:05][350867774012759][1879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350867774012759\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9241\"}'\'' -e'"" [2025-09-09 09:34:05][350867774012759][1879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:34:05][350867774012759][1879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350867774012759\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9241\"}'\'' -e'"" [2025-09-09 09:34:08][350867774012759][5581 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d650c76-65dd-4050-a9f0-20592102e195","id":"QR_0d650c76-65dd-4050-a9f0-20592102e195","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:34:09][350867774012759][5738 ms][DEBUG] proc_open done in 3859 ms; code=255; res.len=3343 [2025-09-09 09:34:09][350867774012759][5738 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-09 09:34:09][350867774012759][5738 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:34:11][350867774012759][0 ms][INFO] === Request start === [2025-09-09 09:34:11][350867774012759][1 ms][DEBUG] START check_scloud [2025-09-09 09:34:11][350867774012759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:34:11][350867774012759][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 32089 4971 24738988 206816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:34:11][350867774012759][317 ms][DEBUG] targetPkg: running [2025-09-09 09:34:11][350867774012759][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 09:34:11][350867774012759][317 ms][DEBUG] START check_boot_completed [2025-09-09 09:34:11][350867774012759][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:34:11][350867774012759][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:34:11][350867774012759][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:34:11][350867774012759][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:34:11][350867774012759][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:34:11][350867774012759][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:34:11][350867774012759][504 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4697\nsuccessfulTxPacketsPerSecond: 0.7004381888195459\nretriedTxPackets: 1032\nretriedTxPacketsPerSecond: 0.22905324658079937\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4343\nsuccessfulRxPacketsPerSecond: 0.570973310317355\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:34:11][350867774012759][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:34:12][350867774012759][832 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.486/220.486/220.486/0.000 ms\n [2025-09-09 09:34:12][350867774012759][833 ms][DEBUG] check_internet: online [2025-09-09 09:34:12][350867774012759][833 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:34:12][350867774012759][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350867774012759\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3348\"}'\'' -e'"" [2025-09-09 09:34:12][350867774012759][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:34:12][350867774012759][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350867774012759\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3348\"}'\'' -e'"" [2025-09-09 09:34:17][350867774012759][5971 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0930efc-5c6d-480a-b1af-a2f2441758ba","id":"QR_a0930efc-5c6d-480a-b1af-a2f2441758ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:34:17][350867774012759][6128 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 09:34:17][350867774012759][6128 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 09:34:17][350867774012759][6128 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:36:03][350246952634272][0 ms][INFO] === Request start === [2025-09-09 09:36:03][350246952634272][1 ms][DEBUG] START check_scloud [2025-09-09 09:36:03][350246952634272][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:36:04][350246952634272][364 ms][DEBUG] SU: done in 363 ms; outu0_a118 32089 4971 24909092 97528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:36:04][350246952634272][364 ms][DEBUG] targetPkg: running [2025-09-09 09:36:04][350246952634272][364 ms][DEBUG] END check_scloud in 363 ms [2025-09-09 09:36:04][350246952634272][364 ms][DEBUG] START check_boot_completed [2025-09-09 09:36:04][350246952634272][364 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:36:04][350246952634272][411 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:36:04][350246952634272][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:36:04][350246952634272][473 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:36:04][350246952634272][473 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:36:04][350246952634272][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:36:04][350246952634272][614 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5382\nsuccessfulTxPacketsPerSecond: 36.15637568820618\nretriedTxPackets: 1123\nretriedTxPacketsPerSecond: 2.4432603906719885\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4994\nsuccessfulRxPacketsPerSecond: 35.69738499209041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:36:04][350246952634272][614 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:36:04][350246952634272][1035 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.751/295.751/295.751/0.000 ms\n [2025-09-09 09:36:04][350246952634272][1035 ms][DEBUG] check_internet: online [2025-09-09 09:36:04][350246952634272][1035 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:36:04][350246952634272][1035 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246952634272\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7905\"}'\'' -e'"" [2025-09-09 09:36:04][350246952634272][1035 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:36:04][350246952634272][1035 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246952634272\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7905\"}'\'' -e'"" [2025-09-09 09:36:09][350246952634272][5691 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fb6f16c-071f-4f32-b830-16d2bf819a5f","id":"QR_5fb6f16c-071f-4f32-b830-16d2bf819a5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:36:09][350246952634272][5847 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 09:36:09][350246952634272][5847 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 09:36:09][350246952634272][5847 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:36:12][350246952634272][1 ms][INFO] === Request start === [2025-09-09 09:36:12][350246952634272][1 ms][DEBUG] START check_scloud [2025-09-09 09:36:12][350246952634272][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:36:12][350246952634272][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 32089 4971 25049516 112732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:36:12][350246952634272][263 ms][DEBUG] targetPkg: running [2025-09-09 09:36:12][350246952634272][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 09:36:12][350246952634272][263 ms][DEBUG] START check_boot_completed [2025-09-09 09:36:12][350246952634272][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:36:12][350246952634272][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:36:12][350246952634272][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:36:12][350246952634272][403 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 09:36:12][350246952634272][403 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 09:36:12][350246952634272][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:36:12][350246952634272][544 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5382\nsuccessfulTxPacketsPerSecond: 36.15637568820618\nretriedTxPackets: 1123\nretriedTxPacketsPerSecond: 2.4432603906719885\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4994\nsuccessfulRxPacketsPerSecond: 35.69738499209041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:36:12][350246952634272][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:36:13][350246952634272][903 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.267/261.267/261.267/0.000 ms\n [2025-09-09 09:36:13][350246952634272][903 ms][DEBUG] check_internet: online [2025-09-09 09:36:13][350246952634272][903 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:36:13][350246952634272][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246952634272\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7251\"}'\'' -e'"" [2025-09-09 09:36:13][350246952634272][903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:36:13][350246952634272][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246952634272\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7251\"}'\'' -e'"" [2025-09-09 09:36:17][350246952634272][5855 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c696bdd6-2bf8-4418-892f-eb729be5733f","id":"QR_c696bdd6-2bf8-4418-892f-eb729be5733f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:36:18][350246952634272][6011 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 09:36:18][350246952634272][6011 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 09:36:18][350246952634272][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:37:03][359468671131411][0 ms][INFO] === Request start === [2025-09-09 09:37:03][359468671131411][1 ms][DEBUG] START check_scloud [2025-09-09 09:37:03][359468671131411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:37:04][359468671131411][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 32089 4971 25161328 127284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:37:04][359468671131411][303 ms][DEBUG] targetPkg: running [2025-09-09 09:37:04][359468671131411][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 09:37:04][359468671131411][303 ms][DEBUG] START check_boot_completed [2025-09-09 09:37:04][359468671131411][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:37:04][359468671131411][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:37:04][359468671131411][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:37:04][359468671131411][382 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:37:04][359468671131411][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 09:37:04][359468671131411][382 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:37:04][359468671131411][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468671131411\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8342\"}'\'' -e'"" [2025-09-09 09:37:04][359468671131411][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:37:04][359468671131411][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468671131411\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8342\"}'\'' -e'"" [2025-09-09 09:37:08][359468671131411][4833 ms][DEBUG] proc_open done in 4451 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 09:37:08][359468671131411][4833 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 09:37:08][359468671131411][4834 ms][WARN] Detected error: Process with pid 32089 either refused to load frida-agent, or terminated during injectionProcess with pid 32089 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 09:37:08][359468671131411][4834 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 09:37:08][359468671131411][5099 ms][DEBUG] SU: done in 265 ms; outsystem 5393 4971 12746912 198104 ep_poll 0 S system_server\n [2025-09-09 09:37:08][359468671131411][5099 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 09:37:09][359468671131411][5255 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 09:37:09][359468671131411][5255 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 09:37:09][359468671131411][5255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 09:37:09][359468671131411][5411 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 09:37:09][359468671131411][5411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 09:37:09][359468671131411][5614 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 09:37:11][359468671131411][7629 ms][DEBUG] START check_boot_completed [2025-09-09 09:37:11][359468671131411][7629 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:37:11][359468671131411][7676 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:37:11][359468671131411][7676 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:37:11][359468671131411][7724 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:37:11][359468671131411][7724 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 09:37:14][359468671131411][10738 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 09:37:14][359468671131411][10738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468671131411\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8342\"}'\'' -e'"" [2025-09-09 09:37:19][359468671131411][15237 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d995272-d35b-4de9-a1c5-8e2158238118","id":"QR_7d995272-d35b-4de9-a1c5-8e2158238118","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:37:19][359468671131411][15393 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-09 09:37:19][359468671131411][15393 ms][DEBUG] END runCmdUntilRes#2 in 4655 ms [2025-09-09 09:37:19][359468671131411][15393 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:37:21][359468671131411][0 ms][INFO] === Request start === [2025-09-09 09:37:21][359468671131411][1 ms][DEBUG] START check_scloud [2025-09-09 09:37:21][359468671131411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:37:21][359468671131411][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 2868 4971 23839968 124776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:37:21][359468671131411][246 ms][DEBUG] targetPkg: running [2025-09-09 09:37:21][359468671131411][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-09 09:37:21][359468671131411][247 ms][DEBUG] START check_boot_completed [2025-09-09 09:37:21][359468671131411][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:37:21][359468671131411][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:37:21][359468671131411][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:37:21][359468671131411][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:37:21][359468671131411][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:37:21][359468671131411][340 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:37:21][359468671131411][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468671131411\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3238\"}'\'' -e'"" [2025-09-09 09:37:21][359468671131411][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:37:21][359468671131411][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468671131411\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3238\"}'\'' -e'"" [2025-09-09 09:37:27][359468671131411][5511 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9dfa47b-abde-4054-971a-885061e976a8","id":"QR_e9dfa47b-abde-4054-971a-885061e976a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:37:27][359468671131411][5667 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-09 09:37:27][359468671131411][5667 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-09 09:37:27][359468671131411][5667 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:40:03][356494471496047][1 ms][INFO] === Request start === [2025-09-09 09:40:03][356494471496047][1 ms][DEBUG] START check_scloud [2025-09-09 09:40:03][356494471496047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:40:04][356494471496047][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 2868 4971 23867568 138520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:40:04][356494471496047][242 ms][DEBUG] targetPkg: running [2025-09-09 09:40:04][356494471496047][242 ms][DEBUG] END check_scloud in 241 ms [2025-09-09 09:40:04][356494471496047][242 ms][DEBUG] START check_boot_completed [2025-09-09 09:40:04][356494471496047][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:40:04][356494471496047][274 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:40:04][356494471496047][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:40:04][356494471496047][321 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:40:04][356494471496047][321 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:40:04][356494471496047][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:40:04][356494471496047][430 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5951\nsuccessfulTxPacketsPerSecond: 9.446335238089086\nretriedTxPackets: 1182\nretriedTxPacketsPerSecond: 0.9794969729897756\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5592\nsuccessfulRxPacketsPerSecond: 9.927782899615412\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:40:04][356494471496047][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:40:05][356494471496047][1789 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.564/290.564/290.564/0.000 ms\n [2025-09-09 09:40:05][356494471496047][1789 ms][DEBUG] check_internet: online [2025-09-09 09:40:05][356494471496047][1789 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:40:05][356494471496047][1789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494471496047\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4622\"}'\'' -e'"" [2025-09-09 09:40:05][356494471496047][1789 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:40:05][356494471496047][1789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494471496047\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4622\"}'\'' -e'"" [2025-09-09 09:40:09][356494471496047][5460 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf3d8dc0-5d02-42c1-a449-1566eebe5db8","id":"QR_bf3d8dc0-5d02-42c1-a449-1566eebe5db8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:40:09][356494471496047][5616 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-09-09 09:40:09][356494471496047][5616 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-09 09:40:09][356494471496047][5616 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:40:11][356494471496047][0 ms][INFO] === Request start === [2025-09-09 09:40:11][356494471496047][1 ms][DEBUG] START check_scloud [2025-09-09 09:40:11][356494471496047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:40:12][356494471496047][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 2868 4971 24004948 150252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:40:12][356494471496047][287 ms][DEBUG] targetPkg: running [2025-09-09 09:40:12][356494471496047][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 09:40:12][356494471496047][288 ms][DEBUG] START check_boot_completed [2025-09-09 09:40:12][356494471496047][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:40:12][356494471496047][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:40:12][356494471496047][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:40:12][356494471496047][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:40:12][356494471496047][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:40:12][356494471496047][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:40:12][356494471496047][490 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5951\nsuccessfulTxPacketsPerSecond: 9.446335238089086\nretriedTxPackets: 1182\nretriedTxPacketsPerSecond: 0.9794969729897756\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5592\nsuccessfulRxPacketsPerSecond: 9.927782899615412\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:40:12][356494471496047][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:40:12][356494471496047][818 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.915/222.915/222.915/0.000 ms\n [2025-09-09 09:40:12][356494471496047][819 ms][DEBUG] check_internet: online [2025-09-09 09:40:12][356494471496047][819 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:40:12][356494471496047][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494471496047\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4178\"}'\'' -e'"" [2025-09-09 09:40:12][356494471496047][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:40:12][356494471496047][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494471496047\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4178\"}'\'' -e'"" [2025-09-09 09:40:17][356494471496047][5833 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66616d22-0304-420b-a92c-9b772280ea55","id":"QR_66616d22-0304-420b-a92c-9b772280ea55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:40:17][356494471496047][5989 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-09 09:40:17][356494471496047][5989 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-09 09:40:17][356494471496047][5989 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:41:03][354550807835760][0 ms][INFO] === Request start === [2025-09-09 09:41:03][354550807835760][1 ms][DEBUG] START check_scloud [2025-09-09 09:41:03][354550807835760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:41:03][354550807835760][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 2868 4971 24092116 161620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:41:03][354550807835760][318 ms][DEBUG] targetPkg: running [2025-09-09 09:41:03][354550807835760][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 09:41:03][354550807835760][318 ms][DEBUG] START check_boot_completed [2025-09-09 09:41:03][354550807835760][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:41:03][354550807835760][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:41:03][354550807835760][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:41:03][354550807835760][458 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 09:41:03][354550807835760][458 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 09:41:03][354550807835760][458 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:41:03][354550807835760][458 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807835760\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3742\"}'\'' -e'"" [2025-09-09 09:41:03][354550807835760][458 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:41:03][354550807835760][458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807835760\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3742\"}'\'' -e'"" [2025-09-09 09:41:07][354550807835760][3895 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a89dd3a-58b9-4be9-88b4-ab3b81193a83","id":"QR_5a89dd3a-58b9-4be9-88b4-ab3b81193a83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:41:07][354550807835760][4051 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-09-09 09:41:07][354550807835760][4051 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-09 09:41:07][354550807835760][4051 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:41:09][354550807835760][0 ms][INFO] === Request start === [2025-09-09 09:41:09][354550807835760][1 ms][DEBUG] START check_scloud [2025-09-09 09:41:09][354550807835760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:41:10][354550807835760][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 2868 4971 24226396 172376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:41:10][354550807835760][313 ms][DEBUG] targetPkg: running [2025-09-09 09:41:10][354550807835760][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 09:41:10][354550807835760][313 ms][DEBUG] START check_boot_completed [2025-09-09 09:41:10][354550807835760][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:41:10][354550807835760][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:41:10][354550807835760][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:41:10][354550807835760][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:41:10][354550807835760][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:41:10][354550807835760][423 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:41:10][354550807835760][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807835760\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7906\"}'\'' -e'"" [2025-09-09 09:41:10][354550807835760][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:41:10][354550807835760][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807835760\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7906\"}'\'' -e'"" [2025-09-09 09:41:14][354550807835760][5015 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2d514ac-1fe6-46f9-8211-0bf1b286edbe","id":"QR_f2d514ac-1fe6-46f9-8211-0bf1b286edbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:41:14][354550807835760][5171 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-09 09:41:14][354550807835760][5171 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-09 09:41:14][354550807835760][5171 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:41:19][350642173352027][0 ms][INFO] === Request start === [2025-09-09 09:41:19][350642173352027][1 ms][DEBUG] START check_scloud [2025-09-09 09:41:19][350642173352027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:41:19][350642173352027][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 2868 4971 24372964 184180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:41:19][350642173352027][305 ms][DEBUG] targetPkg: running [2025-09-09 09:41:19][350642173352027][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 09:41:19][350642173352027][305 ms][DEBUG] START check_boot_completed [2025-09-09 09:41:19][350642173352027][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:41:19][350642173352027][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:41:19][350642173352027][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:41:19][350642173352027][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:41:19][350642173352027][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:41:19][350642173352027][399 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:41:19][350642173352027][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642173352027\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9585\"}'\'' -e'"" [2025-09-09 09:41:19][350642173352027][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:41:19][350642173352027][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642173352027\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9585\"}'\'' -e'"" [2025-09-09 09:41:24][350642173352027][4928 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bec4adbc-2399-48c9-9cc8-a86a146fc686","id":"QR_bec4adbc-2399-48c9-9cc8-a86a146fc686","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:41:24][350642173352027][5085 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 09:41:24][350642173352027][5085 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 09:41:24][350642173352027][5085 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:41:26][350642173352027][0 ms][INFO] === Request start === [2025-09-09 09:41:26][350642173352027][1 ms][DEBUG] START check_scloud [2025-09-09 09:41:26][350642173352027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:41:26][350642173352027][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 2868 4971 24521672 194952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:41:26][350642173352027][262 ms][DEBUG] targetPkg: running [2025-09-09 09:41:26][350642173352027][262 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 09:41:26][350642173352027][262 ms][DEBUG] START check_boot_completed [2025-09-09 09:41:26][350642173352027][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:41:27][350642173352027][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:41:27][350642173352027][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:41:27][350642173352027][373 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 09:41:27][350642173352027][373 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 09:41:27][350642173352027][373 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:41:27][350642173352027][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642173352027\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5560\"}'\'' -e'"" [2025-09-09 09:41:27][350642173352027][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:41:27][350642173352027][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642173352027\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5560\"}'\'' -e'"" [2025-09-09 09:41:32][350642173352027][5417 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faff6b27-8f12-4205-8da1-f03a88bf5a04","id":"QR_faff6b27-8f12-4205-8da1-f03a88bf5a04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:41:32][350642173352027][5573 ms][DEBUG] proc_open done in 5200 ms; code=255; res.len=3343 [2025-09-09 09:41:32][350642173352027][5573 ms][DEBUG] END runCmdUntilRes#1 in 5200 ms [2025-09-09 09:41:32][350642173352027][5573 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:48:04][353194564858136][1 ms][INFO] === Request start === [2025-09-09 09:48:04][353194564858136][1 ms][DEBUG] START check_scloud [2025-09-09 09:48:04][353194564858136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:48:04][353194564858136][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 2868 4971 24632216 207436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:48:04][353194564858136][308 ms][DEBUG] targetPkg: running [2025-09-09 09:48:04][353194564858136][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 09:48:04][353194564858136][308 ms][DEBUG] START check_boot_completed [2025-09-09 09:48:04][353194564858136][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:48:04][353194564858136][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:48:04][353194564858136][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:48:04][353194564858136][403 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 09:48:04][353194564858136][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 09:48:04][353194564858136][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:48:04][353194564858136][510 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6285\nsuccessfulTxPacketsPerSecond: 0.25355161478319443\nretriedTxPackets: 1290\nretriedTxPacketsPerSecond: 0.0832557541079146\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5878\nsuccessfulRxPacketsPerSecond: 0.21192373772923714\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:48:04][353194564858136][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:48:05][353194564858136][1838 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.954/292.954/292.954/0.000 ms\n [2025-09-09 09:48:05][353194564858136][1838 ms][DEBUG] check_internet: online [2025-09-09 09:48:05][353194564858136][1839 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:48:05][353194564858136][1839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353194564858136\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9765\"}'\'' -e'"" [2025-09-09 09:48:05][353194564858136][1839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:48:05][353194564858136][1839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353194564858136\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9765\"}'\'' -e'"" [2025-09-09 09:48:09][353194564858136][5493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee35d57f-e160-43f3-a518-876dd7d4b2de","id":"QR_ee35d57f-e160-43f3-a518-876dd7d4b2de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:48:09][353194564858136][5650 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-09 09:48:09][353194564858136][5650 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-09 09:48:09][353194564858136][5650 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:48:11][353194564858136][0 ms][INFO] === Request start === [2025-09-09 09:48:11][353194564858136][1 ms][DEBUG] START check_scloud [2025-09-09 09:48:11][353194564858136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:48:12][353194564858136][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 2868 4971 24795756 218104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:48:12][353194564858136][277 ms][DEBUG] targetPkg: running [2025-09-09 09:48:12][353194564858136][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 09:48:12][353194564858136][277 ms][DEBUG] START check_boot_completed [2025-09-09 09:48:12][353194564858136][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:48:12][353194564858136][323 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:48:12][353194564858136][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:48:12][353194564858136][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:48:12][353194564858136][370 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 09:48:12][353194564858136][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:48:12][353194564858136][479 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6285\nsuccessfulTxPacketsPerSecond: 0.25355161478319443\nretriedTxPackets: 1290\nretriedTxPacketsPerSecond: 0.0832557541079146\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5878\nsuccessfulRxPacketsPerSecond: 0.21192373772923714\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:48:12][353194564858136][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:48:12][353194564858136][870 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.348/286.348/286.348/0.000 ms\n [2025-09-09 09:48:12][353194564858136][870 ms][DEBUG] check_internet: online [2025-09-09 09:48:12][353194564858136][870 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:48:12][353194564858136][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353194564858136\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5793\"}'\'' -e'"" [2025-09-09 09:48:12][353194564858136][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:48:12][353194564858136][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353194564858136\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5793\"}'\'' -e'"" [2025-09-09 09:48:17][353194564858136][6009 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e843ed36-65b9-4341-bfa8-67bc18e107d6","id":"QR_e843ed36-65b9-4341-bfa8-67bc18e107d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:48:18][353194564858136][6166 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 09:48:18][353194564858136][6166 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 09:48:18][353194564858136][6166 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:48:22][356647186234298][0 ms][INFO] === Request start === [2025-09-09 09:48:22][356647186234298][1 ms][DEBUG] START check_scloud [2025-09-09 09:48:22][356647186234298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:48:22][356647186234298][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 2868 4971 24928116 229940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:48:22][356647186234298][303 ms][DEBUG] targetPkg: running [2025-09-09 09:48:22][356647186234298][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 09:48:22][356647186234298][303 ms][DEBUG] START check_boot_completed [2025-09-09 09:48:22][356647186234298][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:48:22][356647186234298][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:48:22][356647186234298][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:48:22][356647186234298][428 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 09:48:22][356647186234298][428 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 09:48:22][356647186234298][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:48:22][356647186234298][568 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6285\nsuccessfulTxPacketsPerSecond: 0.25355161478319443\nretriedTxPackets: 1290\nretriedTxPacketsPerSecond: 0.0832557541079146\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5878\nsuccessfulRxPacketsPerSecond: 0.21192373772923714\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:48:22][356647186234298][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:48:23][356647186234298][943 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.183/282.183/282.183/0.000 ms\n [2025-09-09 09:48:23][356647186234298][943 ms][DEBUG] check_internet: online [2025-09-09 09:48:23][356647186234298][943 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:48:23][356647186234298][943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647186234298\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3667\"}'\'' -e'"" [2025-09-09 09:48:23][356647186234298][943 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:48:23][356647186234298][943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647186234298\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3667\"}'\'' -e'"" [2025-09-09 09:48:26][356647186234298][4286 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b648ffe9-8024-42b9-a694-c3572414742d","id":"QR_b648ffe9-8024-42b9-a694-c3572414742d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:48:26][356647186234298][4442 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 09:48:26][356647186234298][4443 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 09:48:26][356647186234298][4443 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:48:29][356647186234298][0 ms][INFO] === Request start === [2025-09-09 09:48:29][356647186234298][1 ms][DEBUG] START check_scloud [2025-09-09 09:48:29][356647186234298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:48:29][356647186234298][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 2868 4971 25043932 240756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:48:29][356647186234298][268 ms][DEBUG] targetPkg: running [2025-09-09 09:48:29][356647186234298][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 09:48:29][356647186234298][269 ms][DEBUG] START check_boot_completed [2025-09-09 09:48:29][356647186234298][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:48:29][356647186234298][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:48:29][356647186234298][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:48:29][356647186234298][362 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 09:48:29][356647186234298][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:48:29][356647186234298][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:48:29][356647186234298][487 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6285\nsuccessfulTxPacketsPerSecond: 0.25355161478319443\nretriedTxPackets: 1290\nretriedTxPacketsPerSecond: 0.0832557541079146\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5878\nsuccessfulRxPacketsPerSecond: 0.21192373772923714\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:48:29][356647186234298][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:48:29][356647186234298][893 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.972/306.972/306.972/0.000 ms\n [2025-09-09 09:48:29][356647186234298][893 ms][DEBUG] check_internet: online [2025-09-09 09:48:29][356647186234298][893 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:48:29][356647186234298][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647186234298\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3739\"}'\'' -e'"" [2025-09-09 09:48:29][356647186234298][894 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:48:29][356647186234298][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647186234298\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3739\"}'\'' -e'"" [2025-09-09 09:48:33][356647186234298][4846 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 09:48:33][356647186234298][4846 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-09 09:48:33][356647186234298][4846 ms][WARN] Detected error: Process with pid 2868 either refused to load frida-agent, or terminated during injectionProcess with pid 2868 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 09:48:33][356647186234298][4846 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 09:48:34][356647186234298][5080 ms][DEBUG] SU: done in 234 ms; outsystem 5393 4971 12679668 176284 ep_poll 0 S system_server\n [2025-09-09 09:48:34][356647186234298][5080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 09:48:34][356647186234298][5221 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 09:48:34][356647186234298][5221 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 09:48:34][356647186234298][5221 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 09:48:34][356647186234298][5361 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 09:48:34][356647186234298][5361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 09:48:34][356647186234298][5549 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 09:48:36][356647186234298][7564 ms][DEBUG] START check_boot_completed [2025-09-09 09:48:36][356647186234298][7564 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:48:36][356647186234298][7611 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 09:48:36][356647186234298][7611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:48:36][356647186234298][7673 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 09:48:36][356647186234298][7673 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:48:39][356647186234298][10688 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 09:48:39][356647186234298][10688 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647186234298\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3739\"}'\'' -e'"" [2025-09-09 09:48:44][356647186234298][15156 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2664cf28-0c7e-4dec-adda-dd5f457fd942","id":"QR_2664cf28-0c7e-4dec-adda-dd5f457fd942","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:48:44][356647186234298][15312 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-09 09:48:44][356647186234298][15312 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-09-09 09:48:44][356647186234298][15312 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:49:03][350957910631966][0 ms][INFO] === Request start === [2025-09-09 09:49:03][350957910631966][1 ms][DEBUG] START check_scloud [2025-09-09 09:49:03][350957910631966][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:49:04][350957910631966][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 4383 4971 23881636 126700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:49:04][350957910631966][287 ms][DEBUG] targetPkg: running [2025-09-09 09:49:04][350957910631966][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 09:49:04][350957910631966][287 ms][DEBUG] START check_boot_completed [2025-09-09 09:49:04][350957910631966][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:49:04][350957910631966][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:49:04][350957910631966][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:49:04][350957910631966][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:49:04][350957910631966][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 09:49:04][350957910631966][365 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:49:04][350957910631966][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957910631966\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7401\"}'\'' -e'"" [2025-09-09 09:49:04][350957910631966][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:49:04][350957910631966][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957910631966\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7401\"}'\'' -e'"" [2025-09-09 09:49:07][350957910631966][3723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec929f52-3357-41b6-8fa0-eaaac785f0d9","id":"QR_ec929f52-3357-41b6-8fa0-eaaac785f0d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:49:07][350957910631966][3880 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-09 09:49:07][350957910631966][3880 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-09 09:49:07][350957910631966][3880 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:49:09][350957910631966][0 ms][INFO] === Request start === [2025-09-09 09:49:09][350957910631966][1 ms][DEBUG] START check_scloud [2025-09-09 09:49:09][350957910631966][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:49:10][350957910631966][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 4383 4971 23935612 137460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:49:10][350957910631966][299 ms][DEBUG] targetPkg: running [2025-09-09 09:49:10][350957910631966][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 09:49:10][350957910631966][299 ms][DEBUG] START check_boot_completed [2025-09-09 09:49:10][350957910631966][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:49:10][350957910631966][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 09:49:10][350957910631966][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:49:10][350957910631966][408 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 09:49:10][350957910631966][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 09:49:10][350957910631966][408 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:49:10][350957910631966][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957910631966\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9023\"}'\'' -e'"" [2025-09-09 09:49:10][350957910631966][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:49:10][350957910631966][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957910631966\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9023\"}'\'' -e'"" [2025-09-09 09:49:15][350957910631966][5251 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64a71645-e896-408e-bcdd-42d271aeb52c","id":"QR_64a71645-e896-408e-bcdd-42d271aeb52c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:49:15][350957910631966][5407 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 09:49:15][350957910631966][5407 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 09:49:15][350957910631966][5407 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:58:03][352098790165805][1 ms][INFO] === Request start === [2025-09-09 09:58:03][352098790165805][1 ms][DEBUG] START check_scloud [2025-09-09 09:58:03][352098790165805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:58:03][352098790165805][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 4383 4971 24075000 150064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:58:03][352098790165805][290 ms][DEBUG] targetPkg: running [2025-09-09 09:58:03][352098790165805][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 09:58:03][352098790165805][290 ms][DEBUG] START check_boot_completed [2025-09-09 09:58:03][352098790165805][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:58:03][352098790165805][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 09:58:03][352098790165805][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:58:03][352098790165805][384 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 09:58:03][352098790165805][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 09:58:03][352098790165805][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:58:04][352098790165805][525 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6450\nsuccessfulTxPacketsPerSecond: 0.04146008602967851\nretriedTxPackets: 1350\nretriedTxPacketsPerSecond: 0.03455007169139876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6009\nsuccessfulRxPacketsPerSecond: 0.020730043014839255\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:58:04][352098790165805][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:58:05][352098790165805][1931 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.906/300.906/300.906/0.000 ms\n [2025-09-09 09:58:05][352098790165805][1931 ms][DEBUG] check_internet: online [2025-09-09 09:58:05][352098790165805][1931 ms][DEBUG] rawBody.length=1150 [2025-09-09 09:58:05][352098790165805][1931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352098790165805\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-09-09 09:58:05][352098790165805][1931 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:58:05][352098790165805][1931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352098790165805\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-09-09 09:58:09][352098790165805][5648 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_952d9fb5-1db4-41d9-a720-dd951db177e5","id":"QR_952d9fb5-1db4-41d9-a720-dd951db177e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:58:09][352098790165805][5805 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 09:58:09][352098790165805][5805 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 09:58:09][352098790165805][5805 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 09:58:11][352098790165805][0 ms][INFO] === Request start === [2025-09-09 09:58:11][352098790165805][1 ms][DEBUG] START check_scloud [2025-09-09 09:58:11][352098790165805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 09:58:12][352098790165805][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 4383 4971 24241292 161024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 09:58:12][352098790165805][313 ms][DEBUG] targetPkg: running [2025-09-09 09:58:12][352098790165805][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 09:58:12][352098790165805][314 ms][DEBUG] START check_boot_completed [2025-09-09 09:58:12][352098790165805][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 09:58:12][352098790165805][359 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 09:58:12][352098790165805][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 09:58:12][352098790165805][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 09:58:12][352098790165805][406 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 09:58:12][352098790165805][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 09:58:12][352098790165805][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6450\nsuccessfulTxPacketsPerSecond: 0.04146008602967851\nretriedTxPackets: 1350\nretriedTxPacketsPerSecond: 0.03455007169139876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6009\nsuccessfulRxPacketsPerSecond: 0.020730043014839255\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 09:58:12][352098790165805][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 09:58:12][352098790165805][843 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.974/222.974/222.974/0.000 ms\n [2025-09-09 09:58:12][352098790165805][843 ms][DEBUG] check_internet: online [2025-09-09 09:58:12][352098790165805][843 ms][DEBUG] rawBody.length=1160 [2025-09-09 09:58:12][352098790165805][843 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352098790165805\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8339\"}'\'' -e'"" [2025-09-09 09:58:12][352098790165805][843 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 09:58:12][352098790165805][843 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352098790165805\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8339\"}'\'' -e'"" [2025-09-09 09:58:17][352098790165805][6029 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acad518c-3f87-47fe-9076-66795c9d7849","id":"QR_acad518c-3f87-47fe-9076-66795c9d7849","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 09:58:17][352098790165805][6185 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-09 09:58:17][352098790165805][6185 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-09 09:58:17][352098790165805][6186 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:00:04][354130547279692][1 ms][INFO] === Request start === [2025-09-09 10:00:04][354130547279692][1 ms][DEBUG] START check_scloud [2025-09-09 10:00:04][354130547279692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:00:04][354130547279692][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 4383 4971 24346828 172300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:00:04][354130547279692][316 ms][DEBUG] targetPkg: running [2025-09-09 10:00:04][354130547279692][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 10:00:04][354130547279692][316 ms][DEBUG] START check_boot_completed [2025-09-09 10:00:04][354130547279692][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:00:04][354130547279692][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:00:04][354130547279692][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:00:04][354130547279692][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:00:04][354130547279692][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:00:04][354130547279692][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:00:04][354130547279692][520 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6450\nsuccessfulTxPacketsPerSecond: 0.04146008602967851\nretriedTxPackets: 1350\nretriedTxPacketsPerSecond: 0.03455007169139876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6009\nsuccessfulRxPacketsPerSecond: 0.020730043014839255\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:00:04][354130547279692][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:00:05][354130547279692][987 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.209/323.209/323.209/0.000 ms\n [2025-09-09 10:00:05][354130547279692][987 ms][DEBUG] check_internet: online [2025-09-09 10:00:05][354130547279692][987 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:00:05][354130547279692][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547279692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7018\"}'\'' -e'"" [2025-09-09 10:00:05][354130547279692][987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:00:05][354130547279692][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547279692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7018\"}'\'' -e'"" [2025-09-09 10:00:09][354130547279692][5595 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1104d8c9-1297-4a17-94f6-e33317d5cbdd","id":"QR_1104d8c9-1297-4a17-94f6-e33317d5cbdd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:00:09][354130547279692][5752 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-09 10:00:09][354130547279692][5752 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-09 10:00:09][354130547279692][5752 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:00:12][354130547279692][0 ms][INFO] === Request start === [2025-09-09 10:00:12][354130547279692][1 ms][DEBUG] START check_scloud [2025-09-09 10:00:12][354130547279692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:00:12][354130547279692][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 4383 4971 24495444 183748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:00:12][354130547279692][295 ms][DEBUG] targetPkg: running [2025-09-09 10:00:12][354130547279692][295 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 10:00:12][354130547279692][295 ms][DEBUG] START check_boot_completed [2025-09-09 10:00:12][354130547279692][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:00:12][354130547279692][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:00:12][354130547279692][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:00:12][354130547279692][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:00:12][354130547279692][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:00:12][354130547279692][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:00:12][354130547279692][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6450\nsuccessfulTxPacketsPerSecond: 0.04146008602967851\nretriedTxPackets: 1350\nretriedTxPacketsPerSecond: 0.03455007169139876\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6009\nsuccessfulRxPacketsPerSecond: 0.020730043014839255\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:00:12][354130547279692][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:00:12][354130547279692][873 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.162/252.162/252.162/0.000 ms\n [2025-09-09 10:00:12][354130547279692][873 ms][DEBUG] check_internet: online [2025-09-09 10:00:12][354130547279692][873 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:00:12][354130547279692][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547279692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6808\"}'\'' -e'"" [2025-09-09 10:00:12][354130547279692][873 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:00:12][354130547279692][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547279692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6808\"}'\'' -e'"" [2025-09-09 10:00:18][354130547279692][5919 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49591108-1bf3-4dea-a553-ec893b0e261f","id":"QR_49591108-1bf3-4dea-a553-ec893b0e261f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:00:18][354130547279692][6075 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 10:00:18][354130547279692][6075 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 10:00:18][354130547279692][6075 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:04:03][354484227303946][1 ms][INFO] === Request start === [2025-09-09 10:04:03][354484227303946][1 ms][DEBUG] START check_scloud [2025-09-09 10:04:03][354484227303946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:04:04][354484227303946][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 4383 4971 24648020 194168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:04:04][354484227303946][297 ms][DEBUG] targetPkg: running [2025-09-09 10:04:04][354484227303946][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 10:04:04][354484227303946][297 ms][DEBUG] START check_boot_completed [2025-09-09 10:04:04][354484227303946][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:04:04][354484227303946][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:04:04][354484227303946][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:04:04][354484227303946][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:04:04][354484227303946][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:04:04][354484227303946][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:04:04][354484227303946][501 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6741\nsuccessfulTxPacketsPerSecond: 0.9614526856247956\nretriedTxPackets: 1407\nretriedTxPacketsPerSecond: 0.18832578378217646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6270\nsuccessfulRxPacketsPerSecond: 0.862333852055229\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:04:04][354484227303946][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:04:05][354484227303946][2141 ms][DEBUG] SU: done in 1640 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.030/301.030/301.030/0.000 ms\n [2025-09-09 10:04:05][354484227303946][2141 ms][DEBUG] check_internet: online [2025-09-09 10:04:05][354484227303946][2141 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:04:05][354484227303946][2141 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484227303946\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5764\"}'\'' -e'"" [2025-09-09 10:04:05][354484227303946][2141 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:04:05][354484227303946][2141 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484227303946\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5764\"}'\'' -e'"" [2025-09-09 10:04:09][354484227303946][5859 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f297790d-0049-4bab-ad72-a22fa560485d","id":"QR_f297790d-0049-4bab-ad72-a22fa560485d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:04:09][354484227303946][6015 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 10:04:09][354484227303946][6015 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 10:04:09][354484227303946][6015 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:04:12][354484227303946][0 ms][INFO] === Request start === [2025-09-09 10:04:12][354484227303946][1 ms][DEBUG] START check_scloud [2025-09-09 10:04:12][354484227303946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:04:13][354484227303946][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 4383 4971 24827356 205924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:04:13][354484227303946][300 ms][DEBUG] targetPkg: running [2025-09-09 10:04:13][354484227303946][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 10:04:13][354484227303946][300 ms][DEBUG] START check_boot_completed [2025-09-09 10:04:13][354484227303946][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:04:13][354484227303946][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:04:13][354484227303946][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:04:13][354484227303946][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:04:13][354484227303946][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:04:13][354484227303946][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:04:13][354484227303946][504 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6741\nsuccessfulTxPacketsPerSecond: 0.9614526856247956\nretriedTxPackets: 1407\nretriedTxPacketsPerSecond: 0.18832578378217646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6270\nsuccessfulRxPacketsPerSecond: 0.862333852055229\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:04:13][354484227303946][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:04:13][354484227303946][909 ms][DEBUG] SU: done in 405 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.321/270.321/270.321/0.000 ms\n [2025-09-09 10:04:13][354484227303946][909 ms][DEBUG] check_internet: online [2025-09-09 10:04:13][354484227303946][909 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:04:13][354484227303946][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484227303946\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1108\"}'\'' -e'"" [2025-09-09 10:04:13][354484227303946][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:04:13][354484227303946][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484227303946\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1108\"}'\'' -e'"" [2025-09-09 10:04:18][354484227303946][6189 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2e48f4e-969d-43fb-8135-3732455575fb","id":"QR_f2e48f4e-969d-43fb-8135-3732455575fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:04:19][354484227303946][6345 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-09 10:04:19][354484227303946][6345 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-09 10:04:19][354484227303946][6345 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:04:23][352549936185214][0 ms][INFO] === Request start === [2025-09-09 10:04:23][352549936185214][1 ms][DEBUG] START check_scloud [2025-09-09 10:04:23][352549936185214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:04:23][352549936185214][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4383 4971 24994408 216344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:04:23][352549936185214][310 ms][DEBUG] targetPkg: running [2025-09-09 10:04:23][352549936185214][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 10:04:23][352549936185214][310 ms][DEBUG] START check_boot_completed [2025-09-09 10:04:23][352549936185214][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:04:23][352549936185214][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:04:23][352549936185214][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:04:23][352549936185214][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:04:23][352549936185214][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:04:23][352549936185214][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:04:24][352549936185214][560 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6741\nsuccessfulTxPacketsPerSecond: 0.9614526856247956\nretriedTxPackets: 1407\nretriedTxPacketsPerSecond: 0.18832578378217646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6270\nsuccessfulRxPacketsPerSecond: 0.862333852055229\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:04:24][352549936185214][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:04:24][352549936185214][919 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.067/257.067/257.067/0.000 ms\n [2025-09-09 10:04:24][352549936185214][919 ms][DEBUG] check_internet: online [2025-09-09 10:04:24][352549936185214][919 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:04:24][352549936185214][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936185214\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-09-09 10:04:24][352549936185214][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:04:24][352549936185214][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936185214\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-09-09 10:04:27][352549936185214][4168 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b2e4115-277c-47d0-88c9-f695c2ba5d9e","id":"QR_3b2e4115-277c-47d0-88c9-f695c2ba5d9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:04:27][352549936185214][4324 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=3343 [2025-09-09 10:04:27][352549936185214][4324 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-09 10:04:27][352549936185214][4324 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:04:30][352549936185214][0 ms][INFO] === Request start === [2025-09-09 10:04:30][352549936185214][1 ms][DEBUG] START check_scloud [2025-09-09 10:04:30][352549936185214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:04:30][352549936185214][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 4383 4971 25097868 228004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:04:30][352549936185214][322 ms][DEBUG] targetPkg: running [2025-09-09 10:04:30][352549936185214][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 10:04:30][352549936185214][322 ms][DEBUG] START check_boot_completed [2025-09-09 10:04:30][352549936185214][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:04:30][352549936185214][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:04:30][352549936185214][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:04:30][352549936185214][462 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 10:04:30][352549936185214][462 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 10:04:30][352549936185214][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:04:30][352549936185214][572 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6741\nsuccessfulTxPacketsPerSecond: 0.9614526856247956\nretriedTxPackets: 1407\nretriedTxPacketsPerSecond: 0.18832578378217646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6270\nsuccessfulRxPacketsPerSecond: 0.862333852055229\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:04:30][352549936185214][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:04:30][352549936185214][900 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.480/224.480/224.480/0.000 ms\n [2025-09-09 10:04:30][352549936185214][900 ms][DEBUG] check_internet: online [2025-09-09 10:04:30][352549936185214][900 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:04:30][352549936185214][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936185214\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5268\"}'\'' -e'"" [2025-09-09 10:04:30][352549936185214][900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:04:30][352549936185214][900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936185214\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5268\"}'\'' -e'"" [2025-09-09 10:04:35][352549936185214][5601 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_855dc310-9071-42c9-ad4a-2a0df076d4a7","id":"QR_855dc310-9071-42c9-ad4a-2a0df076d4a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:04:35][352549936185214][5758 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-09 10:04:35][352549936185214][5758 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-09 10:04:35][352549936185214][5758 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:05:03][350481050046760][0 ms][INFO] === Request start === [2025-09-09 10:05:03][350481050046760][1 ms][DEBUG] START check_scloud [2025-09-09 10:05:03][350481050046760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:05:03][350481050046760][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4383 4971 25215656 234916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:05:03][350481050046760][310 ms][DEBUG] targetPkg: running [2025-09-09 10:05:03][350481050046760][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 10:05:03][350481050046760][310 ms][DEBUG] START check_boot_completed [2025-09-09 10:05:03][350481050046760][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:05:03][350481050046760][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:05:03][350481050046760][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:05:03][350481050046760][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:05:03][350481050046760][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:05:03][350481050046760][388 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:05:03][350481050046760][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481050046760\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-09-09 10:05:03][350481050046760][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:05:03][350481050046760][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481050046760\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-09-09 10:05:07][350481050046760][4168 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 10:05:07][350481050046760][4168 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-09 10:05:07][350481050046760][4169 ms][WARN] Detected error: Process with pid 4383 either refused to load frida-agent, or terminated during injectionProcess with pid 4383 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 10:05:07][350481050046760][4169 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:05:07][350481050046760][4480 ms][DEBUG] SU: done in 312 ms; outsystem 5393 4971 12683816 176408 ep_poll 0 S system_server\n [2025-09-09 10:05:07][350481050046760][4480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 10:05:07][350481050046760][4637 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 10:05:07][350481050046760][4637 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 10:05:07][350481050046760][4637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:05:08][350481050046760][4762 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 10:05:08][350481050046760][4762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:05:08][350481050046760][4934 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:05:10][350481050046760][6948 ms][DEBUG] START check_boot_completed [2025-09-09 10:05:10][350481050046760][6949 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:05:10][350481050046760][6996 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:05:10][350481050046760][6996 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:05:10][350481050046760][7058 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:05:10][350481050046760][7058 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:05:13][350481050046760][10073 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 10:05:13][350481050046760][10073 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481050046760\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-09-09 10:05:17][350481050046760][14603 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c221cd2a-be3d-46ed-b0dc-1ac880aa4568","id":"QR_c221cd2a-be3d-46ed-b0dc-1ac880aa4568","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:05:18][350481050046760][14759 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 10:05:18][350481050046760][14759 ms][DEBUG] END runCmdUntilRes#2 in 4686 ms [2025-09-09 10:05:18][350481050046760][14759 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:05:20][350481050046760][0 ms][INFO] === Request start === [2025-09-09 10:05:20][350481050046760][1 ms][DEBUG] START check_scloud [2025-09-09 10:05:20][350481050046760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:05:20][350481050046760][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 7525 4971 23792704 124212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:05:20][350481050046760][256 ms][DEBUG] targetPkg: running [2025-09-09 10:05:20][350481050046760][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 10:05:20][350481050046760][256 ms][DEBUG] START check_boot_completed [2025-09-09 10:05:20][350481050046760][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:05:20][350481050046760][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:05:20][350481050046760][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:05:20][350481050046760][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:05:20][350481050046760][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:05:20][350481050046760][335 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:05:20][350481050046760][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481050046760\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1418\"}'\'' -e'"" [2025-09-09 10:05:20][350481050046760][335 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:05:20][350481050046760][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481050046760\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1418\"}'\'' -e'"" [2025-09-09 10:05:26][350481050046760][5786 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_966c98d0-d0b4-4155-a0d3-f95052f80de7","id":"QR_966c98d0-d0b4-4155-a0d3-f95052f80de7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:05:26][350481050046760][5943 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-09 10:05:26][350481050046760][5943 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 10:05:26][350481050046760][5943 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:05:30][352288963595025][0 ms][INFO] === Request start === [2025-09-09 10:05:30][352288963595025][1 ms][DEBUG] START check_scloud [2025-09-09 10:05:30][352288963595025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:05:30][352288963595025][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 7525 4971 23994164 138012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:05:30][352288963595025][253 ms][DEBUG] targetPkg: running [2025-09-09 10:05:30][352288963595025][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-09 10:05:30][352288963595025][253 ms][DEBUG] START check_boot_completed [2025-09-09 10:05:30][352288963595025][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:05:30][352288963595025][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:05:30][352288963595025][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:05:30][352288963595025][348 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:05:30][352288963595025][348 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 10:05:30][352288963595025][348 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:05:30][352288963595025][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963595025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8686\"}'\'' -e'"" [2025-09-09 10:05:30][352288963595025][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:05:30][352288963595025][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963595025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8686\"}'\'' -e'"" [2025-09-09 10:05:34][352288963595025][3752 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9f69b46-ec7a-4d07-8bd3-d4df93782f34","id":"QR_b9f69b46-ec7a-4d07-8bd3-d4df93782f34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:05:34][352288963595025][3908 ms][DEBUG] proc_open done in 3560 ms; code=255; res.len=3343 [2025-09-09 10:05:34][352288963595025][3908 ms][DEBUG] END runCmdUntilRes#1 in 3560 ms [2025-09-09 10:05:34][352288963595025][3908 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:05:36][352288963595025][0 ms][INFO] === Request start === [2025-09-09 10:05:36][352288963595025][1 ms][DEBUG] START check_scloud [2025-09-09 10:05:36][352288963595025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:05:37][352288963595025][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 7525 4971 24155096 149672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:05:37][352288963595025][317 ms][DEBUG] targetPkg: running [2025-09-09 10:05:37][352288963595025][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 10:05:37][352288963595025][317 ms][DEBUG] START check_boot_completed [2025-09-09 10:05:37][352288963595025][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:05:37][352288963595025][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:05:37][352288963595025][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:05:37][352288963595025][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:05:37][352288963595025][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:05:37][352288963595025][426 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:05:37][352288963595025][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963595025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9425\"}'\'' -e'"" [2025-09-09 10:05:37][352288963595025][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:05:37][352288963595025][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963595025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9425\"}'\'' -e'"" [2025-09-09 10:05:41][352288963595025][5096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ac60cdf-2c7f-4303-ad62-5ae137a3121d","id":"QR_6ac60cdf-2c7f-4303-ad62-5ae137a3121d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:05:41][352288963595025][5253 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-09 10:05:41][352288963595025][5253 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-09 10:05:41][352288963595025][5253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:07:04][352677532126652][1 ms][INFO] === Request start === [2025-09-09 10:07:04][352677532126652][1 ms][DEBUG] START check_scloud [2025-09-09 10:07:04][352677532126652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:07:04][352677532126652][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 7525 4971 24192708 160480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:07:04][352677532126652][312 ms][DEBUG] targetPkg: running [2025-09-09 10:07:04][352677532126652][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 10:07:04][352677532126652][313 ms][DEBUG] START check_boot_completed [2025-09-09 10:07:04][352677532126652][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:07:04][352677532126652][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:07:04][352677532126652][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:07:04][352677532126652][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:07:04][352677532126652][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:07:04][352677532126652][406 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:07:04][352677532126652][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532126652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-09-09 10:07:04][352677532126652][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:07:04][352677532126652][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532126652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-09-09 10:07:09][352677532126652][4967 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b68c5a26-b30b-435c-8293-ee0b81306f05","id":"QR_b68c5a26-b30b-435c-8293-ee0b81306f05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:07:09][352677532126652][5124 ms][DEBUG] proc_open done in 4718 ms; code=255; res.len=3343 [2025-09-09 10:07:09][352677532126652][5124 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-09 10:07:09][352677532126652][5124 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:07:11][352677532126652][0 ms][INFO] === Request start === [2025-09-09 10:07:11][352677532126652][1 ms][DEBUG] START check_scloud [2025-09-09 10:07:11][352677532126652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:07:12][352677532126652][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 7525 4971 24297280 171476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:07:12][352677532126652][319 ms][DEBUG] targetPkg: running [2025-09-09 10:07:12][352677532126652][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 10:07:12][352677532126652][319 ms][DEBUG] START check_boot_completed [2025-09-09 10:07:12][352677532126652][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:07:12][352677532126652][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:07:12][352677532126652][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:07:12][352677532126652][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:07:12][352677532126652][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:07:12][352677532126652][412 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:07:12][352677532126652][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532126652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5765\"}'\'' -e'"" [2025-09-09 10:07:12][352677532126652][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:07:12][352677532126652][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532126652\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5765\"}'\'' -e'"" [2025-09-09 10:07:17][352677532126652][5567 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ac57501-6a08-4a00-bf32-9438c856ea57","id":"QR_2ac57501-6a08-4a00-bf32-9438c856ea57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:07:17][352677532126652][5723 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 10:07:17][352677532126652][5723 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 10:07:17][352677532126652][5723 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:08:03][356414812444274][0 ms][INFO] === Request start === [2025-09-09 10:08:03][356414812444274][1 ms][DEBUG] START check_scloud [2025-09-09 10:08:03][356414812444274][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:08:04][356414812444274][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 7525 4971 24396736 183228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:08:04][356414812444274][298 ms][DEBUG] targetPkg: running [2025-09-09 10:08:04][356414812444274][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 10:08:04][356414812444274][298 ms][DEBUG] START check_boot_completed [2025-09-09 10:08:04][356414812444274][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:08:04][356414812444274][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:08:04][356414812444274][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:08:04][356414812444274][392 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:08:04][356414812444274][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:08:04][356414812444274][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:08:04][356414812444274][532 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7013\nsuccessfulTxPacketsPerSecond: 0.6191111885000098\nretriedTxPackets: 1501\nretriedTxPacketsPerSecond: 0.2031458587265657\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6494\nsuccessfulRxPacketsPerSecond: 0.5127014529765707\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:08:04][356414812444274][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:08:04][356414812444274][969 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.096/310.096/310.096/0.000 ms\n [2025-09-09 10:08:04][356414812444274][969 ms][DEBUG] check_internet: online [2025-09-09 10:08:04][356414812444274][969 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:08:04][356414812444274][969 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812444274\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7067\"}'\'' -e'"" [2025-09-09 10:08:04][356414812444274][969 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:08:04][356414812444274][969 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812444274\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7067\"}'\'' -e'"" [2025-09-09 10:08:10][356414812444274][6437 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f3c5310-779b-4658-9544-df0beffdfb3f","id":"QR_8f3c5310-779b-4658-9544-df0beffdfb3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:08:10][356414812444274][6593 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-09 10:08:10][356414812444274][6593 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-09-09 10:08:10][356414812444274][6593 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:08:12][356414812444274][0 ms][INFO] === Request start === [2025-09-09 10:08:12][356414812444274][1 ms][DEBUG] START check_scloud [2025-09-09 10:08:12][356414812444274][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:08:13][356414812444274][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 7525 4971 24573960 194120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:08:13][356414812444274][262 ms][DEBUG] targetPkg: running [2025-09-09 10:08:13][356414812444274][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 10:08:13][356414812444274][262 ms][DEBUG] START check_boot_completed [2025-09-09 10:08:13][356414812444274][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:08:13][356414812444274][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:08:13][356414812444274][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:08:13][356414812444274][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:08:13][356414812444274][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:08:13][356414812444274][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:08:13][356414812444274][496 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30458 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7013\nsuccessfulTxPacketsPerSecond: 0.6191111885000098\nretriedTxPackets: 1501\nretriedTxPacketsPerSecond: 0.2031458587265657\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6494\nsuccessfulRxPacketsPerSecond: 0.5127014529765707\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:08:13][356414812444274][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:08:13][356414812444274][996 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=372 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 372.586/372.586/372.586/0.000 ms\n [2025-09-09 10:08:13][356414812444274][996 ms][DEBUG] check_internet: online [2025-09-09 10:08:13][356414812444274][996 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:08:13][356414812444274][996 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812444274\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2978\"}'\'' -e'"" [2025-09-09 10:08:13][356414812444274][996 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:08:13][356414812444274][996 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812444274\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2978\"}'\'' -e'"" [2025-09-09 10:08:19][356414812444274][6166 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67f02157-f139-4e3b-b584-625b00d95d1d","id":"QR_67f02157-f139-4e3b-b584-625b00d95d1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:08:19][356414812444274][6322 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-09 10:08:19][356414812444274][6323 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-09 10:08:19][356414812444274][6323 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:09:03][358080745888586][0 ms][INFO] === Request start === [2025-09-09 10:09:03][358080745888586][1 ms][DEBUG] START check_scloud [2025-09-09 10:09:03][358080745888586][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:09:04][358080745888586][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 7525 4971 24718408 206472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:09:04][358080745888586][316 ms][DEBUG] targetPkg: running [2025-09-09 10:09:04][358080745888586][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 10:09:04][358080745888586][316 ms][DEBUG] START check_boot_completed [2025-09-09 10:09:04][358080745888586][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:09:04][358080745888586][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:09:04][358080745888586][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:09:04][358080745888586][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:09:04][358080745888586][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:09:04][358080745888586][425 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:09:04][358080745888586][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745888586\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8367\"}'\'' -e'"" [2025-09-09 10:09:04][358080745888586][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:09:04][358080745888586][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745888586\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8367\"}'\'' -e'"" [2025-09-09 10:09:07][358080745888586][3471 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 10:09:07][358080745888586][3628 ms][DEBUG] proc_open done in 3202 ms; code=255; res.len=115 [2025-09-09 10:09:07][358080745888586][3628 ms][DEBUG] END runCmdUntilRes#1 in 3202 ms [2025-09-09 10:09:07][358080745888586][3628 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 10:09:07][][1 ms][INFO] === Request start === [2025-09-09 10:09:07][][1 ms][DEBUG] START check_scloud [2025-09-09 10:09:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:09:08][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 7525 4971 24864976 216848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:09:08][][308 ms][DEBUG] targetPkg: running [2025-09-09 10:09:08][][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 10:09:08][][308 ms][DEBUG] START check_boot_completed [2025-09-09 10:09:08][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:09:08][][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:09:08][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:09:08][][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:09:08][][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:09:08][][402 ms][DEBUG] rawBody.length=1131 [2025-09-09 10:09:08][][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W905ZZ4E\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6836\"}'\'' -e'"" [2025-09-09 10:09:08][][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:09:08][][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W905ZZ4E\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6836\"}'\'' -e'"" [2025-09-09 10:09:13][][5213 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 10:09:13][][5369 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=115 [2025-09-09 10:09:13][][5369 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-09 10:09:13][][5369 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 10:09:14][358080745888586][0 ms][INFO] === Request start === [2025-09-09 10:09:14][358080745888586][0 ms][DEBUG] START check_scloud [2025-09-09 10:09:14][358080745888586][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:09:15][358080745888586][292 ms][DEBUG] SU: done in 292 ms; outu0_a118 7525 4971 24988824 228492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:09:15][358080745888586][292 ms][DEBUG] targetPkg: running [2025-09-09 10:09:15][358080745888586][292 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 10:09:15][358080745888586][292 ms][DEBUG] START check_boot_completed [2025-09-09 10:09:15][358080745888586][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:09:15][358080745888586][337 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 10:09:15][358080745888586][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:09:15][358080745888586][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:09:15][358080745888586][384 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 10:09:15][358080745888586][384 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:09:15][358080745888586][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745888586\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5823\"}'\'' -e'"" [2025-09-09 10:09:15][358080745888586][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:09:15][358080745888586][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745888586\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5823\"}'\'' -e'"" [2025-09-09 10:09:20][358080745888586][5445 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_225175fa-2bef-4995-a6af-13912c19ffec","id":"QR_225175fa-2bef-4995-a6af-13912c19ffec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:09:20][358080745888586][5602 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 10:09:20][358080745888586][5602 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-09 10:09:20][358080745888586][5602 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:11:03][359142450714461][0 ms][INFO] === Request start === [2025-09-09 10:11:03][359142450714461][1 ms][DEBUG] START check_scloud [2025-09-09 10:11:03][359142450714461][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:11:03][359142450714461][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 7525 4971 25095284 239720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:11:03][359142450714461][320 ms][DEBUG] targetPkg: running [2025-09-09 10:11:03][359142450714461][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 10:11:03][359142450714461][320 ms][DEBUG] START check_boot_completed [2025-09-09 10:11:03][359142450714461][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:11:03][359142450714461][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:11:03][359142450714461][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:11:03][359142450714461][399 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:11:03][359142450714461][399 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 10:11:03][359142450714461][399 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:11:03][359142450714461][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142450714461\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6243\"}'\'' -e'"" [2025-09-09 10:11:03][359142450714461][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:11:03][359142450714461][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142450714461\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6243\"}'\'' -e'"" [2025-09-09 10:11:11][359142450714461][8224 ms][DEBUG] proc_open done in 7825 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 10:11:11][359142450714461][8224 ms][DEBUG] END runCmdUntilRes#1 in 7825 ms [2025-09-09 10:11:11][359142450714461][8224 ms][WARN] Detected error: Process with pid 7525 either refused to load frida-agent, or terminated during injectionProcess with pid 7525 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 10:11:11][359142450714461][8224 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:11:12][359142450714461][8740 ms][DEBUG] SU: done in 515 ms; out [2025-09-09 10:11:12][359142450714461][8740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 10:11:12][359142450714461][9209 ms][DEBUG] SU: done in 469 ms; out [2025-09-09 10:11:12][359142450714461][9209 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 10:11:12][359142450714461][9209 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:11:12][359142450714461][9427 ms][DEBUG] SU: done in 219 ms; out [2025-09-09 10:11:12][359142450714461][9427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:11:12][359142450714461][9630 ms][DEBUG] SU: done in 203 ms; out [2025-09-09 10:11:14][359142450714461][11645 ms][DEBUG] START check_boot_completed [2025-09-09 10:11:14][359142450714461][11645 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:11:15][359142450714461][11692 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:11:15][359142450714461][11692 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:11:15][359142450714461][11755 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:11:15][359142450714461][11755 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 10:11:18][359142450714461][14770 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 10:11:18][359142450714461][14770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142450714461\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6243\"}'\'' -e'"" [2025-09-09 10:11:19][359142450714461][16223 ms][DEBUG] proc_open done in 1453 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 10:11:19][359142450714461][16223 ms][DEBUG] END runCmdUntilRes#2 in 1453 ms [2025-09-09 10:11:19][359142450714461][16223 ms][WARN] Detected error 2; Reboot the device [2025-09-09 10:11:19][359142450714461][16223 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:11:19][359142450714461][16473 ms][DEBUG] SU: done in 250 ms; outsystem 9869 9526 7470932 143064 0 0 R system_server\n [2025-09-09 10:11:19][359142450714461][16473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 10:11:20][359142450714461][17113 ms][DEBUG] SU: done in 640 ms; out [2025-09-09 10:12:03][359142450714461][1 ms][INFO] === Request start === [2025-09-09 10:12:03][359142450714461][1 ms][DEBUG] START check_scloud [2025-09-09 10:12:03][359142450714461][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:12:03][359142450714461][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-09 10:12:03][359142450714461][43 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 10:12:03][359142450714461][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 10:12:03][359142450714461][74 ms][WARN] check_devices: no device [2025-09-09 10:12:03][359142450714461][74 ms][WARN] check_devices: no device [2025-09-09 10:12:03][359142450714461][74 ms][DEBUG] END check_scloud in 73 ms [2025-09-09 10:13:03][359142450714461][0 ms][INFO] === Request start === [2025-09-09 10:13:03][359142450714461][0 ms][DEBUG] START check_scloud [2025-09-09 10:13:03][359142450714461][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:13:03][359142450714461][401 ms][DEBUG] SU: done in 400 ms; out [2025-09-09 10:13:03][359142450714461][401 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 10:13:03][359142450714461][447 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 10:13:03][359142450714461][447 ms][DEBUG] check_devices: device found [2025-09-09 10:13:03][359142450714461][447 ms][WARN] targetPkg: not running, restarting [2025-09-09 10:13:03][359142450714461][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:13:03][359142450714461][573 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 10:13:03][359142450714461][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:13:04][359142450714461][776 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:13:06][359142450714461][2790 ms][DEBUG] END check_scloud in 2790 ms [2025-09-09 10:13:06][359142450714461][2791 ms][DEBUG] START check_boot_completed [2025-09-09 10:13:06][359142450714461][2791 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:13:06][359142450714461][2838 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:13:06][359142450714461][2838 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:13:06][359142450714461][2916 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 10:13:06][359142450714461][2916 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 10:13:06][359142450714461][2916 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:13:06][359142450714461][2916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142450714461\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1659\"}'\'' -e'"" [2025-09-09 10:13:06][359142450714461][2916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:13:06][359142450714461][2916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142450714461\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1659\"}'\'' -e'"" [2025-09-09 10:13:13][359142450714461][9867 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8563f520-8ce0-4409-8f9b-70c8ef5d6e56","id":"QR_8563f520-8ce0-4409-8f9b-70c8ef5d6e56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:13:13][359142450714461][10023 ms][DEBUG] proc_open done in 7108 ms; code=255; res.len=3343 [2025-09-09 10:13:13][359142450714461][10023 ms][DEBUG] END runCmdUntilRes#1 in 7108 ms [2025-09-09 10:13:13][359142450714461][10023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:13:15][359142450714461][0 ms][INFO] === Request start === [2025-09-09 10:13:15][359142450714461][1 ms][DEBUG] START check_scloud [2025-09-09 10:13:15][359142450714461][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:13:16][359142450714461][364 ms][DEBUG] SU: done in 363 ms; outu0_a118 11561 5016 23466020 111160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:13:16][359142450714461][364 ms][DEBUG] targetPkg: running [2025-09-09 10:13:16][359142450714461][364 ms][DEBUG] END check_scloud in 364 ms [2025-09-09 10:13:16][359142450714461][364 ms][DEBUG] START check_boot_completed [2025-09-09 10:13:16][359142450714461][364 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:13:16][359142450714461][411 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:13:16][359142450714461][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:13:16][359142450714461][474 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:13:16][359142450714461][474 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:13:16][359142450714461][474 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:13:16][359142450714461][474 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142450714461\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5940\"}'\'' -e'"" [2025-09-09 10:13:16][359142450714461][474 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:13:16][359142450714461][474 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142450714461\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5940\"}'\'' -e'"" [2025-09-09 10:13:21][359142450714461][6269 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62c8441e-a857-4e8d-a1b2-25bb40210afb","id":"QR_62c8441e-a857-4e8d-a1b2-25bb40210afb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:13:22][359142450714461][6425 ms][DEBUG] proc_open done in 5951 ms; code=255; res.len=3343 [2025-09-09 10:13:22][359142450714461][6425 ms][DEBUG] END runCmdUntilRes#1 in 5951 ms [2025-09-09 10:13:22][359142450714461][6425 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:19:03][354772303091959][1 ms][INFO] === Request start === [2025-09-09 10:19:03][354772303091959][1 ms][DEBUG] START check_scloud [2025-09-09 10:19:03][354772303091959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:19:04][354772303091959][321 ms][DEBUG] SU: done in 319 ms; outu0_a118 11561 5016 23506640 74420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:19:04][354772303091959][321 ms][DEBUG] targetPkg: running [2025-09-09 10:19:04][354772303091959][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 10:19:04][354772303091959][321 ms][DEBUG] START check_boot_completed [2025-09-09 10:19:04][354772303091959][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:19:04][354772303091959][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:19:04][354772303091959][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:19:04][354772303091959][415 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:19:04][354772303091959][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:19:04][354772303091959][415 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:19:04][354772303091959][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772303091959\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3023\"}'\'' -e'"" [2025-09-09 10:19:04][354772303091959][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:19:04][354772303091959][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772303091959\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3023\"}'\'' -e'"" [2025-09-09 10:19:09][354772303091959][5882 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_743ae070-294c-42b4-abf8-3b72fddf7d7d","id":"QR_743ae070-294c-42b4-abf8-3b72fddf7d7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:19:09][354772303091959][6038 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-09 10:19:09][354772303091959][6038 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-09 10:19:09][354772303091959][6038 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:19:12][354772303091959][0 ms][INFO] === Request start === [2025-09-09 10:19:12][354772303091959][1 ms][DEBUG] START check_scloud [2025-09-09 10:19:12][354772303091959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:19:12][354772303091959][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 11561 5016 23632728 86896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:19:12][354772303091959][340 ms][DEBUG] targetPkg: running [2025-09-09 10:19:12][354772303091959][340 ms][DEBUG] END check_scloud in 340 ms [2025-09-09 10:19:12][354772303091959][340 ms][DEBUG] START check_boot_completed [2025-09-09 10:19:12][354772303091959][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:19:12][354772303091959][387 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:19:12][354772303091959][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:19:12][354772303091959][449 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:19:12][354772303091959][450 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:19:12][354772303091959][450 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:19:12][354772303091959][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772303091959\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5739\"}'\'' -e'"" [2025-09-09 10:19:12][354772303091959][450 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:19:12][354772303091959][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772303091959\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5739\"}'\'' -e'"" [2025-09-09 10:19:17][354772303091959][5339 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8d0ac5c-a201-40ec-acd3-00bcefdda988","id":"QR_e8d0ac5c-a201-40ec-acd3-00bcefdda988","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:19:17][354772303091959][5495 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-09 10:19:17][354772303091959][5495 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-09 10:19:17][354772303091959][5495 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:21:03][351978521713125][0 ms][INFO] === Request start === [2025-09-09 10:21:03][351978521713125][1 ms][DEBUG] START check_scloud [2025-09-09 10:21:03][351978521713125][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:21:03][351978521713125][331 ms][DEBUG] SU: done in 331 ms; outu0_a118 11561 5016 23738264 103800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:21:03][351978521713125][332 ms][DEBUG] targetPkg: running [2025-09-09 10:21:03][351978521713125][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-09 10:21:03][351978521713125][332 ms][DEBUG] START check_boot_completed [2025-09-09 10:21:03][351978521713125][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:21:03][351978521713125][378 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:21:03][351978521713125][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:21:04][351978521713125][427 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 10:21:04][351978521713125][427 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 10:21:04][351978521713125][427 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:21:04][351978521713125][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521713125\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1453\"}'\'' -e'"" [2025-09-09 10:21:04][351978521713125][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:21:04][351978521713125][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521713125\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1453\"}'\'' -e'"" [2025-09-09 10:21:08][351978521713125][4924 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6bdca41-9d03-4ff7-ac4d-868b250dc80b","id":"QR_c6bdca41-9d03-4ff7-ac4d-868b250dc80b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:21:08][351978521713125][5080 ms][DEBUG] proc_open done in 4653 ms; code=255; res.len=3343 [2025-09-09 10:21:08][351978521713125][5080 ms][DEBUG] END runCmdUntilRes#1 in 4653 ms [2025-09-09 10:21:08][351978521713125][5080 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:21:10][351978521713125][1 ms][INFO] === Request start === [2025-09-09 10:21:10][351978521713125][1 ms][DEBUG] START check_scloud [2025-09-09 10:21:10][351978521713125][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:21:11][351978521713125][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 11561 5016 23915360 114680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:21:11][351978521713125][333 ms][DEBUG] targetPkg: running [2025-09-09 10:21:11][351978521713125][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-09 10:21:11][351978521713125][333 ms][DEBUG] START check_boot_completed [2025-09-09 10:21:11][351978521713125][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:21:11][351978521713125][380 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:21:11][351978521713125][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:21:11][351978521713125][442 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:21:11][351978521713125][442 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:21:11][351978521713125][442 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:21:11][351978521713125][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521713125\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2725\"}'\'' -e'"" [2025-09-09 10:21:11][351978521713125][443 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:21:11][351978521713125][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521713125\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2725\"}'\'' -e'"" [2025-09-09 10:21:16][351978521713125][5456 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96f3a646-8844-421f-97bc-5e22f941bedf","id":"QR_96f3a646-8844-421f-97bc-5e22f941bedf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:21:16][351978521713125][5613 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-09 10:21:16][351978521713125][5613 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-09 10:21:16][351978521713125][5613 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:26:04][353722791226402][1 ms][INFO] === Request start === [2025-09-09 10:26:04][353722791226402][1 ms][DEBUG] START check_scloud [2025-09-09 10:26:04][353722791226402][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:26:05][353722791226402][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 11561 5016 24027168 126976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:26:05][353722791226402][303 ms][DEBUG] targetPkg: running [2025-09-09 10:26:05][353722791226402][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 10:26:05][353722791226402][303 ms][DEBUG] START check_boot_completed [2025-09-09 10:26:05][353722791226402][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:26:05][353722791226402][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:26:05][353722791226402][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:26:05][353722791226402][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:26:05][353722791226402][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:26:05][353722791226402][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:26:05][353722791226402][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1085\nsuccessfulTxPacketsPerSecond: 0.6641230752883124\nretriedTxPackets: 179\nretriedTxPacketsPerSecond: 0.17599261495140278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1091\nsuccessfulRxPacketsPerSecond: 0.5744664601243903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:26:05][353722791226402][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:26:07][353722791226402][2099 ms][DEBUG] SU: done in 1593 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.387/299.387/299.387/0.000 ms\n [2025-09-09 10:26:07][353722791226402][2099 ms][DEBUG] check_internet: online [2025-09-09 10:26:07][353722791226402][2099 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:26:07][353722791226402][2099 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722791226402\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW60BZ5FY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5061\"}'\'' -e'"" [2025-09-09 10:26:07][353722791226402][2099 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:26:07][353722791226402][2099 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722791226402\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW60BZ5FY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5061\"}'\'' -e'"" [2025-09-09 10:26:10][353722791226402][5848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76ff96dc-5495-44dd-bf46-84a585c3324b","id":"QR_76ff96dc-5495-44dd-bf46-84a585c3324b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:26:10][353722791226402][6005 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-09 10:26:10][353722791226402][6005 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-09 10:26:10][353722791226402][6005 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:26:13][352248239538142][0 ms][INFO] === Request start === [2025-09-09 10:26:13][352248239538142][1 ms][DEBUG] START check_scloud [2025-09-09 10:26:13][352248239538142][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:26:13][352248239538142][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 11561 5016 24198440 138012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:26:13][352248239538142][284 ms][DEBUG] targetPkg: running [2025-09-09 10:26:13][352248239538142][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-09 10:26:13][352248239538142][284 ms][DEBUG] START check_boot_completed [2025-09-09 10:26:13][352248239538142][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:26:13][352248239538142][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:26:13][352248239538142][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:26:13][352248239538142][393 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:26:13][352248239538142][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:26:13][352248239538142][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:26:13][352248239538142][519 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1085\nsuccessfulTxPacketsPerSecond: 0.6641230752883124\nretriedTxPackets: 179\nretriedTxPacketsPerSecond: 0.17599261495140278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1091\nsuccessfulRxPacketsPerSecond: 0.5744664601243903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:26:13][352248239538142][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:26:13][352248239538142][940 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.518/306.518/306.518/0.000 ms\n [2025-09-09 10:26:13][352248239538142][940 ms][DEBUG] check_internet: online [2025-09-09 10:26:13][352248239538142][940 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:26:13][352248239538142][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352248239538142\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3244\"}'\'' -e'"" [2025-09-09 10:26:13][352248239538142][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:26:13][352248239538142][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352248239538142\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3244\"}'\'' -e'"" [2025-09-09 10:26:17][352248239538142][4283 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11e740dd-feb0-4c09-9482-271d50704d76","id":"QR_11e740dd-feb0-4c09-9482-271d50704d76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:26:17][352248239538142][4439 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 10:26:17][352248239538142][4439 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 10:26:17][352248239538142][4440 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:26:19][352248239538142][0 ms][INFO] === Request start === [2025-09-09 10:26:19][352248239538142][1 ms][DEBUG] START check_scloud [2025-09-09 10:26:19][352248239538142][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:26:20][352248239538142][292 ms][DEBUG] SU: done in 292 ms; outu0_a118 11561 5016 24350376 146788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:26:20][352248239538142][292 ms][DEBUG] targetPkg: running [2025-09-09 10:26:20][352248239538142][292 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 10:26:20][352248239538142][293 ms][DEBUG] START check_boot_completed [2025-09-09 10:26:20][352248239538142][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:26:20][352248239538142][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:26:20][352248239538142][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:26:20][352248239538142][401 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:26:20][352248239538142][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:26:20][352248239538142][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:26:20][352248239538142][527 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1085\nsuccessfulTxPacketsPerSecond: 0.6641230752883124\nretriedTxPackets: 179\nretriedTxPacketsPerSecond: 0.17599261495140278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1091\nsuccessfulRxPacketsPerSecond: 0.5744664601243903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:26:20][352248239538142][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:26:20][352248239538142][932 ms][DEBUG] SU: done in 405 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=284 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 284.965/284.965/284.965/0.000 ms\n [2025-09-09 10:26:20][352248239538142][932 ms][DEBUG] check_internet: online [2025-09-09 10:26:20][352248239538142][932 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:26:20][352248239538142][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352248239538142\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-09-09 10:26:20][352248239538142][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:26:20][352248239538142][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352248239538142\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-09-09 10:26:25][352248239538142][5790 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_662244ad-1688-4432-9bd8-d73f12548d1c","id":"QR_662244ad-1688-4432-9bd8-d73f12548d1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:26:25][352248239538142][5946 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-09 10:26:25][352248239538142][5946 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-09 10:26:25][352248239538142][5946 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:26:30][353220824933904][0 ms][INFO] === Request start === [2025-09-09 10:26:30][353220824933904][1 ms][DEBUG] START check_scloud [2025-09-09 10:26:30][353220824933904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:26:30][353220824933904][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 11561 5016 24453964 156564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:26:30][353220824933904][293 ms][DEBUG] targetPkg: running [2025-09-09 10:26:30][353220824933904][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 10:26:30][353220824933904][293 ms][DEBUG] START check_boot_completed [2025-09-09 10:26:30][353220824933904][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:26:30][353220824933904][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:26:30][353220824933904][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:26:30][353220824933904][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:26:30][353220824933904][388 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 10:26:30][353220824933904][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:26:30][353220824933904][511 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1085\nsuccessfulTxPacketsPerSecond: 0.6641230752883124\nretriedTxPackets: 179\nretriedTxPacketsPerSecond: 0.17599261495140278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1091\nsuccessfulRxPacketsPerSecond: 0.5744664601243903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:26:30][353220824933904][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:26:30][353220824933904][855 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.641/254.641/254.641/0.000 ms\n [2025-09-09 10:26:30][353220824933904][855 ms][DEBUG] check_internet: online [2025-09-09 10:26:30][353220824933904][855 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:26:30][353220824933904][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353220824933904\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1645\"}'\'' -e'"" [2025-09-09 10:26:30][353220824933904][855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:26:30][353220824933904][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353220824933904\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1645\"}'\'' -e'"" [2025-09-09 10:26:34][353220824933904][4245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bae78f0c-278e-4ef1-8ec5-3be7a83e95aa","id":"QR_bae78f0c-278e-4ef1-8ec5-3be7a83e95aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:26:34][353220824933904][4401 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-09 10:26:34][353220824933904][4401 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 10:26:34][353220824933904][4401 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:26:36][353220824933904][0 ms][INFO] === Request start === [2025-09-09 10:26:36][353220824933904][1 ms][DEBUG] START check_scloud [2025-09-09 10:26:36][353220824933904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:26:37][353220824933904][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 11561 5016 24594480 166084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:26:37][353220824933904][293 ms][DEBUG] targetPkg: running [2025-09-09 10:26:37][353220824933904][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 10:26:37][353220824933904][294 ms][DEBUG] START check_boot_completed [2025-09-09 10:26:37][353220824933904][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:26:37][353220824933904][323 ms][DEBUG] ADB: done in 29 ms; out [2025-09-09 10:26:37][353220824933904][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:26:37][353220824933904][385 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:26:37][353220824933904][385 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 10:26:37][353220824933904][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:26:37][353220824933904][510 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1085\nsuccessfulTxPacketsPerSecond: 0.6641230752883124\nretriedTxPackets: 179\nretriedTxPacketsPerSecond: 0.17599261495140278\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1091\nsuccessfulRxPacketsPerSecond: 0.5744664601243903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:26:37][353220824933904][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:26:37][353220824933904][916 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=284 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 284.838/284.838/284.838/0.000 ms\n [2025-09-09 10:26:37][353220824933904][917 ms][DEBUG] check_internet: online [2025-09-09 10:26:37][353220824933904][917 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:26:37][353220824933904][917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353220824933904\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2188\"}'\'' -e'"" [2025-09-09 10:26:37][353220824933904][917 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:26:37][353220824933904][917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353220824933904\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2188\"}'\'' -e'"" [2025-09-09 10:26:42][353220824933904][5556 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4adccf9a-fe0b-4f07-b1d2-3e055b093bf6","id":"QR_4adccf9a-fe0b-4f07-b1d2-3e055b093bf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:26:42][353220824933904][5712 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 10:26:42][353220824933904][5712 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 10:26:42][353220824933904][5712 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:28:03][351272338149685][0 ms][INFO] === Request start === [2025-09-09 10:28:03][351272338149685][1 ms][DEBUG] START check_scloud [2025-09-09 10:28:03][351272338149685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:28:03][351272338149685][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 11561 5016 24673488 176852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:28:03][351272338149685][323 ms][DEBUG] targetPkg: running [2025-09-09 10:28:03][351272338149685][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 10:28:03][351272338149685][323 ms][DEBUG] START check_boot_completed [2025-09-09 10:28:03][351272338149685][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:28:03][351272338149685][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:28:03][351272338149685][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:28:03][351272338149685][432 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:28:03][351272338149685][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:28:03][351272338149685][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:28:03][351272338149685][588 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1227\nsuccessfulTxPacketsPerSecond: 0.47191914895031223\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.1528752172655941\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1210\nsuccessfulRxPacketsPerSecond: 0.3954815403175152\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:28:03][351272338149685][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:28:04][351272338149685][1010 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.241/291.241/291.241/0.000 ms\n [2025-09-09 10:28:04][351272338149685][1010 ms][DEBUG] check_internet: online [2025-09-09 10:28:04][351272338149685][1010 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:28:04][351272338149685][1010 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338149685\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2091\"}'\'' -e'"" [2025-09-09 10:28:04][351272338149685][1010 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:28:04][351272338149685][1010 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338149685\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2091\"}'\'' -e'"" [2025-09-09 10:28:08][351272338149685][5243 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 10:28:08][351272338149685][5243 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 10:28:08][351272338149685][5243 ms][WARN] Detected error: Process with pid 11561 either refused to load frida-agent, or terminated during injectionProcess with pid 11561 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 10:28:08][351272338149685][5243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:28:08][351272338149685][5509 ms][DEBUG] SU: done in 266 ms; outsystem 5440 5016 12274324 256880 ep_poll 0 S system_server\n [2025-09-09 10:28:08][351272338149685][5509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 10:28:08][351272338149685][5665 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 10:28:08][351272338149685][5665 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 10:28:08][351272338149685][5665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:28:09][351272338149685][5805 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 10:28:09][351272338149685][5805 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:28:09][351272338149685][5977 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:28:11][351272338149685][7992 ms][DEBUG] START check_boot_completed [2025-09-09 10:28:11][351272338149685][7992 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:28:11][351272338149685][8039 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:28:11][351272338149685][8039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:28:11][351272338149685][8086 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:28:11][351272338149685][8086 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:28:14][351272338149685][11101 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 10:28:14][351272338149685][11101 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338149685\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2091\"}'\'' -e'"" [2025-09-09 10:28:17][351272338149685][14710 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e6977e3-7aa7-48af-9097-8d1102addd87","id":"QR_7e6977e3-7aa7-48af-9097-8d1102addd87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:28:18][351272338149685][14866 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-09 10:28:18][351272338149685][14866 ms][DEBUG] END runCmdUntilRes#2 in 3765 ms [2025-09-09 10:28:18][351272338149685][14866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:28:20][351272338149685][1 ms][INFO] === Request start === [2025-09-09 10:28:20][351272338149685][1 ms][DEBUG] START check_scloud [2025-09-09 10:28:20][351272338149685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:28:20][351272338149685][238 ms][DEBUG] SU: done in 237 ms; outu0_a118 17935 5016 23572128 124920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:28:20][351272338149685][238 ms][DEBUG] targetPkg: running [2025-09-09 10:28:20][351272338149685][238 ms][DEBUG] END check_scloud in 237 ms [2025-09-09 10:28:20][351272338149685][238 ms][DEBUG] START check_boot_completed [2025-09-09 10:28:20][351272338149685][238 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:28:20][351272338149685][284 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:28:20][351272338149685][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:28:20][351272338149685][363 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 10:28:20][351272338149685][363 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 10:28:20][351272338149685][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:28:20][351272338149685][503 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1227\nsuccessfulTxPacketsPerSecond: 0.47191914895031223\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.1528752172655941\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1210\nsuccessfulRxPacketsPerSecond: 0.3954815403175152\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:28:20][351272338149685][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:28:21][351272338149685][910 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=314 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 314.305/314.305/314.305/0.000 ms\n [2025-09-09 10:28:21][351272338149685][910 ms][DEBUG] check_internet: online [2025-09-09 10:28:21][351272338149685][910 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:28:21][351272338149685][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338149685\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5175\"}'\'' -e'"" [2025-09-09 10:28:21][351272338149685][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:28:21][351272338149685][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338149685\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5175\"}'\'' -e'"" [2025-09-09 10:28:25][351272338149685][5346 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a3fa477-998a-4e83-b248-9f995fb7332f","id":"QR_8a3fa477-998a-4e83-b248-9f995fb7332f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:28:25][351272338149685][5502 ms][DEBUG] proc_open done in 4591 ms; code=255; res.len=3343 [2025-09-09 10:28:25][351272338149685][5502 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-09 10:28:25][351272338149685][5502 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:28:30][357040622167406][0 ms][INFO] === Request start === [2025-09-09 10:28:30][357040622167406][1 ms][DEBUG] START check_scloud [2025-09-09 10:28:30][357040622167406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:28:30][357040622167406][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17935 5016 23734260 137880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:28:30][357040622167406][308 ms][DEBUG] targetPkg: running [2025-09-09 10:28:30][357040622167406][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 10:28:30][357040622167406][308 ms][DEBUG] START check_boot_completed [2025-09-09 10:28:30][357040622167406][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:28:30][357040622167406][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:28:30][357040622167406][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:28:30][357040622167406][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:28:30][357040622167406][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:28:30][357040622167406][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:28:30][357040622167406][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1227\nsuccessfulTxPacketsPerSecond: 0.47191914895031223\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.1528752172655941\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1210\nsuccessfulRxPacketsPerSecond: 0.3954815403175152\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:28:30][357040622167406][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:28:31][357040622167406][932 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=314 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 314.957/314.957/314.957/0.000 ms\n [2025-09-09 10:28:31][357040622167406][933 ms][DEBUG] check_internet: online [2025-09-09 10:28:31][357040622167406][933 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:28:31][357040622167406][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040622167406\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6850\"}'\'' -e'"" [2025-09-09 10:28:31][357040622167406][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:28:31][357040622167406][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040622167406\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6850\"}'\'' -e'"" [2025-09-09 10:28:34][357040622167406][4306 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f2319ba-51d5-4a36-a620-151208d416b2","id":"QR_5f2319ba-51d5-4a36-a620-151208d416b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:28:34][357040622167406][4463 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 10:28:34][357040622167406][4463 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 10:28:34][357040622167406][4463 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:28:36][357040622167406][0 ms][INFO] === Request start === [2025-09-09 10:28:36][357040622167406][1 ms][DEBUG] START check_scloud [2025-09-09 10:28:36][357040622167406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:28:37][357040622167406][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 17935 5016 23852312 149800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:28:37][357040622167406][258 ms][DEBUG] targetPkg: running [2025-09-09 10:28:37][357040622167406][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 10:28:37][357040622167406][258 ms][DEBUG] START check_boot_completed [2025-09-09 10:28:37][357040622167406][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:28:37][357040622167406][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:28:37][357040622167406][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:28:37][357040622167406][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:28:37][357040622167406][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:28:37][357040622167406][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:28:37][357040622167406][445 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1227\nsuccessfulTxPacketsPerSecond: 0.47191914895031223\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.1528752172655941\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1210\nsuccessfulRxPacketsPerSecond: 0.3954815403175152\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:28:37][357040622167406][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:28:37][357040622167406][898 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.830/322.830/322.830/0.000 ms\n [2025-09-09 10:28:37][357040622167406][898 ms][DEBUG] check_internet: online [2025-09-09 10:28:37][357040622167406][898 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:28:37][357040622167406][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040622167406\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3765\"}'\'' -e'"" [2025-09-09 10:28:37][357040622167406][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:28:37][357040622167406][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040622167406\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3765\"}'\'' -e'"" [2025-09-09 10:28:42][357040622167406][5537 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_942fc9e0-76c6-40db-9a4f-e2615e436859","id":"QR_942fc9e0-76c6-40db-9a4f-e2615e436859","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:28:42][357040622167406][5694 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 10:28:42][357040622167406][5694 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 10:28:42][357040622167406][5694 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:29:03][352600229183570][0 ms][INFO] === Request start === [2025-09-09 10:29:03][352600229183570][1 ms][DEBUG] START check_scloud [2025-09-09 10:29:03][352600229183570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:29:03][352600229183570][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 17935 5016 23888004 162572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:29:03][352600229183570][272 ms][DEBUG] targetPkg: running [2025-09-09 10:29:03][352600229183570][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-09 10:29:03][352600229183570][272 ms][DEBUG] START check_boot_completed [2025-09-09 10:29:03][352600229183570][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:29:03][352600229183570][319 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:29:03][352600229183570][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:29:03][352600229183570][381 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:29:03][352600229183570][381 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:29:03][352600229183570][381 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:29:03][352600229183570][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229183570\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3051\"}'\'' -e'"" [2025-09-09 10:29:03][352600229183570][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:29:03][352600229183570][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229183570\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3051\"}'\'' -e'"" [2025-09-09 10:29:07][352600229183570][3880 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3c42ee6-7613-46ad-b018-ad4529d99142","id":"QR_b3c42ee6-7613-46ad-b018-ad4529d99142","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:29:07][352600229183570][4036 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-09 10:29:07][352600229183570][4036 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 10:29:07][352600229183570][4036 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:29:09][352600229183570][0 ms][INFO] === Request start === [2025-09-09 10:29:09][352600229183570][1 ms][DEBUG] START check_scloud [2025-09-09 10:29:09][352600229183570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:29:10][352600229183570][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 17935 5016 24036748 174396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:29:10][352600229183570][308 ms][DEBUG] targetPkg: running [2025-09-09 10:29:10][352600229183570][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 10:29:10][352600229183570][308 ms][DEBUG] START check_boot_completed [2025-09-09 10:29:10][352600229183570][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:29:10][352600229183570][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:29:10][352600229183570][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:29:10][352600229183570][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:29:10][352600229183570][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:29:10][352600229183570][401 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:29:10][352600229183570][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229183570\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1896\"}'\'' -e'"" [2025-09-09 10:29:10][352600229183570][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:29:10][352600229183570][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229183570\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1896\"}'\'' -e'"" [2025-09-09 10:29:14][352600229183570][5056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ecefbfc-8705-485b-a3fa-a7fd7f929883","id":"QR_2ecefbfc-8705-485b-a3fa-a7fd7f929883","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:29:15][352600229183570][5212 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 10:29:15][352600229183570][5212 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 10:29:15][352600229183570][5212 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:29:19][353497474416006][0 ms][INFO] === Request start === [2025-09-09 10:29:19][353497474416006][1 ms][DEBUG] START check_scloud [2025-09-09 10:29:19][353497474416006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:29:19][353497474416006][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 17935 5016 24216148 184240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:29:19][353497474416006][263 ms][DEBUG] targetPkg: running [2025-09-09 10:29:19][353497474416006][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 10:29:19][353497474416006][263 ms][DEBUG] START check_boot_completed [2025-09-09 10:29:19][353497474416006][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:29:19][353497474416006][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:29:19][353497474416006][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:29:19][353497474416006][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:29:19][353497474416006][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:29:19][353497474416006][357 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:29:19][353497474416006][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474416006\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9271\"}'\'' -e'"" [2025-09-09 10:29:19][353497474416006][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:29:19][353497474416006][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474416006\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9271\"}'\'' -e'"" [2025-09-09 10:29:24][353497474416006][4981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7339fc9-1fae-49dd-b490-e6f8378467df","id":"QR_d7339fc9-1fae-49dd-b490-e6f8378467df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:29:24][353497474416006][5137 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-09 10:29:24][353497474416006][5137 ms][DEBUG] END runCmdUntilRes#1 in 4779 ms [2025-09-09 10:29:24][353497474416006][5137 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:29:26][353497474416006][0 ms][INFO] === Request start === [2025-09-09 10:29:26][353497474416006][1 ms][DEBUG] START check_scloud [2025-09-09 10:29:26][353497474416006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:29:27][353497474416006][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 17935 5016 24347504 196260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:29:27][353497474416006][308 ms][DEBUG] targetPkg: running [2025-09-09 10:29:27][353497474416006][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 10:29:27][353497474416006][309 ms][DEBUG] START check_boot_completed [2025-09-09 10:29:27][353497474416006][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:29:27][353497474416006][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:29:27][353497474416006][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:29:27][353497474416006][403 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:29:27][353497474416006][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:29:27][353497474416006][403 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:29:27][353497474416006][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474416006\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7109\"}'\'' -e'"" [2025-09-09 10:29:27][353497474416006][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:29:27][353497474416006][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474416006\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7109\"}'\'' -e'"" [2025-09-09 10:29:32][353497474416006][5401 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b76d9a13-dbfe-4792-8598-237b14d805e6","id":"QR_b76d9a13-dbfe-4792-8598-237b14d805e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:29:32][353497474416006][5557 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-09 10:29:32][353497474416006][5557 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-09-09 10:29:32][353497474416006][5557 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:31:03][356414816642352][1 ms][INFO] === Request start === [2025-09-09 10:31:03][356414816642352][1 ms][DEBUG] START check_scloud [2025-09-09 10:31:03][356414816642352][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:31:03][356414816642352][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 17935 5016 24492920 207480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:31:03][356414816642352][310 ms][DEBUG] targetPkg: running [2025-09-09 10:31:03][356414816642352][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 10:31:03][356414816642352][310 ms][DEBUG] START check_boot_completed [2025-09-09 10:31:03][356414816642352][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:31:03][356414816642352][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:31:03][356414816642352][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:31:04][356414816642352][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:31:04][356414816642352][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:31:04][356414816642352][419 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:31:04][356414816642352][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816642352\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5161\"}'\'' -e'"" [2025-09-09 10:31:04][356414816642352][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:31:04][356414816642352][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816642352\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5161\"}'\'' -e'"" [2025-09-09 10:31:08][356414816642352][5136 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73c92b5f-7be1-4e66-81b4-6f0abdbbf660","id":"QR_73c92b5f-7be1-4e66-81b4-6f0abdbbf660","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:31:08][356414816642352][5293 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-09 10:31:08][356414816642352][5293 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-09 10:31:08][356414816642352][5293 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:31:11][356414816642352][0 ms][INFO] === Request start === [2025-09-09 10:31:11][356414816642352][1 ms][DEBUG] START check_scloud [2025-09-09 10:31:11][356414816642352][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:31:11][356414816642352][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 17935 5016 24637504 217100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:31:11][356414816642352][324 ms][DEBUG] targetPkg: running [2025-09-09 10:31:11][356414816642352][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 10:31:11][356414816642352][324 ms][DEBUG] START check_boot_completed [2025-09-09 10:31:11][356414816642352][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:31:11][356414816642352][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:31:11][356414816642352][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:31:11][356414816642352][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:31:11][356414816642352][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:31:11][356414816642352][433 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:31:11][356414816642352][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816642352\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8549\"}'\'' -e'"" [2025-09-09 10:31:11][356414816642352][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:31:11][356414816642352][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816642352\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8549\"}'\'' -e'"" [2025-09-09 10:31:16][356414816642352][5525 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec761a85-6c71-4585-bc6c-2b869b6298e4","id":"QR_ec761a85-6c71-4585-bc6c-2b869b6298e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:31:16][356414816642352][5682 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-09 10:31:16][356414816642352][5682 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-09 10:31:16][356414816642352][5682 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:32:03][350020273603971][0 ms][INFO] === Request start === [2025-09-09 10:32:03][350020273603971][1 ms][DEBUG] START check_scloud [2025-09-09 10:32:03][350020273603971][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:32:03][350020273603971][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 17935 5016 24775808 228844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:32:03][350020273603971][341 ms][DEBUG] targetPkg: running [2025-09-09 10:32:03][350020273603971][341 ms][DEBUG] END check_scloud in 340 ms [2025-09-09 10:32:03][350020273603971][341 ms][DEBUG] START check_boot_completed [2025-09-09 10:32:03][350020273603971][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:32:03][350020273603971][387 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:32:03][350020273603971][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:32:03][350020273603971][450 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:32:03][350020273603971][450 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:32:03][350020273603971][450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:32:04][350020273603971][606 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:32:04][350020273603971][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:32:05][350020273603971][1981 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.462/300.462/300.462/0.000 ms\n [2025-09-09 10:32:05][350020273603971][1981 ms][DEBUG] check_internet: online [2025-09-09 10:32:05][350020273603971][1981 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:32:05][350020273603971][1981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020273603971\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5987\"}'\'' -e'"" [2025-09-09 10:32:05][350020273603971][1981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:32:05][350020273603971][1981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020273603971\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5987\"}'\'' -e'"" [2025-09-09 10:32:09][350020273603971][5854 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_895ee626-b0d5-453a-b7f0-c20e3c55bf70","id":"QR_895ee626-b0d5-453a-b7f0-c20e3c55bf70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:32:09][350020273603971][6011 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-09-09 10:32:09][350020273603971][6011 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 10:32:09][350020273603971][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:32:11][350020273603971][0 ms][INFO] === Request start === [2025-09-09 10:32:11][350020273603971][1 ms][DEBUG] START check_scloud [2025-09-09 10:32:11][350020273603971][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:32:12][350020273603971][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 17935 5016 24952076 240584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:32:12][350020273603971][323 ms][DEBUG] targetPkg: running [2025-09-09 10:32:12][350020273603971][323 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 10:32:12][350020273603971][323 ms][DEBUG] START check_boot_completed [2025-09-09 10:32:12][350020273603971][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:32:12][350020273603971][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:32:12][350020273603971][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:32:12][350020273603971][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:32:12][350020273603971][401 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:32:12][350020273603971][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:32:12][350020273603971][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:32:12][350020273603971][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:32:12][350020273603971][933 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.726/316.726/316.726/0.000 ms\n [2025-09-09 10:32:12][350020273603971][933 ms][DEBUG] check_internet: online [2025-09-09 10:32:12][350020273603971][933 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:32:12][350020273603971][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020273603971\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 10:32:12][350020273603971][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:32:12][350020273603971][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020273603971\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 10:32:16][350020273603971][4775 ms][DEBUG] proc_open done in 3842 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 10:32:16][350020273603971][4775 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-09 10:32:16][350020273603971][4775 ms][WARN] Detected error: Process with pid 17935 either refused to load frida-agent, or terminated during injectionProcess with pid 17935 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 10:32:16][350020273603971][4775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:32:16][350020273603971][5072 ms][DEBUG] SU: done in 297 ms; outsystem 5440 5016 12309196 222708 ep_poll 0 S system_server\n [2025-09-09 10:32:16][350020273603971][5072 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 10:32:17][350020273603971][5228 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 10:32:17][350020273603971][5228 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 10:32:17][350020273603971][5229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:32:17][350020273603971][5353 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 10:32:17][350020273603971][5353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:32:17][350020273603971][5541 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:32:19][350020273603971][7556 ms][DEBUG] START check_boot_completed [2025-09-09 10:32:19][350020273603971][7556 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:32:19][350020273603971][7603 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:32:19][350020273603971][7603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:32:19][350020273603971][7697 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 10:32:19][350020273603971][7697 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 10:32:22][350020273603971][10711 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 10:32:22][350020273603971][10711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020273603971\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 10:32:27][350020273603971][15804 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c696fdbe-129c-47ca-a622-e19556d9ae23","id":"QR_c696fdbe-129c-47ca-a622-e19556d9ae23","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:32:27][350020273603971][15960 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-09 10:32:27][350020273603971][15960 ms][DEBUG] END runCmdUntilRes#2 in 5249 ms [2025-09-09 10:32:27][350020273603971][15960 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:32:32][355326625628730][0 ms][INFO] === Request start === [2025-09-09 10:32:32][355326625628730][1 ms][DEBUG] START check_scloud [2025-09-09 10:32:32][355326625628730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:32:32][355326625628730][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 19413 5016 23505056 124764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:32:32][355326625628730][250 ms][DEBUG] targetPkg: running [2025-09-09 10:32:32][355326625628730][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-09 10:32:32][355326625628730][250 ms][DEBUG] START check_boot_completed [2025-09-09 10:32:32][355326625628730][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:32:32][355326625628730][296 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:32:32][355326625628730][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:32:32][355326625628730][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:32:32][355326625628730][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:32:32][355326625628730][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:32:32][355326625628730][453 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:32:32][355326625628730][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:32:32][355326625628730][875 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.926/295.926/295.926/0.000 ms\n [2025-09-09 10:32:32][355326625628730][875 ms][DEBUG] check_internet: online [2025-09-09 10:32:32][355326625628730][875 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:32:32][355326625628730][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625628730\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2572\"}'\'' -e'"" [2025-09-09 10:32:32][355326625628730][875 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:32:32][355326625628730][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625628730\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2572\"}'\'' -e'"" [2025-09-09 10:32:36][355326625628730][4046 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01bd69a2-992d-4e87-b209-d68565f6bf5d","id":"QR_01bd69a2-992d-4e87-b209-d68565f6bf5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:32:36][355326625628730][4202 ms][DEBUG] proc_open done in 3327 ms; code=255; res.len=3343 [2025-09-09 10:32:36][355326625628730][4202 ms][DEBUG] END runCmdUntilRes#1 in 3327 ms [2025-09-09 10:32:36][355326625628730][4202 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:32:38][355326625628730][0 ms][INFO] === Request start === [2025-09-09 10:32:38][355326625628730][1 ms][DEBUG] START check_scloud [2025-09-09 10:32:38][355326625628730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:32:38][355326625628730][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 19413 5016 23650292 138080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:32:38][355326625628730][273 ms][DEBUG] targetPkg: running [2025-09-09 10:32:38][355326625628730][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 10:32:38][355326625628730][273 ms][DEBUG] START check_boot_completed [2025-09-09 10:32:38][355326625628730][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:32:38][355326625628730][320 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:32:38][355326625628730][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:32:38][355326625628730][382 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:32:38][355326625628730][382 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:32:38][355326625628730][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:32:39][355326625628730][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:32:39][355326625628730][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:32:39][355326625628730][913 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=328 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 328.411/328.411/328.411/0.000 ms\n [2025-09-09 10:32:39][355326625628730][914 ms][DEBUG] check_internet: online [2025-09-09 10:32:39][355326625628730][914 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:32:39][355326625628730][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625628730\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8815\"}'\'' -e'"" [2025-09-09 10:32:39][355326625628730][914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:32:39][355326625628730][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625628730\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8815\"}'\'' -e'"" [2025-09-09 10:32:44][355326625628730][5553 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_008ed612-bdbf-4e31-b6d5-3b6e24845496","id":"QR_008ed612-bdbf-4e31-b6d5-3b6e24845496","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:32:44][355326625628730][5709 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 10:32:44][355326625628730][5709 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 10:32:44][355326625628730][5709 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:33:03][350247873591567][0 ms][INFO] === Request start === [2025-09-09 10:33:03][350247873591567][1 ms][DEBUG] START check_scloud [2025-09-09 10:33:03][350247873591567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:33:04][350247873591567][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 19413 5016 23696216 150576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:33:04][350247873591567][330 ms][DEBUG] targetPkg: running [2025-09-09 10:33:04][350247873591567][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-09 10:33:04][350247873591567][330 ms][DEBUG] START check_boot_completed [2025-09-09 10:33:04][350247873591567][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:33:04][350247873591567][377 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:33:04][350247873591567][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:33:04][350247873591567][439 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:33:04][350247873591567][439 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:33:04][350247873591567][439 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:33:04][350247873591567][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247873591567\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4284\"}'\'' -e'"" [2025-09-09 10:33:04][350247873591567][439 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:33:04][350247873591567][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247873591567\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4284\"}'\'' -e'"" [2025-09-09 10:33:07][350247873591567][3751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed77245e-6794-4d66-9aa6-9591ab350a47","id":"QR_ed77245e-6794-4d66-9aa6-9591ab350a47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:33:07][350247873591567][3907 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 10:33:07][350247873591567][3907 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 10:33:07][350247873591567][3907 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:33:09][350504681194657][1 ms][INFO] === Request start === [2025-09-09 10:33:09][350504681194657][1 ms][DEBUG] START check_scloud [2025-09-09 10:33:09][350504681194657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:33:10][350504681194657][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19413 5016 23847008 161504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:33:10][350504681194657][316 ms][DEBUG] targetPkg: running [2025-09-09 10:33:10][350504681194657][317 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 10:33:10][350504681194657][317 ms][DEBUG] START check_boot_completed [2025-09-09 10:33:10][350504681194657][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:33:10][350504681194657][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:33:10][350504681194657][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:33:10][350504681194657][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:33:10][350504681194657][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:33:10][350504681194657][426 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:33:10][350504681194657][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350504681194657\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9473\"}'\'' -e'"" [2025-09-09 10:33:10][350504681194657][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:33:10][350504681194657][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350504681194657\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9473\"}'\'' -e'"" [2025-09-09 10:33:14][350504681194657][5080 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45c14262-9ba7-4705-b9c1-ac787866a83d","id":"QR_45c14262-9ba7-4705-b9c1-ac787866a83d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:33:15][350504681194657][5237 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 10:33:15][350504681194657][5237 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 10:33:15][350504681194657][5237 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:33:17][350731011428832][0 ms][INFO] === Request start === [2025-09-09 10:33:17][350731011428832][1 ms][DEBUG] START check_scloud [2025-09-09 10:33:17][350731011428832][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:33:17][350731011428832][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19413 5016 24005088 173280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:33:17][350731011428832][311 ms][DEBUG] targetPkg: running [2025-09-09 10:33:17][350731011428832][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 10:33:17][350731011428832][311 ms][DEBUG] START check_boot_completed [2025-09-09 10:33:17][350731011428832][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:33:17][350731011428832][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:33:17][350731011428832][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:33:17][350731011428832][436 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 10:33:17][350731011428832][436 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 10:33:17][350731011428832][436 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:33:17][350731011428832][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731011428832\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7713\"}'\'' -e'"" [2025-09-09 10:33:17][350731011428832][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:33:17][350731011428832][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731011428832\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7713\"}'\'' -e'"" [2025-09-09 10:33:20][350731011428832][3747 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5271c2d0-9dc0-41cb-b14d-177fa5effca6","id":"QR_5271c2d0-9dc0-41cb-b14d-177fa5effca6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:33:21][350731011428832][3904 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 10:33:21][350731011428832][3904 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 10:33:21][350731011428832][3904 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:33:23][352631697106520][0 ms][INFO] === Request start === [2025-09-09 10:33:23][352631697106520][1 ms][DEBUG] START check_scloud [2025-09-09 10:33:23][352631697106520][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:33:23][352631697106520][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 19413 5016 24168068 183664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:33:23][352631697106520][265 ms][DEBUG] targetPkg: running [2025-09-09 10:33:23][352631697106520][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 10:33:23][352631697106520][265 ms][DEBUG] START check_boot_completed [2025-09-09 10:33:23][352631697106520][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:33:23][352631697106520][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:33:23][352631697106520][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:33:23][352631697106520][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:33:23][352631697106520][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:33:23][352631697106520][374 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:33:23][352631697106520][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631697106520\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3567\"}'\'' -e'"" [2025-09-09 10:33:23][352631697106520][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:33:23][352631697106520][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631697106520\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3567\"}'\'' -e'"" [2025-09-09 10:33:27][352631697106520][4467 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e39d258b-e5a2-4c96-b771-134b229683c8","id":"QR_e39d258b-e5a2-4c96-b771-134b229683c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:33:27][352631697106520][4623 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-09 10:33:27][352631697106520][4623 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-09 10:33:27][352631697106520][4623 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:33:29][353204336178810][1 ms][INFO] === Request start === [2025-09-09 10:33:29][353204336178810][1 ms][DEBUG] START check_scloud [2025-09-09 10:33:29][353204336178810][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:33:30][353204336178810][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 19413 5016 24294156 195392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:33:30][353204336178810][317 ms][DEBUG] targetPkg: running [2025-09-09 10:33:30][353204336178810][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 10:33:30][353204336178810][317 ms][DEBUG] START check_boot_completed [2025-09-09 10:33:30][353204336178810][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:33:30][353204336178810][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:33:30][353204336178810][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:33:30][353204336178810][427 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:33:30][353204336178810][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:33:30][353204336178810][427 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:33:30][353204336178810][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204336178810\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1611\"}'\'' -e'"" [2025-09-09 10:33:30][353204336178810][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:33:30][353204336178810][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204336178810\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1611\"}'\'' -e'"" [2025-09-09 10:33:33][353204336178810][3754 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35c15f0f-b5ec-4898-ab7d-8f0ae6fb9cdd","id":"QR_35c15f0f-b5ec-4898-ab7d-8f0ae6fb9cdd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:33:33][353204336178810][3910 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 10:33:33][353204336178810][3910 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 10:33:33][353204336178810][3910 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:34:03][353325479526406][0 ms][INFO] === Request start === [2025-09-09 10:34:03][353325479526406][1 ms][DEBUG] START check_scloud [2025-09-09 10:34:03][353325479526406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:34:03][353325479526406][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 19413 5016 24381188 206700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:34:03][353325479526406][284 ms][DEBUG] targetPkg: running [2025-09-09 10:34:03][353325479526406][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-09 10:34:03][353325479526406][284 ms][DEBUG] START check_boot_completed [2025-09-09 10:34:03][353325479526406][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:34:03][353325479526406][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:34:03][353325479526406][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:34:03][353325479526406][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:34:03][353325479526406][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:34:03][353325479526406][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:34:03][353325479526406][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:34:03][353325479526406][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:34:04][353325479526406][862 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.701/248.701/248.701/0.000 ms\n [2025-09-09 10:34:04][353325479526406][862 ms][DEBUG] check_internet: online [2025-09-09 10:34:04][353325479526406][862 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:34:04][353325479526406][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325479526406\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9106\"}'\'' -e'"" [2025-09-09 10:34:04][353325479526406][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:34:04][353325479526406][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325479526406\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9106\"}'\'' -e'"" [2025-09-09 10:34:07][353325479526406][4251 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11b0a6a6-af5f-4c12-bb1b-2ab0ecd62bf1","id":"QR_11b0a6a6-af5f-4c12-bb1b-2ab0ecd62bf1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:34:07][353325479526406][4407 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-09 10:34:07][353325479526406][4407 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-09-09 10:34:07][353325479526406][4407 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:34:09][353520954733663][0 ms][INFO] === Request start === [2025-09-09 10:34:09][353520954733663][1 ms][DEBUG] START check_scloud [2025-09-09 10:34:09][353520954733663][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:34:10][353520954733663][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 19413 5016 24525708 217264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:34:10][353520954733663][322 ms][DEBUG] targetPkg: running [2025-09-09 10:34:10][353520954733663][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 10:34:10][353520954733663][322 ms][DEBUG] START check_boot_completed [2025-09-09 10:34:10][353520954733663][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:34:10][353520954733663][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:34:10][353520954733663][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:34:10][353520954733663][416 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:34:10][353520954733663][417 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 10:34:10][353520954733663][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:34:10][353520954733663][556 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:34:10][353520954733663][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:34:10][353520954733663][947 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.086/293.086/293.086/0.000 ms\n [2025-09-09 10:34:10][353520954733663][947 ms][DEBUG] check_internet: online [2025-09-09 10:34:10][353520954733663][947 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:34:10][353520954733663][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520954733663\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8809\"}'\'' -e'"" [2025-09-09 10:34:10][353520954733663][947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:34:10][353520954733663][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520954733663\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8809\"}'\'' -e'"" [2025-09-09 10:34:15][353520954733663][6101 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1d77b3f-960b-4a75-ad16-a486706552ec","id":"QR_b1d77b3f-960b-4a75-ad16-a486706552ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:34:15][353520954733663][6258 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 10:34:15][353520954733663][6258 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 10:34:15][353520954733663][6258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:34:18][356006790643875][0 ms][INFO] === Request start === [2025-09-09 10:34:18][356006790643875][1 ms][DEBUG] START check_scloud [2025-09-09 10:34:18][356006790643875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:34:18][356006790643875][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 19413 5016 24671844 229524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:34:18][356006790643875][280 ms][DEBUG] targetPkg: running [2025-09-09 10:34:18][356006790643875][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 10:34:18][356006790643875][280 ms][DEBUG] START check_boot_completed [2025-09-09 10:34:18][356006790643875][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:34:18][356006790643875][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:34:18][356006790643875][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:34:18][356006790643875][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:34:18][356006790643875][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:34:18][356006790643875][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:34:18][356006790643875][483 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:34:18][356006790643875][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:34:19][356006790643875][904 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.647/268.647/268.647/0.000 ms\n [2025-09-09 10:34:19][356006790643875][904 ms][DEBUG] check_internet: online [2025-09-09 10:34:19][356006790643875][904 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:34:19][356006790643875][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006790643875\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3705\"}'\'' -e'"" [2025-09-09 10:34:19][356006790643875][905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:34:19][356006790643875][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006790643875\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3705\"}'\'' -e'"" [2025-09-09 10:34:22][356006790643875][4419 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c5264e6-4f4b-4636-a638-1dc653a72d60","id":"QR_7c5264e6-4f4b-4636-a638-1dc653a72d60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:34:22][356006790643875][4575 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-09-09 10:34:22][356006790643875][4575 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-09-09 10:34:22][356006790643875][4575 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:34:25][353283322921383][0 ms][INFO] === Request start === [2025-09-09 10:34:25][353283322921383][1 ms][DEBUG] START check_scloud [2025-09-09 10:34:25][353283322921383][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:34:26][353283322921383][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 19413 5016 24789768 241288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:34:26][353283322921383][280 ms][DEBUG] targetPkg: running [2025-09-09 10:34:26][353283322921383][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 10:34:26][353283322921383][280 ms][DEBUG] START check_boot_completed [2025-09-09 10:34:26][353283322921383][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:34:26][353283322921383][327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:34:26][353283322921383][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:34:26][353283322921383][421 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 10:34:26][353283322921383][421 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 10:34:26][353283322921383][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:34:26][353283322921383][561 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1419\nsuccessfulTxPacketsPerSecond: 1.4704981312419583\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.42123644384535264\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1367\nsuccessfulRxPacketsPerSecond: 1.2024385760676428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:34:26][353283322921383][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:34:26][353283322921383][952 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.703/289.703/289.703/0.000 ms\n [2025-09-09 10:34:26][353283322921383][952 ms][DEBUG] check_internet: online [2025-09-09 10:34:26][353283322921383][952 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:34:26][353283322921383][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283322921383\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7850\"}'\'' -e'"" [2025-09-09 10:34:26][353283322921383][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:34:26][353283322921383][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283322921383\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7850\"}'\'' -e'"" [2025-09-09 10:34:30][353283322921383][4717 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 10:34:30][353283322921383][4717 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-09 10:34:30][353283322921383][4717 ms][WARN] Detected error: Process with pid 19413 either refused to load frida-agent, or terminated during injectionProcess with pid 19413 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 10:34:30][353283322921383][4717 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:34:31][353283322921383][5045 ms][DEBUG] SU: done in 328 ms; outsystem 5440 5016 12326632 214912 ep_poll 0 S system_server\n [2025-09-09 10:34:31][353283322921383][5045 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 10:34:31][353283322921383][5185 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 10:34:31][353283322921383][5185 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 10:34:31][353283322921383][5185 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:34:31][353283322921383][5310 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 10:34:31][353283322921383][5310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:34:31][353283322921383][5482 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:34:33][353283322921383][7497 ms][DEBUG] START check_boot_completed [2025-09-09 10:34:33][353283322921383][7497 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:34:33][353283322921383][7544 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:34:33][353283322921383][7544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:34:33][353283322921383][7591 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:34:33][353283322921383][7591 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:34:36][353283322921383][10606 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 10:34:36][353283322921383][10606 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283322921383\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7850\"}'\'' -e'"" [2025-09-09 10:34:42][353283322921383][16542 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4ba0115-7862-46f5-97de-251f4701e9d5","id":"QR_a4ba0115-7862-46f5-97de-251f4701e9d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:34:42][353283322921383][16698 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=3343 [2025-09-09 10:34:42][353283322921383][16698 ms][DEBUG] END runCmdUntilRes#2 in 6092 ms [2025-09-09 10:34:42][353283322921383][16698 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:35:03][356761460395251][0 ms][INFO] === Request start === [2025-09-09 10:35:03][356761460395251][1 ms][DEBUG] START check_scloud [2025-09-09 10:35:03][356761460395251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:35:03][356761460395251][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 20771 5016 23433624 126976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:35:03][356761460395251][313 ms][DEBUG] targetPkg: running [2025-09-09 10:35:03][356761460395251][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 10:35:03][356761460395251][313 ms][DEBUG] START check_boot_completed [2025-09-09 10:35:03][356761460395251][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:35:03][356761460395251][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:35:03][356761460395251][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:35:04][356761460395251][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:35:04][356761460395251][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:35:04][356761460395251][422 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:35:04][356761460395251][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356761460395251\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6098\"}'\'' -e'"" [2025-09-09 10:35:04][356761460395251][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:35:04][356761460395251][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356761460395251\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6098\"}'\'' -e'"" [2025-09-09 10:35:07][356761460395251][3421 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 10:35:07][356761460395251][3577 ms][DEBUG] proc_open done in 3155 ms; code=255; res.len=115 [2025-09-09 10:35:07][356761460395251][3577 ms][DEBUG] END runCmdUntilRes#1 in 3155 ms [2025-09-09 10:35:07][356761460395251][3577 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 10:35:07][][0 ms][INFO] === Request start === [2025-09-09 10:35:07][][1 ms][DEBUG] START check_scloud [2025-09-09 10:35:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:35:07][][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20771 5016 23580192 137748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:35:07][][299 ms][DEBUG] targetPkg: running [2025-09-09 10:35:07][][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 10:35:07][][299 ms][DEBUG] START check_boot_completed [2025-09-09 10:35:07][][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:35:07][][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:35:07][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:35:07][][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:35:07][][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:35:07][][408 ms][DEBUG] rawBody.length=1131 [2025-09-09 10:35:07][][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10THEEH\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2782\"}'\'' -e'"" [2025-09-09 10:35:07][][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:35:07][][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10THEEH\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2782\"}'\'' -e'"" [2025-09-09 10:35:10][][3407 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 10:35:10][][3564 ms][DEBUG] proc_open done in 3155 ms; code=255; res.len=115 [2025-09-09 10:35:10][][3564 ms][DEBUG] END runCmdUntilRes#1 in 3156 ms [2025-09-09 10:35:10][][3564 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 10:35:12][356761460395251][1 ms][INFO] === Request start === [2025-09-09 10:35:12][356761460395251][1 ms][DEBUG] START check_scloud [2025-09-09 10:35:12][356761460395251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:35:13][356761460395251][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 20771 5016 23726696 149316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:35:13][356761460395251][272 ms][DEBUG] targetPkg: running [2025-09-09 10:35:13][356761460395251][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-09 10:35:13][356761460395251][272 ms][DEBUG] START check_boot_completed [2025-09-09 10:35:13][356761460395251][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:35:13][356761460395251][319 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:35:13][356761460395251][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:35:13][356761460395251][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:35:13][356761460395251][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:35:13][356761460395251][366 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:35:13][356761460395251][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356761460395251\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-09-09 10:35:13][356761460395251][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:35:13][356761460395251][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356761460395251\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-09-09 10:35:17][356761460395251][5099 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae27dd42-6e75-4204-8fe3-ed48d13f7ab0","id":"QR_ae27dd42-6e75-4204-8fe3-ed48d13f7ab0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:35:18][356761460395251][5255 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 10:35:18][356761460395251][5255 ms][DEBUG] END runCmdUntilRes#1 in 4890 ms [2025-09-09 10:35:18][356761460395251][5255 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:38:04][355060833113751][1 ms][INFO] === Request start === [2025-09-09 10:38:04][355060833113751][1 ms][DEBUG] START check_scloud [2025-09-09 10:38:04][355060833113751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:38:04][355060833113751][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20771 5016 23822036 160312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:38:04][355060833113751][308 ms][DEBUG] targetPkg: running [2025-09-09 10:38:04][355060833113751][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 10:38:04][355060833113751][308 ms][DEBUG] START check_boot_completed [2025-09-09 10:38:04][355060833113751][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:38:04][355060833113751][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:38:04][355060833113751][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:38:04][355060833113751][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:38:04][355060833113751][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:38:04][355060833113751][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:38:04][355060833113751][496 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1802\nsuccessfulTxPacketsPerSecond: 1.2723702962994954\nretriedTxPackets: 395\nretriedTxPacketsPerSecond: 0.38204330045546203\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1682\nsuccessfulRxPacketsPerSecond: 1.0464664316823526\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:38:04][355060833113751][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:38:05][355060833113751][1901 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.931/299.931/299.931/0.000 ms\n [2025-09-09 10:38:05][355060833113751][1901 ms][DEBUG] check_internet: online [2025-09-09 10:38:05][355060833113751][1901 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:38:05][355060833113751][1901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833113751\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7864\"}'\'' -e'"" [2025-09-09 10:38:05][355060833113751][1902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:38:05][355060833113751][1902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833113751\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7864\"}'\'' -e'"" [2025-09-09 10:38:09][355060833113751][5494 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f6d7e23-efc2-4059-9969-d6e93b51eef5","id":"QR_2f6d7e23-efc2-4059-9969-d6e93b51eef5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:38:09][355060833113751][5650 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-09-09 10:38:09][355060833113751][5650 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-09 10:38:09][355060833113751][5650 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:38:12][355060833113751][1 ms][INFO] === Request start === [2025-09-09 10:38:12][355060833113751][1 ms][DEBUG] START check_scloud [2025-09-09 10:38:12][355060833113751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:38:12][355060833113751][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20771 5016 24003420 172068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:38:12][355060833113751][308 ms][DEBUG] targetPkg: running [2025-09-09 10:38:12][355060833113751][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 10:38:12][355060833113751][308 ms][DEBUG] START check_boot_completed [2025-09-09 10:38:12][355060833113751][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:38:12][355060833113751][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:38:12][355060833113751][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:38:12][355060833113751][433 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 10:38:12][355060833113751][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 10:38:12][355060833113751][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:38:12][355060833113751][589 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30926 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1802\nsuccessfulTxPacketsPerSecond: 1.2723702962994954\nretriedTxPackets: 395\nretriedTxPacketsPerSecond: 0.38204330045546203\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1682\nsuccessfulRxPacketsPerSecond: 1.0464664316823526\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:38:12][355060833113751][589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:38:13][355060833113751][1026 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.552/324.552/324.552/0.000 ms\n [2025-09-09 10:38:13][355060833113751][1026 ms][DEBUG] check_internet: online [2025-09-09 10:38:13][355060833113751][1027 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:38:13][355060833113751][1027 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833113751\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2440\"}'\'' -e'"" [2025-09-09 10:38:13][355060833113751][1027 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:38:13][355060833113751][1027 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833113751\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2440\"}'\'' -e'"" [2025-09-09 10:38:13][355060833113751][1651 ms][DEBUG] proc_open done in 625 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-09 10:38:13][355060833113751][1651 ms][DEBUG] END runCmdUntilRes#1 in 625 ms [2025-09-09 10:38:13][355060833113751][1651 ms][WARN] Detected system_server; Reboot the device Unable to find process with name 'system_server'Unable to find process with name 'system_server'\r\n [2025-09-09 10:38:13][355060833113751][1651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:38:14][355060833113751][1964 ms][DEBUG] SU: done in 312 ms; out [2025-09-09 10:38:14][355060833113751][1964 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 10:38:15][355060833113751][3119 ms][DEBUG] SU: done in 1156 ms; out [2025-09-09 10:40:06][355814560457140][1 ms][INFO] === Request start === [2025-09-09 10:40:06][355814560457140][1 ms][DEBUG] START check_scloud [2025-09-09 10:40:06][355814560457140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:40:07][355814560457140][384 ms][DEBUG] SU: done in 383 ms; out [2025-09-09 10:40:07][355814560457140][384 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 10:40:07][355814560457140][431 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 10:40:07][355814560457140][431 ms][DEBUG] check_devices: device found [2025-09-09 10:40:07][355814560457140][431 ms][WARN] targetPkg: not running, restarting [2025-09-09 10:40:07][355814560457140][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:40:07][355814560457140][573 ms][DEBUG] SU: done in 142 ms; out [2025-09-09 10:40:07][355814560457140][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:40:07][355814560457140][837 ms][DEBUG] SU: done in 264 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:40:09][355814560457140][2852 ms][DEBUG] END check_scloud in 2851 ms [2025-09-09 10:40:09][355814560457140][2852 ms][DEBUG] START check_boot_completed [2025-09-09 10:40:09][355814560457140][2852 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:40:09][355814560457140][2899 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:40:09][355814560457140][2899 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:40:09][355814560457140][2947 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:40:09][355814560457140][2947 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 10:40:09][355814560457140][2947 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:40:09][355814560457140][3086 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 664\nsuccessfulTxPacketsPerSecond: 19.315901204228123\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 2.0218952787401103\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 735\nsuccessfulRxPacketsPerSecond: 28.505620121519964\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:40:09][355814560457140][3087 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:40:10][355814560457140][4117 ms][DEBUG] SU: done in 1030 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=398 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 398.713/398.713/398.713/0.000 ms\n [2025-09-09 10:40:10][355814560457140][4117 ms][DEBUG] check_internet: online [2025-09-09 10:40:10][355814560457140][4117 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:40:10][355814560457140][4117 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814560457140\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7898\"}'\'' -e'"" [2025-09-09 10:40:10][355814560457140][4117 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:40:10][355814560457140][4117 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814560457140\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7898\"}'\'' -e'"" [2025-09-09 10:40:16][355814560457140][10022 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fde74cbe-09a7-460f-9594-e6286c0ef6b9","id":"QR_fde74cbe-09a7-460f-9594-e6286c0ef6b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:40:16][355814560457140][10178 ms][DEBUG] proc_open done in 6061 ms; code=255; res.len=3343 [2025-09-09 10:40:16][355814560457140][10179 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-09-09 10:40:16][355814560457140][10179 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:40:21][352142130460078][0 ms][INFO] === Request start === [2025-09-09 10:40:21][352142130460078][1 ms][DEBUG] START check_scloud [2025-09-09 10:40:21][352142130460078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:40:21][352142130460078][360 ms][DEBUG] SU: done in 359 ms; outu0_a118 12767 5011 23692508 124540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:40:21][352142130460078][360 ms][DEBUG] targetPkg: running [2025-09-09 10:40:21][352142130460078][360 ms][DEBUG] END check_scloud in 359 ms [2025-09-09 10:40:21][352142130460078][360 ms][DEBUG] START check_boot_completed [2025-09-09 10:40:21][352142130460078][360 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:40:21][352142130460078][406 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:40:21][352142130460078][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:40:21][352142130460078][469 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:40:21][352142130460078][469 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:40:21][352142130460078][469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:40:22][352142130460078][594 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 747\nsuccessfulTxPacketsPerSecond: 8.140859111794384\nretriedTxPackets: 114\nretriedTxPacketsPerSecond: 2.0682344188814814\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 811\nsuccessfulRxPacketsPerSecond: 7.767124615858094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:40:22][352142130460078][594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:40:22][352142130460078][1000 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.203/269.203/269.203/0.000 ms\n [2025-09-09 10:40:22][352142130460078][1000 ms][DEBUG] check_internet: online [2025-09-09 10:40:22][352142130460078][1000 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:40:22][352142130460078][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142130460078\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1820\"}'\'' -e'"" [2025-09-09 10:40:22][352142130460078][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:40:22][352142130460078][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142130460078\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1820\"}'\'' -e'"" [2025-09-09 10:40:27][352142130460078][5796 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcc20862-9acc-49b0-ba17-7b50ea1918bf","id":"QR_dcc20862-9acc-49b0-ba17-7b50ea1918bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:40:27][352142130460078][5952 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-09 10:40:27][352142130460078][5952 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-09 10:40:27][352142130460078][5952 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:40:29][352142130460078][0 ms][INFO] === Request start === [2025-09-09 10:40:29][352142130460078][1 ms][DEBUG] START check_scloud [2025-09-09 10:40:29][352142130460078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:40:30][352142130460078][363 ms][DEBUG] SU: done in 362 ms; outu0_a118 12767 5011 23884392 114044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:40:30][352142130460078][363 ms][DEBUG] targetPkg: running [2025-09-09 10:40:30][352142130460078][363 ms][DEBUG] END check_scloud in 363 ms [2025-09-09 10:40:30][352142130460078][363 ms][DEBUG] START check_boot_completed [2025-09-09 10:40:30][352142130460078][363 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:40:30][352142130460078][410 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:40:30][352142130460078][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:40:30][352142130460078][488 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 10:40:30][352142130460078][488 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 10:40:30][352142130460078][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:40:30][352142130460078][676 ms][DEBUG] SU: done in 187 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 747\nsuccessfulTxPacketsPerSecond: 8.140859111794384\nretriedTxPackets: 114\nretriedTxPacketsPerSecond: 2.0682344188814814\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 811\nsuccessfulRxPacketsPerSecond: 7.767124615858094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:40:30][352142130460078][676 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:40:30][352142130460078][1051 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.260/217.260/217.260/0.000 ms\n [2025-09-09 10:40:30][352142130460078][1051 ms][DEBUG] check_internet: online [2025-09-09 10:40:30][352142130460078][1051 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:40:30][352142130460078][1051 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142130460078\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4400\"}'\'' -e'"" [2025-09-09 10:40:30][352142130460078][1051 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:40:30][352142130460078][1051 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142130460078\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4400\"}'\'' -e'"" [2025-09-09 10:40:36][352142130460078][6330 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e234f7b-1a06-4da2-a12e-e778e6395cd8","id":"QR_8e234f7b-1a06-4da2-a12e-e778e6395cd8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:40:36][352142130460078][6487 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-09 10:40:36][352142130460078][6487 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-09 10:40:36][352142130460078][6487 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:41:03][350226695838448][0 ms][INFO] === Request start === [2025-09-09 10:41:03][350226695838448][1 ms][DEBUG] START check_scloud [2025-09-09 10:41:03][350226695838448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:41:04][350226695838448][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 12767 5011 23923056 99088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:41:04][350226695838448][289 ms][DEBUG] targetPkg: running [2025-09-09 10:41:04][350226695838448][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 10:41:04][350226695838448][289 ms][DEBUG] START check_boot_completed [2025-09-09 10:41:04][350226695838448][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:41:04][350226695838448][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:41:04][350226695838448][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:41:04][350226695838448][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:41:04][350226695838448][382 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:41:04][350226695838448][382 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:41:04][350226695838448][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695838448\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3933\"}'\'' -e'"" [2025-09-09 10:41:04][350226695838448][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:41:04][350226695838448][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695838448\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3933\"}'\'' -e'"" [2025-09-09 10:41:07][350226695838448][3663 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02828a81-7fbb-4b6e-b755-89f6e7fa60ec","id":"QR_02828a81-7fbb-4b6e-b755-89f6e7fa60ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:41:07][350226695838448][3819 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=3343 [2025-09-09 10:41:07][350226695838448][3819 ms][DEBUG] END runCmdUntilRes#1 in 3437 ms [2025-09-09 10:41:07][350226695838448][3819 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:41:10][350226695838448][0 ms][INFO] === Request start === [2025-09-09 10:41:10][350226695838448][1 ms][DEBUG] START check_scloud [2025-09-09 10:41:10][350226695838448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:41:10][350226695838448][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 12767 5011 24081912 105628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:41:10][350226695838448][340 ms][DEBUG] targetPkg: running [2025-09-09 10:41:10][350226695838448][340 ms][DEBUG] END check_scloud in 340 ms [2025-09-09 10:41:10][350226695838448][340 ms][DEBUG] START check_boot_completed [2025-09-09 10:41:10][350226695838448][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:41:10][350226695838448][387 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:41:10][350226695838448][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:41:10][350226695838448][435 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:41:10][350226695838448][435 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 10:41:10][350226695838448][435 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:41:10][350226695838448][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695838448\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4549\"}'\'' -e'"" [2025-09-09 10:41:10][350226695838448][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:41:10][350226695838448][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695838448\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4549\"}'\'' -e'"" [2025-09-09 10:41:15][350226695838448][5089 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ddf5dc2-c2dc-44a5-befe-4ed30c495250","id":"QR_7ddf5dc2-c2dc-44a5-befe-4ed30c495250","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:41:15][350226695838448][5245 ms][DEBUG] proc_open done in 4809 ms; code=255; res.len=3343 [2025-09-09 10:41:15][350226695838448][5245 ms][DEBUG] END runCmdUntilRes#1 in 4810 ms [2025-09-09 10:41:15][350226695838448][5245 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:41:19][351123969000467][0 ms][INFO] === Request start === [2025-09-09 10:41:19][351123969000467][1 ms][DEBUG] START check_scloud [2025-09-09 10:41:19][351123969000467][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:41:19][351123969000467][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 12767 5011 24250688 117244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:41:19][351123969000467][319 ms][DEBUG] targetPkg: running [2025-09-09 10:41:19][351123969000467][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 10:41:19][351123969000467][319 ms][DEBUG] START check_boot_completed [2025-09-09 10:41:19][351123969000467][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:41:19][351123969000467][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:41:19][351123969000467][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:41:20][351123969000467][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:41:20][351123969000467][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:41:20][351123969000467][428 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:41:20][351123969000467][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123969000467\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1386\"}'\'' -e'"" [2025-09-09 10:41:20][351123969000467][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:41:20][351123969000467][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123969000467\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1386\"}'\'' -e'"" [2025-09-09 10:41:23][351123969000467][3865 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f79502bb-b889-426c-a546-ef699d365350","id":"QR_f79502bb-b889-426c-a546-ef699d365350","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:41:23][351123969000467][4021 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-09 10:41:23][351123969000467][4021 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-09 10:41:23][351123969000467][4021 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:41:25][351123969000467][0 ms][INFO] === Request start === [2025-09-09 10:41:25][351123969000467][1 ms][DEBUG] START check_scloud [2025-09-09 10:41:25][351123969000467][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:41:26][351123969000467][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 12767 5011 24384996 127520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:41:26][351123969000467][256 ms][DEBUG] targetPkg: running [2025-09-09 10:41:26][351123969000467][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 10:41:26][351123969000467][256 ms][DEBUG] START check_boot_completed [2025-09-09 10:41:26][351123969000467][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:41:26][351123969000467][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:41:26][351123969000467][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:41:26][351123969000467][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:41:26][351123969000467][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:41:26][351123969000467][350 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:41:26][351123969000467][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123969000467\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7709\"}'\'' -e'"" [2025-09-09 10:41:26][351123969000467][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:41:26][351123969000467][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123969000467\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7709\"}'\'' -e'"" [2025-09-09 10:41:32][351123969000467][6255 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbc67a8d-1361-4df1-9577-8faabe47b18d","id":"QR_dbc67a8d-1361-4df1-9577-8faabe47b18d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:41:32][351123969000467][6411 ms][DEBUG] proc_open done in 6061 ms; code=255; res.len=3343 [2025-09-09 10:41:32][351123969000467][6411 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-09-09 10:41:32][351123969000467][6411 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:44:04][353170568713378][1 ms][INFO] === Request start === [2025-09-09 10:44:04][353170568713378][1 ms][DEBUG] START check_scloud [2025-09-09 10:44:04][353170568713378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:44:04][353170568713378][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 12767 5011 24442292 139112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:44:04][353170568713378][295 ms][DEBUG] targetPkg: running [2025-09-09 10:44:04][353170568713378][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 10:44:04][353170568713378][295 ms][DEBUG] START check_boot_completed [2025-09-09 10:44:04][353170568713378][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:44:04][353170568713378][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:44:04][353170568713378][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:44:04][353170568713378][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:44:04][353170568713378][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:44:04][353170568713378][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:44:04][353170568713378][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 747\nsuccessfulTxPacketsPerSecond: 8.140859111794384\nretriedTxPackets: 114\nretriedTxPacketsPerSecond: 2.0682344188814814\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 811\nsuccessfulRxPacketsPerSecond: 7.767124615858094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:44:04][353170568713378][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:44:04][353170568713378][952 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.678/279.678/279.678/0.000 ms\n [2025-09-09 10:44:04][353170568713378][952 ms][DEBUG] check_internet: online [2025-09-09 10:44:04][353170568713378][952 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:44:04][353170568713378][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568713378\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6745\"}'\'' -e'"" [2025-09-09 10:44:04][353170568713378][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:44:04][353170568713378][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568713378\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6745\"}'\'' -e'"" [2025-09-09 10:44:09][353170568713378][5794 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81bed127-3b8d-4c1a-9aa7-64af8ada08e8","id":"QR_81bed127-3b8d-4c1a-9aa7-64af8ada08e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:44:09][353170568713378][5950 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 10:44:09][353170568713378][5950 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 10:44:09][353170568713378][5950 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:44:12][353170568713378][0 ms][INFO] === Request start === [2025-09-09 10:44:12][353170568713378][1 ms][DEBUG] START check_scloud [2025-09-09 10:44:12][353170568713378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:44:12][353170568713378][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 12767 5011 24566460 150560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:44:12][353170568713378][259 ms][DEBUG] targetPkg: running [2025-09-09 10:44:12][353170568713378][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 10:44:12][353170568713378][259 ms][DEBUG] START check_boot_completed [2025-09-09 10:44:12][353170568713378][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:44:12][353170568713378][305 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 10:44:12][353170568713378][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:44:12][353170568713378][367 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:44:12][353170568713378][367 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 10:44:12][353170568713378][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:44:12][353170568713378][523 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 747\nsuccessfulTxPacketsPerSecond: 8.140859111794384\nretriedTxPackets: 114\nretriedTxPacketsPerSecond: 2.0682344188814814\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 811\nsuccessfulRxPacketsPerSecond: 7.767124615858094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:44:12][353170568713378][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:44:13][353170568713378][945 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.258/322.258/322.258/0.000 ms\n [2025-09-09 10:44:13][353170568713378][945 ms][DEBUG] check_internet: online [2025-09-09 10:44:13][353170568713378][945 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:44:13][353170568713378][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568713378\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7092\"}'\'' -e'"" [2025-09-09 10:44:13][353170568713378][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:44:13][353170568713378][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568713378\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7092\"}'\'' -e'"" [2025-09-09 10:44:18][353170568713378][5913 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_353e0cd8-2b76-4a04-8c2a-7131f7ec2b61","id":"QR_353e0cd8-2b76-4a04-8c2a-7131f7ec2b61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:44:18][353170568713378][6069 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-09 10:44:18][353170568713378][6069 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-09 10:44:18][353170568713378][6069 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:48:04][350603380901170][1 ms][INFO] === Request start === [2025-09-09 10:48:04][350603380901170][1 ms][DEBUG] START check_scloud [2025-09-09 10:48:04][350603380901170][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:48:04][350603380901170][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 12767 5011 24679292 155684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:48:04][350603380901170][319 ms][DEBUG] targetPkg: running [2025-09-09 10:48:04][350603380901170][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 10:48:04][350603380901170][319 ms][DEBUG] START check_boot_completed [2025-09-09 10:48:04][350603380901170][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:48:04][350603380901170][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:48:04][350603380901170][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:48:04][350603380901170][428 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:48:04][350603380901170][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:48:04][350603380901170][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:48:05][350603380901170][553 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1112\nsuccessfulTxPacketsPerSecond: 1.4729858431935947\nretriedTxPackets: 202\nretriedTxPacketsPerSecond: 0.3551308334274968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1138\nsuccessfulRxPacketsPerSecond: 1.3196338923953574\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:48:05][350603380901170][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:48:06][350603380901170][1912 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.313/299.313/299.313/0.000 ms\n [2025-09-09 10:48:06][350603380901170][1912 ms][DEBUG] check_internet: online [2025-09-09 10:48:06][350603380901170][1912 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:48:06][350603380901170][1912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603380901170\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7610\"}'\'' -e'"" [2025-09-09 10:48:06][350603380901170][1912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:48:06][350603380901170][1912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603380901170\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7610\"}'\'' -e'"" [2025-09-09 10:48:11][350603380901170][7052 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c117871e-faec-4a45-9741-c3a27f9f5f7b","id":"QR_c117871e-faec-4a45-9741-c3a27f9f5f7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:48:11][350603380901170][7208 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 10:48:11][350603380901170][7208 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-09 10:48:11][350603380901170][7208 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:48:15][350603380901170][0 ms][INFO] === Request start === [2025-09-09 10:48:15][350603380901170][0 ms][DEBUG] START check_scloud [2025-09-09 10:48:15][350603380901170][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:48:15][350603380901170][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 12767 5011 24829956 165940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:48:15][350603380901170][286 ms][DEBUG] targetPkg: running [2025-09-09 10:48:15][350603380901170][286 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 10:48:15][350603380901170][286 ms][DEBUG] START check_boot_completed [2025-09-09 10:48:15][350603380901170][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:48:15][350603380901170][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:48:15][350603380901170][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:48:15][350603380901170][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:48:15][350603380901170][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:48:15][350603380901170][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:48:15][350603380901170][474 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1112\nsuccessfulTxPacketsPerSecond: 1.4729858431935947\nretriedTxPackets: 202\nretriedTxPacketsPerSecond: 0.3551308334274968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1138\nsuccessfulRxPacketsPerSecond: 1.3196338923953574\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:48:15][350603380901170][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:48:15][350603380901170][833 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.679/257.679/257.679/0.000 ms\n [2025-09-09 10:48:15][350603380901170][833 ms][DEBUG] check_internet: online [2025-09-09 10:48:15][350603380901170][833 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:48:15][350603380901170][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603380901170\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1535\"}'\'' -e'"" [2025-09-09 10:48:15][350603380901170][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:48:15][350603380901170][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603380901170\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1535\"}'\'' -e'"" [2025-09-09 10:48:19][350603380901170][4550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c31e69c-97c3-4233-987e-f32598092017","id":"QR_4c31e69c-97c3-4233-987e-f32598092017","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:48:19][350603380901170][4707 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 10:48:19][350603380901170][4707 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-09-09 10:48:19][350603380901170][4707 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:52:03][350942551689564][1 ms][INFO] === Request start === [2025-09-09 10:52:03][350942551689564][1 ms][DEBUG] START check_scloud [2025-09-09 10:52:03][350942551689564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:52:03][350942551689564][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 12767 5011 24978628 174180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:52:03][350942551689564][311 ms][DEBUG] targetPkg: running [2025-09-09 10:52:03][350942551689564][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 10:52:03][350942551689564][311 ms][DEBUG] START check_boot_completed [2025-09-09 10:52:03][350942551689564][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:52:04][350942551689564][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:52:04][350942551689564][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:52:04][350942551689564][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:52:04][350942551689564][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:52:04][350942551689564][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:52:04][350942551689564][530 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1420\nsuccessfulTxPacketsPerSecond: 1.0231198511825672\nretriedTxPackets: 258\nretriedTxPacketsPerSecond: 0.1860217911241031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 0.8503853308530428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:52:04][350942551689564][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:52:04][350942551689564][952 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.489/320.489/320.489/0.000 ms\n [2025-09-09 10:52:04][350942551689564][952 ms][DEBUG] check_internet: online [2025-09-09 10:52:04][350942551689564][952 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:52:04][350942551689564][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350942551689564\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7744\"}'\'' -e'"" [2025-09-09 10:52:04][350942551689564][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:52:04][350942551689564][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350942551689564\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7744\"}'\'' -e'"" [2025-09-09 10:52:08][350942551689564][5217 ms][DEBUG] proc_open done in 4264 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 10:52:08][350942551689564][5217 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-09 10:52:08][350942551689564][5217 ms][WARN] Detected error: Process with pid 12767 either refused to load frida-agent, or terminated during injectionProcess with pid 12767 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 10:52:08][350942551689564][5217 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:52:09][350942551689564][5482 ms][DEBUG] SU: done in 265 ms; outsystem 5431 5011 12556884 249452 ep_poll 0 S system_server\n [2025-09-09 10:52:09][350942551689564][5482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 10:52:09][350942551689564][5623 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 10:52:09][350942551689564][5623 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 10:52:09][350942551689564][5623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:52:09][350942551689564][5750 ms][DEBUG] SU: done in 127 ms; out [2025-09-09 10:52:09][350942551689564][5750 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:52:09][350942551689564][5951 ms][DEBUG] SU: done in 201 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:52:11][350942551689564][7966 ms][DEBUG] START check_boot_completed [2025-09-09 10:52:11][350942551689564][7966 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:52:11][350942551689564][8013 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:52:11][350942551689564][8013 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:52:11][350942551689564][8060 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:52:11][350942551689564][8060 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:52:14][350942551689564][11074 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 10:52:14][350942551689564][11075 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350942551689564\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7744\"}'\'' -e'"" [2025-09-09 10:52:18][350942551689564][14683 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a856c19-5c12-4e8c-8c45-e99bcbf33cd9","id":"QR_6a856c19-5c12-4e8c-8c45-e99bcbf33cd9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:52:18][350942551689564][14839 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-09-09 10:52:18][350942551689564][14839 ms][DEBUG] END runCmdUntilRes#2 in 3765 ms [2025-09-09 10:52:18][350942551689564][14839 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:52:20][350942551689564][0 ms][INFO] === Request start === [2025-09-09 10:52:20][350942551689564][1 ms][DEBUG] START check_scloud [2025-09-09 10:52:20][350942551689564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:52:21][350942551689564][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 18515 5011 23605764 124540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:52:21][350942551689564][246 ms][DEBUG] targetPkg: running [2025-09-09 10:52:21][350942551689564][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 10:52:21][350942551689564][246 ms][DEBUG] START check_boot_completed [2025-09-09 10:52:21][350942551689564][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:52:21][350942551689564][292 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:52:21][350942551689564][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:52:21][350942551689564][355 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:52:21][350942551689564][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:52:21][350942551689564][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:52:21][350942551689564][495 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1420\nsuccessfulTxPacketsPerSecond: 1.0231198511825672\nretriedTxPackets: 258\nretriedTxPacketsPerSecond: 0.1860217911241031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 0.8503853308530428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:52:21][350942551689564][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:52:21][350942551689564][823 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.089/225.089/225.089/0.000 ms\n [2025-09-09 10:52:21][350942551689564][824 ms][DEBUG] check_internet: online [2025-09-09 10:52:21][350942551689564][824 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:52:21][350942551689564][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350942551689564\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8477\"}'\'' -e'"" [2025-09-09 10:52:21][350942551689564][824 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:52:21][350942551689564][824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350942551689564\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8477\"}'\'' -e'"" [2025-09-09 10:52:26][350942551689564][5869 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fba4051-45c3-4679-af10-e11793707c95","id":"QR_6fba4051-45c3-4679-af10-e11793707c95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:52:26][350942551689564][6025 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 10:52:26][350942551689564][6025 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 10:52:26][350942551689564][6026 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:53:03][350013882884660][0 ms][INFO] === Request start === [2025-09-09 10:53:03][350013882884660][1 ms][DEBUG] START check_scloud [2025-09-09 10:53:03][350013882884660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:53:03][350013882884660][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 18515 5011 23644448 138280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:53:03][350013882884660][319 ms][DEBUG] targetPkg: running [2025-09-09 10:53:03][350013882884660][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 10:53:03][350013882884660][319 ms][DEBUG] START check_boot_completed [2025-09-09 10:53:03][350013882884660][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:53:03][350013882884660][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:53:03][350013882884660][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:53:03][350013882884660][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:53:03][350013882884660][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:53:03][350013882884660][413 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:53:03][350013882884660][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882884660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3460\"}'\'' -e'"" [2025-09-09 10:53:03][350013882884660][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:53:03][350013882884660][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882884660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3460\"}'\'' -e'"" [2025-09-09 10:53:07][350013882884660][3709 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45208af8-6096-4157-9387-cecb66dad75d","id":"QR_45208af8-6096-4157-9387-cecb66dad75d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:53:07][350013882884660][3865 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-09 10:53:07][350013882884660][3865 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-09 10:53:07][350013882884660][3865 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:53:09][350013882884660][0 ms][INFO] === Request start === [2025-09-09 10:53:09][350013882884660][1 ms][DEBUG] START check_scloud [2025-09-09 10:53:09][350013882884660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:53:09][350013882884660][245 ms][DEBUG] SU: done in 245 ms; outu0_a118 18515 5011 23793192 150152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:53:09][350013882884660][245 ms][DEBUG] targetPkg: running [2025-09-09 10:53:09][350013882884660][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 10:53:09][350013882884660][246 ms][DEBUG] START check_boot_completed [2025-09-09 10:53:09][350013882884660][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:53:09][350013882884660][290 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 10:53:09][350013882884660][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:53:09][350013882884660][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:53:09][350013882884660][337 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-09 10:53:09][350013882884660][337 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:53:09][350013882884660][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882884660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1108\"}'\'' -e'"" [2025-09-09 10:53:09][350013882884660][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:53:09][350013882884660][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882884660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1108\"}'\'' -e'"" [2025-09-09 10:53:14][350013882884660][4992 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4907892f-8b56-455e-a955-06b4e07aeaf7","id":"QR_4907892f-8b56-455e-a955-06b4e07aeaf7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:53:14][350013882884660][5148 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 10:53:14][350013882884660][5148 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 10:53:14][350013882884660][5148 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:53:19][354882179186070][0 ms][INFO] === Request start === [2025-09-09 10:53:19][354882179186070][1 ms][DEBUG] START check_scloud [2025-09-09 10:53:19][354882179186070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:53:19][354882179186070][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 18515 5011 23919344 160612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:53:19][354882179186070][257 ms][DEBUG] targetPkg: running [2025-09-09 10:53:19][354882179186070][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 10:53:19][354882179186070][257 ms][DEBUG] START check_boot_completed [2025-09-09 10:53:19][354882179186070][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:53:19][354882179186070][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:53:19][354882179186070][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:53:19][354882179186070][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:53:19][354882179186070][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:53:19][354882179186070][334 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:53:19][354882179186070][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882179186070\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5913\"}'\'' -e'"" [2025-09-09 10:53:19][354882179186070][334 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:53:19][354882179186070][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882179186070\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5913\"}'\'' -e'"" [2025-09-09 10:53:24][354882179186070][4911 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de4a55e0-c310-43a8-8fb2-3e78b49b5a0a","id":"QR_de4a55e0-c310-43a8-8fb2-3e78b49b5a0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:53:24][354882179186070][5068 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 10:53:24][354882179186070][5068 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 10:53:24][354882179186070][5068 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:53:26][354882179186070][1 ms][INFO] === Request start === [2025-09-09 10:53:26][354882179186070][1 ms][DEBUG] START check_scloud [2025-09-09 10:53:26][354882179186070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:53:26][354882179186070][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 18515 5011 24055700 171584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:53:26][354882179186070][272 ms][DEBUG] targetPkg: running [2025-09-09 10:53:26][354882179186070][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-09 10:53:26][354882179186070][272 ms][DEBUG] START check_boot_completed [2025-09-09 10:53:26][354882179186070][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:53:26][354882179186070][303 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:53:26][354882179186070][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:53:26][354882179186070][351 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 10:53:26][354882179186070][351 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 10:53:26][354882179186070][351 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:53:26][354882179186070][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882179186070\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4248\"}'\'' -e'"" [2025-09-09 10:53:26][354882179186070][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:53:26][354882179186070][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882179186070\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4248\"}'\'' -e'"" [2025-09-09 10:53:31][354882179186070][4974 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8acdba33-3e9f-4e20-a28f-657eb256d1e0","id":"QR_8acdba33-3e9f-4e20-a28f-657eb256d1e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:53:31][354882179186070][5130 ms][DEBUG] proc_open done in 4778 ms; code=255; res.len=3343 [2025-09-09 10:53:31][354882179186070][5130 ms][DEBUG] END runCmdUntilRes#1 in 4778 ms [2025-09-09 10:53:31][354882179186070][5130 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:54:03][351885213417438][0 ms][INFO] === Request start === [2025-09-09 10:54:03][351885213417438][1 ms][DEBUG] START check_scloud [2025-09-09 10:54:03][351885213417438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:54:03][351885213417438][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18515 5011 24187824 183556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:54:03][351885213417438][309 ms][DEBUG] targetPkg: running [2025-09-09 10:54:03][351885213417438][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 10:54:03][351885213417438][309 ms][DEBUG] START check_boot_completed [2025-09-09 10:54:03][351885213417438][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:54:03][351885213417438][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:54:03][351885213417438][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:54:03][351885213417438][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:54:03][351885213417438][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:54:03][351885213417438][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:54:03][351885213417438][497 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1420\nsuccessfulTxPacketsPerSecond: 1.0231198511825672\nretriedTxPackets: 258\nretriedTxPacketsPerSecond: 0.1860217911241031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 0.8503853308530428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:54:03][351885213417438][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:54:05][351885213417438][1855 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.504/305.504/305.504/0.000 ms\n [2025-09-09 10:54:05][351885213417438][1855 ms][DEBUG] check_internet: online [2025-09-09 10:54:05][351885213417438][1856 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:54:05][351885213417438][1856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885213417438\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2062\"}'\'' -e'"" [2025-09-09 10:54:05][351885213417438][1856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:54:05][351885213417438][1856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885213417438\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2062\"}'\'' -e'"" [2025-09-09 10:54:08][351885213417438][5480 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4abf2a54-9411-47fe-8138-4d4ae8446ad6","id":"QR_4abf2a54-9411-47fe-8138-4d4ae8446ad6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:54:08][351885213417438][5636 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-09 10:54:08][351885213417438][5636 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-09 10:54:08][351885213417438][5636 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:54:11][359461650581987][0 ms][INFO] === Request start === [2025-09-09 10:54:11][359461650581987][1 ms][DEBUG] START check_scloud [2025-09-09 10:54:11][359461650581987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:54:11][359461650581987][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18515 5011 24348808 194996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:54:11][359461650581987][305 ms][DEBUG] targetPkg: running [2025-09-09 10:54:11][359461650581987][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 10:54:11][359461650581987][305 ms][DEBUG] START check_boot_completed [2025-09-09 10:54:11][359461650581987][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:54:11][359461650581987][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:54:11][359461650581987][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:54:11][359461650581987][399 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 10:54:11][359461650581987][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:54:11][359461650581987][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:54:11][359461650581987][555 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1420\nsuccessfulTxPacketsPerSecond: 1.0231198511825672\nretriedTxPackets: 258\nretriedTxPacketsPerSecond: 0.1860217911241031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 0.8503853308530428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:54:11][359461650581987][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:54:12][359461650581987][961 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.034/310.034/310.034/0.000 ms\n [2025-09-09 10:54:12][359461650581987][961 ms][DEBUG] check_internet: online [2025-09-09 10:54:12][359461650581987][961 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:54:12][359461650581987][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461650581987\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4064\"}'\'' -e'"" [2025-09-09 10:54:12][359461650581987][961 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:54:12][359461650581987][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461650581987\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4064\"}'\'' -e'"" [2025-09-09 10:54:15][359461650581987][4585 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fa79855-bfbf-446e-9e93-93c73e4fee20","id":"QR_3fa79855-bfbf-446e-9e93-93c73e4fee20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:54:15][359461650581987][4741 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-09 10:54:15][359461650581987][4741 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-09 10:54:15][359461650581987][4742 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:54:17][356414811551749][1 ms][INFO] === Request start === [2025-09-09 10:54:17][356414811551749][1 ms][DEBUG] START check_scloud [2025-09-09 10:54:17][356414811551749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:54:18][356414811551749][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 18515 5011 24491344 206620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:54:18][356414811551749][244 ms][DEBUG] targetPkg: running [2025-09-09 10:54:18][356414811551749][244 ms][DEBUG] END check_scloud in 244 ms [2025-09-09 10:54:18][356414811551749][244 ms][DEBUG] START check_boot_completed [2025-09-09 10:54:18][356414811551749][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:54:18][356414811551749][290 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:54:18][356414811551749][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:54:18][356414811551749][353 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:54:18][356414811551749][353 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:54:18][356414811551749][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:54:18][356414811551749][509 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1420\nsuccessfulTxPacketsPerSecond: 1.0231198511825672\nretriedTxPackets: 258\nretriedTxPacketsPerSecond: 0.1860217911241031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 0.8503853308530428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:54:18][356414811551749][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:54:18][356414811551749][916 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.152/269.152/269.152/0.000 ms\n [2025-09-09 10:54:18][356414811551749][916 ms][DEBUG] check_internet: online [2025-09-09 10:54:18][356414811551749][916 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:54:18][356414811551749][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811551749\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8600\"}'\'' -e'"" [2025-09-09 10:54:18][356414811551749][916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:54:18][356414811551749][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811551749\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8600\"}'\'' -e'"" [2025-09-09 10:54:22][356414811551749][4320 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dedf50a3-1c0b-4b8c-a483-c09a7003a286","id":"QR_dedf50a3-1c0b-4b8c-a483-c09a7003a286","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:54:22][356414811551749][4477 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-09 10:54:22][356414811551749][4477 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-09 10:54:22][356414811551749][4477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:54:25][359186102799438][0 ms][INFO] === Request start === [2025-09-09 10:54:25][359186102799438][1 ms][DEBUG] START check_scloud [2025-09-09 10:54:25][359186102799438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:54:25][359186102799438][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 18515 5011 24629684 217620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:54:25][359186102799438][254 ms][DEBUG] targetPkg: running [2025-09-09 10:54:25][359186102799438][254 ms][DEBUG] END check_scloud in 254 ms [2025-09-09 10:54:25][359186102799438][254 ms][DEBUG] START check_boot_completed [2025-09-09 10:54:25][359186102799438][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:54:25][359186102799438][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:54:25][359186102799438][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:54:25][359186102799438][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:54:25][359186102799438][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 10:54:25][359186102799438][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:54:26][359186102799438][473 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1420\nsuccessfulTxPacketsPerSecond: 1.0231198511825672\nretriedTxPackets: 258\nretriedTxPacketsPerSecond: 0.1860217911241031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1394\nsuccessfulRxPacketsPerSecond: 0.8503853308530428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:54:26][359186102799438][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:54:26][359186102799438][895 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.006/318.006/318.006/0.000 ms\n [2025-09-09 10:54:26][359186102799438][895 ms][DEBUG] check_internet: online [2025-09-09 10:54:26][359186102799438][895 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:54:26][359186102799438][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359186102799438\",\"model\":\"SM-N975U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5659\"}'\'' -e'"" [2025-09-09 10:54:26][359186102799438][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:54:26][359186102799438][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359186102799438\",\"model\":\"SM-N975U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5659\"}'\'' -e'"" [2025-09-09 10:54:31][359186102799438][5737 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a60933c-62fc-42a0-9275-6509a4a45808","id":"QR_4a60933c-62fc-42a0-9275-6509a4a45808","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:54:31][359186102799438][5893 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 10:54:31][359186102799438][5893 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 10:54:31][359186102799438][5893 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:55:03][352698479157021][0 ms][INFO] === Request start === [2025-09-09 10:55:03][352698479157021][1 ms][DEBUG] START check_scloud [2025-09-09 10:55:03][352698479157021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:55:03][352698479157021][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18515 5011 24749520 230304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:55:03][352698479157021][295 ms][DEBUG] targetPkg: running [2025-09-09 10:55:03][352698479157021][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 10:55:03][352698479157021][295 ms][DEBUG] START check_boot_completed [2025-09-09 10:55:03][352698479157021][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:55:03][352698479157021][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:55:03][352698479157021][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:55:03][352698479157021][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:55:03][352698479157021][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:55:03][352698479157021][373 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:55:03][352698479157021][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698479157021\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5725\"}'\'' -e'"" [2025-09-09 10:55:03][352698479157021][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:55:03][352698479157021][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698479157021\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5725\"}'\'' -e'"" [2025-09-09 10:55:08][352698479157021][4981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d01bcb7-b295-4d0b-b78f-e9d3caa2a9b0","id":"QR_4d01bcb7-b295-4d0b-b78f-e9d3caa2a9b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:55:08][352698479157021][5137 ms][DEBUG] proc_open done in 4765 ms; code=255; res.len=3343 [2025-09-09 10:55:08][352698479157021][5138 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-09 10:55:08][352698479157021][5138 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:55:10][352698479157021][0 ms][INFO] === Request start === [2025-09-09 10:55:10][352698479157021][1 ms][DEBUG] START check_scloud [2025-09-09 10:55:10][352698479157021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:55:10][352698479157021][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18515 5011 24900312 241108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:55:10][352698479157021][305 ms][DEBUG] targetPkg: running [2025-09-09 10:55:10][352698479157021][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 10:55:10][352698479157021][305 ms][DEBUG] START check_boot_completed [2025-09-09 10:55:10][352698479157021][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:55:11][352698479157021][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 10:55:11][352698479157021][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:55:11][352698479157021][400 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 10:55:11][352698479157021][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 10:55:11][352698479157021][400 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:55:11][352698479157021][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698479157021\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6732\"}'\'' -e'"" [2025-09-09 10:55:11][352698479157021][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:55:11][352698479157021][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698479157021\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6732\"}'\'' -e'"" [2025-09-09 10:55:14][352698479157021][4163 ms][DEBUG] proc_open done in 3762 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 10:55:14][352698479157021][4163 ms][DEBUG] END runCmdUntilRes#1 in 3763 ms [2025-09-09 10:55:14][352698479157021][4163 ms][WARN] Detected error: Process with pid 18515 either refused to load frida-agent, or terminated during injectionProcess with pid 18515 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 10:55:14][352698479157021][4163 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 10:55:15][352698479157021][4459 ms][DEBUG] SU: done in 296 ms; outsystem 5431 5011 12574320 245920 ep_poll 0 S system_server\n [2025-09-09 10:55:15][352698479157021][4460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 10:55:15][352698479157021][4600 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 10:55:15][352698479157021][4600 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 10:55:15][352698479157021][4600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 10:55:15][352698479157021][4725 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 10:55:15][352698479157021][4725 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 10:55:15][352698479157021][4881 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 10:55:17][352698479157021][6896 ms][DEBUG] START check_boot_completed [2025-09-09 10:55:17][352698479157021][6896 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:55:17][352698479157021][6943 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:55:17][352698479157021][6943 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:55:17][352698479157021][6990 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:55:17][352698479157021][6990 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 10:55:20][352698479157021][10005 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 10:55:20][352698479157021][10005 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698479157021\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6732\"}'\'' -e'"" [2025-09-09 10:55:25][352698479157021][14769 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75da6cae-c82f-454f-b5e1-047394dd45c1","id":"QR_75da6cae-c82f-454f-b5e1-047394dd45c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:55:25][352698479157021][14926 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-09 10:55:25][352698479157021][14926 ms][DEBUG] END runCmdUntilRes#2 in 4921 ms [2025-09-09 10:55:25][352698479157021][14926 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:58:03][350178737698928][1 ms][INFO] === Request start === [2025-09-09 10:58:03][350178737698928][1 ms][DEBUG] START check_scloud [2025-09-09 10:58:03][350178737698928][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:58:04][350178737698928][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19842 5011 23647428 127452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:58:04][350178737698928][304 ms][DEBUG] targetPkg: running [2025-09-09 10:58:04][350178737698928][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 10:58:04][350178737698928][304 ms][DEBUG] START check_boot_completed [2025-09-09 10:58:04][350178737698928][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:58:04][350178737698928][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:58:04][350178737698928][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:58:04][350178737698928][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:58:04][350178737698928][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:58:04][350178737698928][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:58:04][350178737698928][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1802\nsuccessfulTxPacketsPerSecond: 0.8139695606100165\nretriedTxPackets: 361\nretriedTxPacketsPerSecond: 0.23036874356887257\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1720\nsuccessfulRxPacketsPerSecond: 0.6911062307066177\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:58:04][350178737698928][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:58:04][350178737698928][960 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.219/335.219/335.219/0.000 ms\n [2025-09-09 10:58:04][350178737698928][960 ms][DEBUG] check_internet: online [2025-09-09 10:58:04][350178737698928][961 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:58:04][350178737698928][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737698928\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6899\"}'\'' -e'"" [2025-09-09 10:58:04][350178737698928][961 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:58:04][350178737698928][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737698928\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6899\"}'\'' -e'"" [2025-09-09 10:58:09][350178737698928][6006 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41d0700f-089f-4ff8-99dc-2ddadd039983","id":"QR_41d0700f-089f-4ff8-99dc-2ddadd039983","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:58:09][350178737698928][6162 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 10:58:09][350178737698928][6162 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 10:58:09][350178737698928][6162 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:58:12][350178737698928][0 ms][INFO] === Request start === [2025-09-09 10:58:12][350178737698928][1 ms][DEBUG] START check_scloud [2025-09-09 10:58:12][350178737698928][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:58:12][350178737698928][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 19842 5011 23782788 138676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:58:12][350178737698928][298 ms][DEBUG] targetPkg: running [2025-09-09 10:58:12][350178737698928][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 10:58:12][350178737698928][298 ms][DEBUG] START check_boot_completed [2025-09-09 10:58:12][350178737698928][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:58:12][350178737698928][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:58:12][350178737698928][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:58:12][350178737698928][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:58:12][350178737698928][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:58:12][350178737698928][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 10:58:12][350178737698928][485 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1802\nsuccessfulTxPacketsPerSecond: 0.8139695606100165\nretriedTxPackets: 361\nretriedTxPacketsPerSecond: 0.23036874356887257\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1720\nsuccessfulRxPacketsPerSecond: 0.6911062307066177\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 10:58:12][350178737698928][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 10:58:13][350178737698928][923 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=337 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 337.017/337.017/337.017/0.000 ms\n [2025-09-09 10:58:13][350178737698928][923 ms][DEBUG] check_internet: online [2025-09-09 10:58:13][350178737698928][923 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:58:13][350178737698928][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737698928\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7393\"}'\'' -e'"" [2025-09-09 10:58:13][350178737698928][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:58:13][350178737698928][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737698928\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7393\"}'\'' -e'"" [2025-09-09 10:58:18][350178737698928][5968 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fce0f1da-3544-48c2-b267-571b8e64f559","id":"QR_fce0f1da-3544-48c2-b267-571b8e64f559","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:58:18][350178737698928][6124 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 10:58:18][350178737698928][6124 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 10:58:18][350178737698928][6124 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:59:04][350249606611555][0 ms][INFO] === Request start === [2025-09-09 10:59:04][350249606611555][1 ms][DEBUG] START check_scloud [2025-09-09 10:59:04][350249606611555][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:59:04][350249606611555][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19842 5011 23904644 149896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:59:04][350249606611555][316 ms][DEBUG] targetPkg: running [2025-09-09 10:59:04][350249606611555][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 10:59:04][350249606611555][316 ms][DEBUG] START check_boot_completed [2025-09-09 10:59:04][350249606611555][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:59:04][350249606611555][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 10:59:04][350249606611555][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:59:04][350249606611555][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 10:59:04][350249606611555][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 10:59:04][350249606611555][426 ms][DEBUG] rawBody.length=1150 [2025-09-09 10:59:04][350249606611555][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249606611555\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2520\"}'\'' -e'"" [2025-09-09 10:59:04][350249606611555][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:59:04][350249606611555][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249606611555\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2520\"}'\'' -e'"" [2025-09-09 10:59:07][350249606611555][3877 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9afe32e3-7ac8-491b-84ed-7e3fc60df14b","id":"QR_9afe32e3-7ac8-491b-84ed-7e3fc60df14b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:59:08][350249606611555][4034 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-09 10:59:08][350249606611555][4034 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-09 10:59:08][350249606611555][4034 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 10:59:10][350249606611555][0 ms][INFO] === Request start === [2025-09-09 10:59:10][350249606611555][1 ms][DEBUG] START check_scloud [2025-09-09 10:59:10][350249606611555][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 10:59:10][350249606611555][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19842 5011 24084108 160836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 10:59:10][350249606611555][307 ms][DEBUG] targetPkg: running [2025-09-09 10:59:10][350249606611555][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 10:59:10][350249606611555][307 ms][DEBUG] START check_boot_completed [2025-09-09 10:59:10][350249606611555][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 10:59:10][350249606611555][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 10:59:10][350249606611555][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 10:59:10][350249606611555][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 10:59:10][350249606611555][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 10:59:10][350249606611555][385 ms][DEBUG] rawBody.length=1160 [2025-09-09 10:59:10][350249606611555][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249606611555\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7991\"}'\'' -e'"" [2025-09-09 10:59:10][350249606611555][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 10:59:10][350249606611555][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249606611555\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7991\"}'\'' -e'"" [2025-09-09 10:59:15][350249606611555][5228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0cf74692-211a-4b92-b534-0f603299665b","id":"QR_0cf74692-211a-4b92-b534-0f603299665b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 10:59:15][350249606611555][5384 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-09 10:59:15][350249606611555][5384 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 10:59:15][350249606611555][5384 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:03:03][352288968433529][1 ms][INFO] === Request start === [2025-09-09 11:03:03][352288968433529][1 ms][DEBUG] START check_scloud [2025-09-09 11:03:03][352288968433529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:03:03][352288968433529][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 19842 5011 24203852 171704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:03:03][352288968433529][254 ms][DEBUG] targetPkg: running [2025-09-09 11:03:03][352288968433529][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 11:03:03][352288968433529][254 ms][DEBUG] START check_boot_completed [2025-09-09 11:03:03][352288968433529][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:03:03][352288968433529][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:03:03][352288968433529][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:03:04][352288968433529][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:03:04][352288968433529][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:03:04][352288968433529][332 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:03:04][352288968433529][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968433529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1352\"}'\'' -e'"" [2025-09-09 11:03:04][352288968433529][332 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:03:04][352288968433529][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968433529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1352\"}'\'' -e'"" [2025-09-09 11:03:08][352288968433529][4753 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6edddda-5c57-4893-86e9-cdb837deeedb","id":"QR_d6edddda-5c57-4893-86e9-cdb837deeedb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:03:08][352288968433529][4909 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3343 [2025-09-09 11:03:08][352288968433529][4909 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-09 11:03:08][352288968433529][4909 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:03:11][352288968433529][0 ms][INFO] === Request start === [2025-09-09 11:03:11][352288968433529][1 ms][DEBUG] START check_scloud [2025-09-09 11:03:11][352288968433529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:03:11][352288968433529][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 19842 5011 24370964 183368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:03:11][352288968433529][297 ms][DEBUG] targetPkg: running [2025-09-09 11:03:11][352288968433529][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 11:03:11][352288968433529][298 ms][DEBUG] START check_boot_completed [2025-09-09 11:03:11][352288968433529][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:03:11][352288968433529][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:03:11][352288968433529][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:03:11][352288968433529][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 11:03:11][352288968433529][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:03:11][352288968433529][407 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:03:11][352288968433529][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968433529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7885\"}'\'' -e'"" [2025-09-09 11:03:11][352288968433529][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:03:11][352288968433529][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288968433529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7885\"}'\'' -e'"" [2025-09-09 11:03:16][352288968433529][5452 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60e24214-b7f4-4ae8-8a45-b4bfefa46530","id":"QR_60e24214-b7f4-4ae8-8a45-b4bfefa46530","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:03:16][352288968433529][5608 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 11:03:16][352288968433529][5609 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 11:03:16][352288968433529][5609 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:04:03][351671771607895][0 ms][INFO] === Request start === [2025-09-09 11:04:03][351671771607895][0 ms][DEBUG] START check_scloud [2025-09-09 11:04:03][351671771607895][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:04:03][351671771607895][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 19842 5011 24519636 194968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:04:03][351671771607895][306 ms][DEBUG] targetPkg: running [2025-09-09 11:04:03][351671771607895][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 11:04:03][351671771607895][306 ms][DEBUG] START check_boot_completed [2025-09-09 11:04:03][351671771607895][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:04:03][351671771607895][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:04:03][351671771607895][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:04:03][351671771607895][401 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 11:04:03][351671771607895][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 11:04:03][351671771607895][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:04:03][351671771607895][525 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1941\nsuccessfulTxPacketsPerSecond: 0.4611444344179627\nretriedTxPackets: 393\nretriedTxPacketsPerSecond: 0.10616274749190509\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1846\nsuccessfulRxPacketsPerSecond: 0.4180158182493763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:04:03][351671771607895][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:04:05][351671771607895][2087 ms][DEBUG] SU: done in 1562 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.564/289.564/289.564/0.000 ms\n [2025-09-09 11:04:05][351671771607895][2087 ms][DEBUG] check_internet: online [2025-09-09 11:04:05][351671771607895][2087 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:04:05][351671771607895][2087 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671771607895\",\"model\":\"SM-A136S\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8481\"}'\'' -e'"" [2025-09-09 11:04:05][351671771607895][2087 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:04:05][351671771607895][2087 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671771607895\",\"model\":\"SM-A136S\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8481\"}'\'' -e'"" [2025-09-09 11:04:11][351671771607895][8554 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9593a90d-2e54-49f2-acca-e67d31a4f7de","id":"QR_9593a90d-2e54-49f2-acca-e67d31a4f7de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:04:11][351671771607895][8710 ms][DEBUG] proc_open done in 6623 ms; code=255; res.len=3343 [2025-09-09 11:04:11][351671771607895][8710 ms][DEBUG] END runCmdUntilRes#1 in 6623 ms [2025-09-09 11:04:11][351671771607895][8710 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:04:14][351671771607895][0 ms][INFO] === Request start === [2025-09-09 11:04:14][351671771607895][1 ms][DEBUG] START check_scloud [2025-09-09 11:04:14][351671771607895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:04:14][351671771607895][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 19842 5011 24690844 206728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:04:14][351671771607895][320 ms][DEBUG] targetPkg: running [2025-09-09 11:04:14][351671771607895][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 11:04:14][351671771607895][320 ms][DEBUG] START check_boot_completed [2025-09-09 11:04:14][351671771607895][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:04:14][351671771607895][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:04:14][351671771607895][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:04:14][351671771607895][414 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 11:04:14][351671771607895][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:04:14][351671771607895][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:04:14][351671771607895][539 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31284 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1941\nsuccessfulTxPacketsPerSecond: 0.4611444344179627\nretriedTxPackets: 393\nretriedTxPacketsPerSecond: 0.10616274749190509\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1846\nsuccessfulRxPacketsPerSecond: 0.4180158182493763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:04:14][351671771607895][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:04:15][351671771607895][945 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.484/268.484/268.484/0.000 ms\n [2025-09-09 11:04:15][351671771607895][945 ms][DEBUG] check_internet: online [2025-09-09 11:04:15][351671771607895][945 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:04:15][351671771607895][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671771607895\",\"model\":\"SM-A136S\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4152\"}'\'' -e'"" [2025-09-09 11:04:15][351671771607895][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:04:15][351671771607895][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671771607895\",\"model\":\"SM-A136S\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4152\"}'\'' -e'"" [2025-09-09 11:04:19][351671771607895][5490 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5497744a-1b7f-4c4f-8d89-776d1abc083b","id":"QR_5497744a-1b7f-4c4f-8d89-776d1abc083b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:04:19][351671771607895][5646 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-09 11:04:19][351671771607895][5647 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 11:04:19][351671771607895][5647 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:07:08][358689980236697][1 ms][INFO] === Request start === [2025-09-09 11:07:08][358689980236697][1 ms][DEBUG] START check_scloud [2025-09-09 11:07:08][358689980236697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:07:08][358689980236697][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 19842 5011 24792284 217628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:07:08][358689980236697][291 ms][DEBUG] targetPkg: running [2025-09-09 11:07:08][358689980236697][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-09 11:07:08][358689980236697][291 ms][DEBUG] START check_boot_completed [2025-09-09 11:07:08][358689980236697][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:07:08][358689980236697][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:07:08][358689980236697][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:07:08][358689980236697][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:07:08][358689980236697][370 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 11:07:08][358689980236697][370 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:07:08][358689980236697][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8864\"}'\'' -e'"" [2025-09-09 11:07:08][358689980236697][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:07:08][358689980236697][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8864\"}'\'' -e'"" [2025-09-09 11:07:13][358689980236697][5024 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cd3b3c4-e9fe-43f3-8f1d-8c3034b572e1","id":"QR_9cd3b3c4-e9fe-43f3-8f1d-8c3034b572e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:07:13][358689980236697][5180 ms][DEBUG] proc_open done in 4810 ms; code=255; res.len=3343 [2025-09-09 11:07:13][358689980236697][5180 ms][DEBUG] END runCmdUntilRes#1 in 4810 ms [2025-09-09 11:07:13][358689980236697][5180 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:09:03][350331804915606][0 ms][INFO] === Request start === [2025-09-09 11:09:03][350331804915606][1 ms][DEBUG] START check_scloud [2025-09-09 11:09:03][350331804915606][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:09:04][350331804915606][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 19842 5011 24944964 229392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:09:04][350331804915606][321 ms][DEBUG] targetPkg: running [2025-09-09 11:09:04][350331804915606][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 11:09:04][350331804915606][321 ms][DEBUG] START check_boot_completed [2025-09-09 11:09:04][350331804915606][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:09:04][350331804915606][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:09:04][350331804915606][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:09:04][350331804915606][462 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 11:09:04][350331804915606][462 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 11:09:04][350331804915606][462 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:09:04][350331804915606][462 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331804915606\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7177\"}'\'' -e'"" [2025-09-09 11:09:04][350331804915606][462 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:09:04][350331804915606][462 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331804915606\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7177\"}'\'' -e'"" [2025-09-09 11:09:08][350331804915606][5008 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab053ccf-5379-4854-a5f2-036615b97b1d","id":"QR_ab053ccf-5379-4854-a5f2-036615b97b1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:09:08][350331804915606][5164 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-09 11:09:08][350331804915606][5164 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-09 11:09:08][350331804915606][5164 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:09:11][350331804915606][1 ms][INFO] === Request start === [2025-09-09 11:09:11][350331804915606][1 ms][DEBUG] START check_scloud [2025-09-09 11:09:11][350331804915606][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:09:11][350331804915606][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 19842 5011 25079244 240200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:09:11][350331804915606][272 ms][DEBUG] targetPkg: running [2025-09-09 11:09:11][350331804915606][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-09 11:09:11][350331804915606][272 ms][DEBUG] START check_boot_completed [2025-09-09 11:09:11][350331804915606][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:09:11][350331804915606][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:09:11][350331804915606][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:09:11][350331804915606][381 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 11:09:11][350331804915606][381 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:09:11][350331804915606][381 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:09:11][350331804915606][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331804915606\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2518\"}'\'' -e'"" [2025-09-09 11:09:11][350331804915606][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:09:11][350331804915606][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331804915606\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2518\"}'\'' -e'"" [2025-09-09 11:09:19][350331804915606][8004 ms][DEBUG] proc_open done in 7623 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 11:09:19][350331804915606][8004 ms][DEBUG] END runCmdUntilRes#1 in 7623 ms [2025-09-09 11:09:19][350331804915606][8004 ms][WARN] Detected error: Process with pid 19842 either refused to load frida-agent, or terminated during injectionProcess with pid 19842 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 11:09:19][350331804915606][8004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 11:09:20][350331804915606][8754 ms][DEBUG] SU: done in 750 ms; out [2025-09-09 11:09:20][350331804915606][8754 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 11:09:20][350331804915606][8943 ms][DEBUG] SU: done in 189 ms; out [2025-09-09 11:09:20][350331804915606][8943 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 11:09:20][350331804915606][8943 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 11:09:20][350331804915606][9129 ms][DEBUG] SU: done in 186 ms; out [2025-09-09 11:09:20][350331804915606][9129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 11:09:20][350331804915606][9301 ms][DEBUG] SU: done in 172 ms; out [2025-09-09 11:09:22][350331804915606][11316 ms][DEBUG] START check_boot_completed [2025-09-09 11:09:22][350331804915606][11316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:09:22][350331804915606][11363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:09:22][350331804915606][11363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:09:22][350331804915606][11425 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 11:09:22][350331804915606][11426 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 11:09:25][350331804915606][14440 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 11:09:25][350331804915606][14440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331804915606\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2518\"}'\'' -e'"" [2025-09-09 11:09:27][350331804915606][16143 ms][DEBUG] proc_open done in 1703 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 11:09:27][350331804915606][16143 ms][DEBUG] END runCmdUntilRes#2 in 1703 ms [2025-09-09 11:09:27][350331804915606][16143 ms][WARN] Detected error 2; Reboot the device [2025-09-09 11:09:27][350331804915606][16143 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 11:09:27][350331804915606][16409 ms][DEBUG] SU: done in 265 ms; outsystem 21719 21380 7515604 145308 0 0 R system_server\n [2025-09-09 11:09:27][350331804915606][16409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 11:09:28][350331804915606][17002 ms][DEBUG] SU: done in 593 ms; out [2025-09-09 11:12:03][350013883978131][1 ms][INFO] === Request start === [2025-09-09 11:12:03][350013883978131][1 ms][DEBUG] START check_scloud [2025-09-09 11:12:03][350013883978131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:12:04][350013883978131][308 ms][DEBUG] SU: done in 307 ms; out [2025-09-09 11:12:04][350013883978131][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 11:12:04][350013883978131][339 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 11:12:04][350013883978131][339 ms][DEBUG] check_devices: device found [2025-09-09 11:12:04][350013883978131][339 ms][WARN] targetPkg: not running, restarting [2025-09-09 11:12:04][350013883978131][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 11:12:04][350013883978131][464 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 11:12:04][350013883978131][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 11:12:04][350013883978131][652 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 11:12:06][350013883978131][2667 ms][DEBUG] END check_scloud in 2666 ms [2025-09-09 11:12:06][350013883978131][2667 ms][DEBUG] START check_boot_completed [2025-09-09 11:12:06][350013883978131][2667 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:12:06][350013883978131][2714 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:12:06][350013883978131][2714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:12:06][350013883978131][2761 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:12:06][350013883978131][2761 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:12:06][350013883978131][2761 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:12:06][350013883978131][2886 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 289\nsuccessfulTxPacketsPerSecond: 9.342838348994684\nretriedTxPackets: 34\nretriedTxPacketsPerSecond: 1.387146932031807\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 236\nsuccessfulRxPacketsPerSecond: 6.492982104078415\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:12:06][350013883978131][2886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:12:08][350013883978131][4557 ms][DEBUG] SU: done in 1671 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.517/291.517/291.517/0.000 ms\n [2025-09-09 11:12:08][350013883978131][4557 ms][DEBUG] check_internet: online [2025-09-09 11:12:08][350013883978131][4557 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:12:08][350013883978131][4557 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883978131\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"S06\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7385\"}'\'' -e'"" [2025-09-09 11:12:08][350013883978131][4557 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:12:08][350013883978131][4558 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883978131\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"S06\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7385\"}'\'' -e'"" [2025-09-09 11:12:13][350013883978131][9197 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e209cab8-49f1-4a78-97ce-5b0cf8648064","id":"QR_e209cab8-49f1-4a78-97ce-5b0cf8648064","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:12:13][350013883978131][9353 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 11:12:13][350013883978131][9353 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 11:12:13][350013883978131][9353 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:12:15][350013883978131][0 ms][INFO] === Request start === [2025-09-09 11:12:15][350013883978131][1 ms][DEBUG] START check_scloud [2025-09-09 11:12:15][350013883978131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:12:16][350013883978131][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 15337 5015 23813848 125192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:12:16][350013883978131][332 ms][DEBUG] targetPkg: running [2025-09-09 11:12:16][350013883978131][332 ms][DEBUG] END check_scloud in 332 ms [2025-09-09 11:12:16][350013883978131][332 ms][DEBUG] START check_boot_completed [2025-09-09 11:12:16][350013883978131][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:12:16][350013883978131][379 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:12:16][350013883978131][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:12:16][350013883978131][426 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:12:16][350013883978131][426 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:12:16][350013883978131][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:12:16][350013883978131][535 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 289\nsuccessfulTxPacketsPerSecond: 9.342838348994684\nretriedTxPackets: 34\nretriedTxPacketsPerSecond: 1.387146932031807\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 236\nsuccessfulRxPacketsPerSecond: 6.492982104078415\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:12:16][350013883978131][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:12:16][350013883978131][957 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.191/320.191/320.191/0.000 ms\n [2025-09-09 11:12:16][350013883978131][957 ms][DEBUG] check_internet: online [2025-09-09 11:12:16][350013883978131][957 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:12:16][350013883978131][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883978131\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"S06\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7507\"}'\'' -e'"" [2025-09-09 11:12:16][350013883978131][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:12:16][350013883978131][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883978131\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"S06\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7507\"}'\'' -e'"" [2025-09-09 11:12:21][350013883978131][6049 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bad0af14-f611-4cdf-a4db-f7e651c9dc5f","id":"QR_bad0af14-f611-4cdf-a4db-f7e651c9dc5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:12:21][350013883978131][6205 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-09 11:12:21][350013883978131][6205 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-09 11:12:21][350013883978131][6206 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:18:03][351797841504026][1 ms][INFO] === Request start === [2025-09-09 11:18:03][351797841504026][1 ms][DEBUG] START check_scloud [2025-09-09 11:18:03][351797841504026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:18:04][351797841504026][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 15337 5015 23853544 138848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:18:04][351797841504026][301 ms][DEBUG] targetPkg: running [2025-09-09 11:18:04][351797841504026][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 11:18:04][351797841504026][301 ms][DEBUG] START check_boot_completed [2025-09-09 11:18:04][351797841504026][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:18:04][351797841504026][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:18:04][351797841504026][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:18:04][351797841504026][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 11:18:04][351797841504026][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:18:04][351797841504026][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:18:04][351797841504026][504 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 919\nsuccessfulTxPacketsPerSecond: 2.299295247758187\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 0.30292302470465005\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 932\nsuccessfulRxPacketsPerSecond: 2.5401737975233307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:18:04][351797841504026][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:18:06][351797841504026][2208 ms][DEBUG] SU: done in 1703 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.658/289.658/289.658/0.000 ms\n [2025-09-09 11:18:06][351797841504026][2208 ms][DEBUG] check_internet: online [2025-09-09 11:18:06][351797841504026][2208 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:18:06][351797841504026][2208 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797841504026\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4427\"}'\'' -e'"" [2025-09-09 11:18:06][351797841504026][2208 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:18:06][351797841504026][2208 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797841504026\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4427\"}'\'' -e'"" [2025-09-09 11:18:09][351797841504026][6018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27a6a43a-7728-4e8f-a5bd-6741cadba07f","id":"QR_27a6a43a-7728-4e8f-a5bd-6741cadba07f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:18:10][351797841504026][6175 ms][DEBUG] proc_open done in 3966 ms; code=255; res.len=3343 [2025-09-09 11:18:10][351797841504026][6175 ms][DEBUG] END runCmdUntilRes#1 in 3966 ms [2025-09-09 11:18:10][351797841504026][6175 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:18:12][351797841504026][0 ms][INFO] === Request start === [2025-09-09 11:18:12][351797841504026][1 ms][DEBUG] START check_scloud [2025-09-09 11:18:12][351797841504026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:18:12][351797841504026][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 15337 5015 24008368 150756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:18:12][351797841504026][308 ms][DEBUG] targetPkg: running [2025-09-09 11:18:12][351797841504026][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 11:18:12][351797841504026][308 ms][DEBUG] START check_boot_completed [2025-09-09 11:18:12][351797841504026][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:18:12][351797841504026][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:18:12][351797841504026][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:18:12][351797841504026][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:18:12][351797841504026][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:18:12][351797841504026][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:18:12][351797841504026][495 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 919\nsuccessfulTxPacketsPerSecond: 2.299295247758187\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 0.30292302470465005\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 932\nsuccessfulRxPacketsPerSecond: 2.5401737975233307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:18:12][351797841504026][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:18:13][351797841504026][918 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.975/306.975/306.975/0.000 ms\n [2025-09-09 11:18:13][351797841504026][918 ms][DEBUG] check_internet: online [2025-09-09 11:18:13][351797841504026][918 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:18:13][351797841504026][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797841504026\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4049\"}'\'' -e'"" [2025-09-09 11:18:13][351797841504026][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:18:13][351797841504026][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797841504026\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4049\"}'\'' -e'"" [2025-09-09 11:18:17][351797841504026][5353 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17541ebd-4c54-493c-a12c-09eb03be4665","id":"QR_17541ebd-4c54-493c-a12c-09eb03be4665","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:18:17][351797841504026][5510 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 11:18:17][351797841504026][5510 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-09 11:18:17][351797841504026][5510 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:22:03][355355259744414][1 ms][INFO] === Request start === [2025-09-09 11:22:03][355355259744414][1 ms][DEBUG] START check_scloud [2025-09-09 11:22:03][355355259744414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:22:03][355355259744414][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 15337 5015 24103792 161944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:22:03][355355259744414][309 ms][DEBUG] targetPkg: running [2025-09-09 11:22:03][355355259744414][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 11:22:03][355355259744414][309 ms][DEBUG] START check_boot_completed [2025-09-09 11:22:03][355355259744414][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:22:03][355355259744414][340 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 11:22:03][355355259744414][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:22:03][355355259744414][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:22:03][355355259744414][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:22:03][355355259744414][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:22:03][355355259744414][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1066\nsuccessfulTxPacketsPerSecond: 0.4887455530804269\nretriedTxPackets: 155\nretriedTxPacketsPerSecond: 0.12634238787113075\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1063\nsuccessfulRxPacketsPerSecond: 0.4355487581873192\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:22:03][355355259744414][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:22:04][355355259744414][887 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.823/274.823/274.823/0.000 ms\n [2025-09-09 11:22:04][355355259744414][887 ms][DEBUG] check_internet: online [2025-09-09 11:22:04][355355259744414][887 ms][DEBUG] rawBody.length=1149 [2025-09-09 11:22:04][355355259744414][887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355259744414\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1601\"}'\'' -e'"" [2025-09-09 11:22:04][355355259744414][887 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:22:04][355355259744414][887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355259744414\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1601\"}'\'' -e'"" [2025-09-09 11:22:08][355355259744414][5526 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cd711e1-758b-4b3a-bd04-85890ef8b334","id":"QR_9cd711e1-758b-4b3a-bd04-85890ef8b334","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:22:09][355355259744414][5683 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-09 11:22:09][355355259744414][5683 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-09 11:22:09][355355259744414][5683 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:22:11][355355259744414][0 ms][INFO] === Request start === [2025-09-09 11:22:11][355355259744414][1 ms][DEBUG] START check_scloud [2025-09-09 11:22:11][355355259744414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:22:11][355355259744414][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 15337 5015 24260664 169384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:22:11][355355259744414][259 ms][DEBUG] targetPkg: running [2025-09-09 11:22:11][355355259744414][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 11:22:11][355355259744414][259 ms][DEBUG] START check_boot_completed [2025-09-09 11:22:11][355355259744414][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:22:11][355355259744414][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:22:11][355355259744414][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:22:11][355355259744414][353 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 11:22:11][355355259744414][353 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:22:11][355355259744414][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:22:11][355355259744414][477 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1066\nsuccessfulTxPacketsPerSecond: 0.4887455530804269\nretriedTxPackets: 155\nretriedTxPacketsPerSecond: 0.12634238787113075\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1063\nsuccessfulRxPacketsPerSecond: 0.4355487581873192\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:22:11][355355259744414][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:22:12][355355259744414][899 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.059/288.059/288.059/0.000 ms\n [2025-09-09 11:22:12][355355259744414][899 ms][DEBUG] check_internet: online [2025-09-09 11:22:12][355355259744414][899 ms][DEBUG] rawBody.length=1159 [2025-09-09 11:22:12][355355259744414][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355259744414\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1761\"}'\'' -e'"" [2025-09-09 11:22:12][355355259744414][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:22:12][355355259744414][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355259744414\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1761\"}'\'' -e'"" [2025-09-09 11:22:17][355355259744414][5944 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd9a2db5-d1ae-4dc8-ad3c-fdbf921c8b10","id":"QR_bd9a2db5-d1ae-4dc8-ad3c-fdbf921c8b10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:22:17][355355259744414][6100 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 11:22:17][355355259744414][6101 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 11:22:17][355355259744414][6101 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:23:03][356007119996275][0 ms][INFO] === Request start === [2025-09-09 11:23:03][356007119996275][1 ms][DEBUG] START check_scloud [2025-09-09 11:23:03][356007119996275][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:23:03][356007119996275][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 15337 5015 24405240 181412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:23:03][356007119996275][302 ms][DEBUG] targetPkg: running [2025-09-09 11:23:03][356007119996275][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 11:23:03][356007119996275][302 ms][DEBUG] START check_boot_completed [2025-09-09 11:23:03][356007119996275][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:23:03][356007119996275][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:23:03][356007119996275][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:23:03][356007119996275][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:23:03][356007119996275][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:23:03][356007119996275][380 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:23:03][356007119996275][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007119996275\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6867\"}'\'' -e'"" [2025-09-09 11:23:03][356007119996275][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:23:03][356007119996275][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007119996275\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6867\"}'\'' -e'"" [2025-09-09 11:23:06][356007119996275][3661 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a94905c2-0ce7-4928-984d-edf95e886b33","id":"QR_a94905c2-0ce7-4928-984d-edf95e886b33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:23:06][356007119996275][3817 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=3343 [2025-09-09 11:23:06][356007119996275][3817 ms][DEBUG] END runCmdUntilRes#1 in 3437 ms [2025-09-09 11:23:06][356007119996275][3817 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:23:09][356007119996275][0 ms][INFO] === Request start === [2025-09-09 11:23:09][356007119996275][1 ms][DEBUG] START check_scloud [2025-09-09 11:23:09][356007119996275][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:23:09][356007119996275][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 15337 5015 24527360 192360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:23:09][356007119996275][288 ms][DEBUG] targetPkg: running [2025-09-09 11:23:09][356007119996275][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 11:23:09][356007119996275][288 ms][DEBUG] START check_boot_completed [2025-09-09 11:23:09][356007119996275][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:23:09][356007119996275][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:23:09][356007119996275][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:23:09][356007119996275][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:23:09][356007119996275][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:23:09][356007119996275][366 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:23:09][356007119996275][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007119996275\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7575\"}'\'' -e'"" [2025-09-09 11:23:09][356007119996275][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:23:09][356007119996275][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007119996275\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7575\"}'\'' -e'"" [2025-09-09 11:23:14][356007119996275][4771 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5414b93a-a072-4010-baac-16a98135bbab","id":"QR_5414b93a-a072-4010-baac-16a98135bbab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:23:14][356007119996275][4927 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 11:23:14][356007119996275][4927 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 11:23:14][356007119996275][4927 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:28:03][357967976463017][1 ms][INFO] === Request start === [2025-09-09 11:28:03][357967976463017][1 ms][DEBUG] START check_scloud [2025-09-09 11:28:03][357967976463017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:28:04][357967976463017][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 15337 5015 24675904 192036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:28:04][357967976463017][260 ms][DEBUG] targetPkg: running [2025-09-09 11:28:04][357967976463017][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 11:28:04][357967976463017][260 ms][DEBUG] START check_boot_completed [2025-09-09 11:28:04][357967976463017][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:28:04][357967976463017][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:28:04][357967976463017][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:28:04][357967976463017][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:28:04][357967976463017][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:28:04][357967976463017][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:28:04][357967976463017][463 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1228\nsuccessfulTxPacketsPerSecond: 0.18309149997711358\nretriedTxPackets: 198\nretriedTxPacketsPerSecond: 0.05340168749332479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1206\nsuccessfulRxPacketsPerSecond: 0.14494743748188157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:28:04][357967976463017][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:28:05][357967976463017][1104 ms][DEBUG] SU: done in 640 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.278/303.278/303.278/0.000 ms\n [2025-09-09 11:28:05][357967976463017][1104 ms][DEBUG] check_internet: online [2025-09-09 11:28:05][357967976463017][1104 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:28:05][357967976463017][1104 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976463017\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1788\"}'\'' -e'"" [2025-09-09 11:28:05][357967976463017][1104 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:28:05][357967976463017][1104 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976463017\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1788\"}'\'' -e'"" [2025-09-09 11:28:09][357967976463017][5056 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7df684ca-0d92-48ea-9b78-e9327c0a5274","id":"QR_7df684ca-0d92-48ea-9b78-e9327c0a5274","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:28:09][357967976463017][5212 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-09-09 11:28:09][357967976463017][5212 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-09 11:28:09][357967976463017][5212 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:28:11][357967976463017][0 ms][INFO] === Request start === [2025-09-09 11:28:11][357967976463017][1 ms][DEBUG] START check_scloud [2025-09-09 11:28:11][357967976463017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:28:11][357967976463017][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 15337 5015 24804040 186180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:28:11][357967976463017][252 ms][DEBUG] targetPkg: running [2025-09-09 11:28:11][357967976463017][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-09 11:28:11][357967976463017][252 ms][DEBUG] START check_boot_completed [2025-09-09 11:28:11][357967976463017][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:28:11][357967976463017][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:28:11][357967976463017][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:28:11][357967976463017][392 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 11:28:11][357967976463017][393 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 11:28:11][357967976463017][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:28:12][357967976463017][519 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1228\nsuccessfulTxPacketsPerSecond: 0.18309149997711358\nretriedTxPackets: 198\nretriedTxPacketsPerSecond: 0.05340168749332479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1206\nsuccessfulRxPacketsPerSecond: 0.14494743748188157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:28:12][357967976463017][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:28:12][357967976463017][892 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.508/255.508/255.508/0.000 ms\n [2025-09-09 11:28:12][357967976463017][892 ms][DEBUG] check_internet: online [2025-09-09 11:28:12][357967976463017][893 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:28:12][357967976463017][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976463017\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1210\"}'\'' -e'"" [2025-09-09 11:28:12][357967976463017][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:28:12][357967976463017][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976463017\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1210\"}'\'' -e'"" [2025-09-09 11:28:17][357967976463017][6047 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0359f9da-1f2c-4c08-a44e-7f0c806395cd","id":"QR_0359f9da-1f2c-4c08-a44e-7f0c806395cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:28:17][357967976463017][6203 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-09 11:28:17][357967976463017][6203 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 11:28:17][357967976463017][6203 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:31:03][352397456896400][1 ms][INFO] === Request start === [2025-09-09 11:31:03][352397456896400][1 ms][DEBUG] START check_scloud [2025-09-09 11:31:03][352397456896400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:31:03][352397456896400][256 ms][DEBUG] SU: done in 254 ms; outu0_a118 15337 5015 24909576 196788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:31:03][352397456896400][256 ms][DEBUG] targetPkg: running [2025-09-09 11:31:03][352397456896400][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-09 11:31:03][352397456896400][256 ms][DEBUG] START check_boot_completed [2025-09-09 11:31:03][352397456896400][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:31:03][352397456896400][286 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 11:31:03][352397456896400][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:31:03][352397456896400][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:31:03][352397456896400][333 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 11:31:03][352397456896400][333 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:31:03][352397456896400][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456896400\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9294\"}'\'' -e'"" [2025-09-09 11:31:03][352397456896400][333 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:31:03][352397456896400][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456896400\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9294\"}'\'' -e'"" [2025-09-09 11:31:08][352397456896400][4800 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd82ec35-499b-4e4b-8929-f089957fef92","id":"QR_cd82ec35-499b-4e4b-8929-f089957fef92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:31:08][352397456896400][4957 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-09 11:31:08][352397456896400][4957 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-09 11:31:08][352397456896400][4957 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:31:10][352397456896400][0 ms][INFO] === Request start === [2025-09-09 11:31:10][352397456896400][1 ms][DEBUG] START check_scloud [2025-09-09 11:31:10][352397456896400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:31:10][352397456896400][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 15337 5015 25066516 197576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:31:10][352397456896400][310 ms][DEBUG] targetPkg: running [2025-09-09 11:31:10][352397456896400][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 11:31:10][352397456896400][310 ms][DEBUG] START check_boot_completed [2025-09-09 11:31:10][352397456896400][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:31:10][352397456896400][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:31:10][352397456896400][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:31:11][352397456896400][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:31:11][352397456896400][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:31:11][352397456896400][404 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:31:11][352397456896400][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456896400\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1521\"}'\'' -e'"" [2025-09-09 11:31:11][352397456896400][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:31:11][352397456896400][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456896400\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1521\"}'\'' -e'"" [2025-09-09 11:31:15][352397456896400][4606 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 11:31:15][352397456896400][4606 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-09 11:31:15][352397456896400][4606 ms][WARN] Detected error: Process with pid 15337 either refused to load frida-agent, or terminated during injectionProcess with pid 15337 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 11:31:15][352397456896400][4606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 11:31:15][352397456896400][4872 ms][DEBUG] SU: done in 265 ms; outsystem 5433 5015 12952972 252968 ep_poll 0 S system_server\n [2025-09-09 11:31:15][352397456896400][4872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 11:31:15][352397456896400][4997 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 11:31:15][352397456896400][4997 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 11:31:15][352397456896400][4997 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 11:31:15][352397456896400][5153 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 11:31:15][352397456896400][5153 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 11:31:15][352397456896400][5371 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 11:31:17][352397456896400][7386 ms][DEBUG] START check_boot_completed [2025-09-09 11:31:17][352397456896400][7387 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:31:18][352397456896400][7433 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:31:18][352397456896400][7433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:31:18][352397456896400][7480 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:31:18][352397456896400][7480 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:31:21][352397456896400][10495 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 11:31:21][352397456896400][10495 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456896400\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1521\"}'\'' -e'"" [2025-09-09 11:31:26][352397456896400][15431 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b97d008-158a-4bff-9d99-1f327e7b0113","id":"QR_6b97d008-158a-4bff-9d99-1f327e7b0113","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:31:26][352397456896400][15588 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 11:31:26][352397456896400][15588 ms][DEBUG] END runCmdUntilRes#2 in 5093 ms [2025-09-09 11:31:26][352397456896400][15588 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:32:03][351270418985093][0 ms][INFO] === Request start === [2025-09-09 11:32:03][351270418985093][1 ms][DEBUG] START check_scloud [2025-09-09 11:32:03][351270418985093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:32:04][351270418985093][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 17685 5015 23684412 127504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:32:04][351270418985093][326 ms][DEBUG] targetPkg: running [2025-09-09 11:32:04][351270418985093][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-09 11:32:04][351270418985093][326 ms][DEBUG] START check_boot_completed [2025-09-09 11:32:04][351270418985093][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:32:04][351270418985093][373 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:32:04][351270418985093][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:32:04][351270418985093][451 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 11:32:04][351270418985093][451 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 11:32:04][351270418985093][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:32:04][351270418985093][591 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1228\nsuccessfulTxPacketsPerSecond: 0.18309149997711358\nretriedTxPackets: 198\nretriedTxPacketsPerSecond: 0.05340168749332479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1206\nsuccessfulRxPacketsPerSecond: 0.14494743748188157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:32:04][351270418985093][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:32:04][351270418985093][1029 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.481/296.481/296.481/0.000 ms\n [2025-09-09 11:32:04][351270418985093][1029 ms][DEBUG] check_internet: online [2025-09-09 11:32:04][351270418985093][1029 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:32:04][351270418985093][1029 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418985093\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5688\"}'\'' -e'"" [2025-09-09 11:32:04][351270418985093][1029 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:32:04][351270418985093][1029 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418985093\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5688\"}'\'' -e'"" [2025-09-09 11:32:09][351270418985093][5324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d854017-7904-4e09-ad2b-24b2af9c8ac0","id":"QR_4d854017-7904-4e09-ad2b-24b2af9c8ac0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:32:09][351270418985093][5481 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-09 11:32:09][351270418985093][5481 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 11:32:09][351270418985093][5481 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:32:11][351270418985093][0 ms][INFO] === Request start === [2025-09-09 11:32:11][351270418985093][1 ms][DEBUG] START check_scloud [2025-09-09 11:32:11][351270418985093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:32:11][351270418985093][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 17685 5015 23843460 138216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:32:11][351270418985093][317 ms][DEBUG] targetPkg: running [2025-09-09 11:32:11][351270418985093][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 11:32:11][351270418985093][317 ms][DEBUG] START check_boot_completed [2025-09-09 11:32:11][351270418985093][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:32:12][351270418985093][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:32:12][351270418985093][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:32:12][351270418985093][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 11:32:12][351270418985093][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:32:12][351270418985093][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:32:12][351270418985093][583 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1228\nsuccessfulTxPacketsPerSecond: 0.18309149997711358\nretriedTxPackets: 198\nretriedTxPacketsPerSecond: 0.05340168749332479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1206\nsuccessfulRxPacketsPerSecond: 0.14494743748188157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:32:12][351270418985093][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:32:12][351270418985093][1004 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.685/318.685/318.685/0.000 ms\n [2025-09-09 11:32:12][351270418985093][1005 ms][DEBUG] check_internet: online [2025-09-09 11:32:12][351270418985093][1005 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:32:12][351270418985093][1005 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418985093\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3366\"}'\'' -e'"" [2025-09-09 11:32:12][351270418985093][1005 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:32:12][351270418985093][1005 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270418985093\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3366\"}'\'' -e'"" [2025-09-09 11:32:17][351270418985093][5550 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_538f7cb1-7cc1-4c37-a9e5-ab5802a7a129","id":"QR_538f7cb1-7cc1-4c37-a9e5-ab5802a7a129","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:32:17][351270418985093][5706 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 11:32:17][351270418985093][5706 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 11:32:17][351270418985093][5706 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:32:22][352177393032164][0 ms][INFO] === Request start === [2025-09-09 11:32:22][352177393032164][1 ms][DEBUG] START check_scloud [2025-09-09 11:32:22][352177393032164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:32:23][352177393032164][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 17685 5015 23989188 149684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:32:23][352177393032164][315 ms][DEBUG] targetPkg: running [2025-09-09 11:32:23][352177393032164][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 11:32:23][352177393032164][315 ms][DEBUG] START check_boot_completed [2025-09-09 11:32:23][352177393032164][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:32:23][352177393032164][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:32:23][352177393032164][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:32:23][352177393032164][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:32:23][352177393032164][394 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 11:32:23][352177393032164][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:32:23][352177393032164][536 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1228\nsuccessfulTxPacketsPerSecond: 0.18309149997711358\nretriedTxPackets: 198\nretriedTxPacketsPerSecond: 0.05340168749332479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1206\nsuccessfulRxPacketsPerSecond: 0.14494743748188157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:32:23][352177393032164][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:32:23][352177393032164][987 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=337 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 337.797/337.797/337.797/0.000 ms\n [2025-09-09 11:32:23][352177393032164][987 ms][DEBUG] check_internet: online [2025-09-09 11:32:23][352177393032164][987 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:32:23][352177393032164][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393032164\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6655\"}'\'' -e'"" [2025-09-09 11:32:23][352177393032164][987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:32:23][352177393032164][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393032164\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6655\"}'\'' -e'"" [2025-09-09 11:32:28][352177393032164][5736 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53e5b4fa-29af-4d57-9a0c-5938a1dd1e3e","id":"QR_53e5b4fa-29af-4d57-9a0c-5938a1dd1e3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:32:28][352177393032164][5892 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 11:32:28][352177393032164][5892 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 11:32:28][352177393032164][5892 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:32:32][352177393032164][0 ms][INFO] === Request start === [2025-09-09 11:32:32][352177393032164][1 ms][DEBUG] START check_scloud [2025-09-09 11:32:32][352177393032164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:32:32][352177393032164][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17685 5015 24092840 160764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:32:32][352177393032164][310 ms][DEBUG] targetPkg: running [2025-09-09 11:32:32][352177393032164][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 11:32:32][352177393032164][310 ms][DEBUG] START check_boot_completed [2025-09-09 11:32:32][352177393032164][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:32:32][352177393032164][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:32:32][352177393032164][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:32:32][352177393032164][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:32:32][352177393032164][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:32:32][352177393032164][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:32:32][352177393032164][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1228\nsuccessfulTxPacketsPerSecond: 0.18309149997711358\nretriedTxPackets: 198\nretriedTxPacketsPerSecond: 0.05340168749332479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1206\nsuccessfulRxPacketsPerSecond: 0.14494743748188157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:32:32][352177393032164][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:32:33][352177393032164][935 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.566/293.566/293.566/0.000 ms\n [2025-09-09 11:32:33][352177393032164][935 ms][DEBUG] check_internet: online [2025-09-09 11:32:33][352177393032164][935 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:32:33][352177393032164][935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393032164\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7993\"}'\'' -e'"" [2025-09-09 11:32:33][352177393032164][935 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:32:33][352177393032164][935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393032164\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7993\"}'\'' -e'"" [2025-09-09 11:32:36][352177393032164][4387 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77957088-c4c8-4dae-886a-1bcb1f36437b","id":"QR_77957088-c4c8-4dae-886a-1bcb1f36437b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:32:36][352177393032164][4543 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-09 11:32:36][352177393032164][4543 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-09 11:32:36][352177393032164][4543 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:33:03][352590526596774][1 ms][INFO] === Request start === [2025-09-09 11:33:03][352590526596774][1 ms][DEBUG] START check_scloud [2025-09-09 11:33:03][352590526596774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:33:04][352590526596774][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 17685 5015 24225028 172896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:33:04][352590526596774][305 ms][DEBUG] targetPkg: running [2025-09-09 11:33:04][352590526596774][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 11:33:04][352590526596774][305 ms][DEBUG] START check_boot_completed [2025-09-09 11:33:04][352590526596774][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:33:04][352590526596774][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:33:04][352590526596774][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:33:04][352590526596774][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:33:04][352590526596774][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:33:04][352590526596774][383 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:33:04][352590526596774][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590526596774\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8237\"}'\'' -e'"" [2025-09-09 11:33:04][352590526596774][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:33:04][352590526596774][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590526596774\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8237\"}'\'' -e'"" [2025-09-09 11:33:07][352590526596774][3601 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f577d4d0-c658-41b4-b6af-4cd4df92ccfb","id":"QR_f577d4d0-c658-41b4-b6af-4cd4df92ccfb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:33:07][352590526596774][3758 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=3343 [2025-09-09 11:33:07][352590526596774][3758 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-09 11:33:07][352590526596774][3758 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:33:10][352590526596774][0 ms][INFO] === Request start === [2025-09-09 11:33:10][352590526596774][1 ms][DEBUG] START check_scloud [2025-09-09 11:33:10][352590526596774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:33:10][352590526596774][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 17685 5015 24394252 183652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:33:10][352590526596774][274 ms][DEBUG] targetPkg: running [2025-09-09 11:33:10][352590526596774][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-09 11:33:10][352590526596774][274 ms][DEBUG] START check_boot_completed [2025-09-09 11:33:10][352590526596774][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:33:10][352590526596774][321 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:33:10][352590526596774][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:33:10][352590526596774][399 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 11:33:10][352590526596774][399 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 11:33:10][352590526596774][399 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:33:10][352590526596774][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590526596774\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8077\"}'\'' -e'"" [2025-09-09 11:33:10][352590526596774][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:33:10][352590526596774][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590526596774\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8077\"}'\'' -e'"" [2025-09-09 11:33:15][352590526596774][5163 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c132e007-e20c-4c29-b0fe-2110ef8ebbc6","id":"QR_c132e007-e20c-4c29-b0fe-2110ef8ebbc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:33:15][352590526596774][5319 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-09 11:33:15][352590526596774][5319 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-09 11:33:15][352590526596774][5319 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:37:03][353403931752660][1 ms][INFO] === Request start === [2025-09-09 11:37:03][353403931752660][1 ms][DEBUG] START check_scloud [2025-09-09 11:37:03][353403931752660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:37:03][353403931752660][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17685 5015 24483484 195980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:37:03][353403931752660][308 ms][DEBUG] targetPkg: running [2025-09-09 11:37:03][353403931752660][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 11:37:03][353403931752660][308 ms][DEBUG] START check_boot_completed [2025-09-09 11:37:03][353403931752660][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:37:03][353403931752660][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:37:03][353403931752660][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:37:03][353403931752660][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:37:03][353403931752660][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:37:03][353403931752660][386 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:37:03][353403931752660][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403931752660\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2414\"}'\'' -e'"" [2025-09-09 11:37:03][353403931752660][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:37:03][353403931752660][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403931752660\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2414\"}'\'' -e'"" [2025-09-09 11:37:08][353403931752660][5322 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5342c641-41e6-430c-8004-708e51c6737b","id":"QR_5342c641-41e6-430c-8004-708e51c6737b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:37:08][353403931752660][5478 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 11:37:08][353403931752660][5478 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 11:37:08][353403931752660][5478 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:37:11][353403931752660][0 ms][INFO] === Request start === [2025-09-09 11:37:11][353403931752660][1 ms][DEBUG] START check_scloud [2025-09-09 11:37:11][353403931752660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:37:11][353403931752660][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 17685 5015 24609700 206840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:37:11][353403931752660][307 ms][DEBUG] targetPkg: running [2025-09-09 11:37:11][353403931752660][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 11:37:11][353403931752660][307 ms][DEBUG] START check_boot_completed [2025-09-09 11:37:11][353403931752660][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:37:11][353403931752660][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:37:11][353403931752660][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:37:11][353403931752660][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:37:11][353403931752660][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:37:11][353403931752660][385 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:37:11][353403931752660][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403931752660\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5042\"}'\'' -e'"" [2025-09-09 11:37:11][353403931752660][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:37:11][353403931752660][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403931752660\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5042\"}'\'' -e'"" [2025-09-09 11:37:16][353403931752660][5306 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2630022-00a6-4408-883a-5aa248cf4a2a","id":"QR_b2630022-00a6-4408-883a-5aa248cf4a2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:37:16][353403931752660][5462 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-09 11:37:16][353403931752660][5462 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-09 11:37:16][353403931752660][5462 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:38:03][350100284941469][0 ms][INFO] === Request start === [2025-09-09 11:38:03][350100284941469][1 ms][DEBUG] START check_scloud [2025-09-09 11:38:03][350100284941469][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:38:03][350100284941469][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 17685 5015 24701028 219172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:38:03][350100284941469][316 ms][DEBUG] targetPkg: running [2025-09-09 11:38:03][350100284941469][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 11:38:03][350100284941469][316 ms][DEBUG] START check_boot_completed [2025-09-09 11:38:03][350100284941469][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:38:03][350100284941469][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:38:03][350100284941469][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:38:03][350100284941469][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:38:03][350100284941469][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:38:03][350100284941469][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:38:03][350100284941469][503 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1654\nsuccessfulTxPacketsPerSecond: 0.4982230046168665\nretriedTxPackets: 302\nretriedTxPacketsPerSecond: 0.10628757431826485\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1577\nsuccessfulRxPacketsPerSecond: 0.42847178397050517\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:38:03][350100284941469][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:38:05][350100284941469][1878 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.078/304.078/304.078/0.000 ms\n [2025-09-09 11:38:05][350100284941469][1878 ms][DEBUG] check_internet: online [2025-09-09 11:38:05][350100284941469][1878 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:38:05][350100284941469][1878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284941469\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3957\"}'\'' -e'"" [2025-09-09 11:38:05][350100284941469][1878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:38:05][350100284941469][1878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284941469\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3957\"}'\'' -e'"" [2025-09-09 11:38:09][350100284941469][5814 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b98f544-01af-4fa3-8521-76ec21b29dcc","id":"QR_8b98f544-01af-4fa3-8521-76ec21b29dcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:38:09][350100284941469][5970 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-09 11:38:09][350100284941469][5970 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-09 11:38:09][350100284941469][5970 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:38:11][350100284941469][0 ms][INFO] === Request start === [2025-09-09 11:38:11][350100284941469][1 ms][DEBUG] START check_scloud [2025-09-09 11:38:11][350100284941469][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:38:11][350100284941469][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 17685 5015 24861932 229816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:38:11][350100284941469][309 ms][DEBUG] targetPkg: running [2025-09-09 11:38:11][350100284941469][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 11:38:11][350100284941469][309 ms][DEBUG] START check_boot_completed [2025-09-09 11:38:11][350100284941469][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:38:11][350100284941469][354 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 11:38:11][350100284941469][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:38:12][350100284941469][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:38:12][350100284941469][401 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-09 11:38:12][350100284941469][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:38:12][350100284941469][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1654\nsuccessfulTxPacketsPerSecond: 0.4982230046168665\nretriedTxPackets: 302\nretriedTxPacketsPerSecond: 0.10628757431826485\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1577\nsuccessfulRxPacketsPerSecond: 0.42847178397050517\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:38:12][350100284941469][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:38:12][350100284941469][979 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.697/335.697/335.697/0.000 ms\n [2025-09-09 11:38:12][350100284941469][979 ms][DEBUG] check_internet: online [2025-09-09 11:38:12][350100284941469][979 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:38:12][350100284941469][979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284941469\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8078\"}'\'' -e'"" [2025-09-09 11:38:12][350100284941469][979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:38:12][350100284941469][979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284941469\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8078\"}'\'' -e'"" [2025-09-09 11:38:17][350100284941469][6024 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cf30dc8-98ac-4637-be6c-b44a2c8cc5b5","id":"QR_4cf30dc8-98ac-4637-be6c-b44a2c8cc5b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:38:17][350100284941469][6180 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 11:38:17][350100284941469][6180 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 11:38:17][350100284941469][6180 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:43:03][356414818607080][1 ms][INFO] === Request start === [2025-09-09 11:43:03][356414818607080][1 ms][DEBUG] START check_scloud [2025-09-09 11:43:03][356414818607080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:43:03][356414818607080][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 17685 5015 24963500 242112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:43:03][356414818607080][309 ms][DEBUG] targetPkg: running [2025-09-09 11:43:03][356414818607080][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 11:43:03][356414818607080][309 ms][DEBUG] START check_boot_completed [2025-09-09 11:43:03][356414818607080][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:43:03][356414818607080][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:43:03][356414818607080][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:43:03][356414818607080][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:43:03][356414818607080][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:43:03][356414818607080][388 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:43:03][356414818607080][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818607080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2406\"}'\'' -e'"" [2025-09-09 11:43:03][356414818607080][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:43:03][356414818607080][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818607080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2406\"}'\'' -e'"" [2025-09-09 11:43:07][356414818607080][4074 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 11:43:07][356414818607080][4074 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-09-09 11:43:07][356414818607080][4074 ms][WARN] Detected error: Process with pid 17685 either refused to load frida-agent, or terminated during injectionProcess with pid 17685 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 11:43:07][356414818607080][4075 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 11:43:07][356414818607080][4340 ms][DEBUG] SU: done in 265 ms; outsystem 5433 5015 12970408 210124 ep_poll 0 S system_server\n [2025-09-09 11:43:07][356414818607080][4340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 11:43:08][356414818607080][4466 ms][DEBUG] SU: done in 127 ms; out [2025-09-09 11:43:08][356414818607080][4467 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 11:43:08][356414818607080][4467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 11:43:08][356414818607080][4590 ms][DEBUG] SU: done in 123 ms; out [2025-09-09 11:43:08][356414818607080][4590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 11:43:08][356414818607080][4761 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 11:43:10][356414818607080][6776 ms][DEBUG] START check_boot_completed [2025-09-09 11:43:10][356414818607080][6776 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:43:10][356414818607080][6823 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:43:10][356414818607080][6823 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:43:10][356414818607080][6870 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:43:10][356414818607080][6870 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:43:13][356414818607080][9885 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 11:43:13][356414818607080][9885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818607080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2406\"}'\'' -e'"" [2025-09-09 11:43:17][356414818607080][14321 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5db8ac4e-d901-46ea-931b-4dfd89fade51","id":"QR_5db8ac4e-d901-46ea-931b-4dfd89fade51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:43:18][356414818607080][14478 ms][DEBUG] proc_open done in 4593 ms; code=255; res.len=3343 [2025-09-09 11:43:18][356414818607080][14478 ms][DEBUG] END runCmdUntilRes#2 in 4593 ms [2025-09-09 11:43:18][356414818607080][14478 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:43:20][356414818607080][0 ms][INFO] === Request start === [2025-09-09 11:43:20][356414818607080][1 ms][DEBUG] START check_scloud [2025-09-09 11:43:20][356414818607080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:43:20][356414818607080][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 19431 5015 23778720 124820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:43:20][356414818607080][267 ms][DEBUG] targetPkg: running [2025-09-09 11:43:20][356414818607080][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-09 11:43:20][356414818607080][267 ms][DEBUG] START check_boot_completed [2025-09-09 11:43:20][356414818607080][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:43:20][356414818607080][314 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:43:20][356414818607080][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:43:20][356414818607080][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:43:20][356414818607080][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:43:20][356414818607080][360 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:43:20][356414818607080][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818607080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5232\"}'\'' -e'"" [2025-09-09 11:43:20][356414818607080][360 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:43:20][356414818607080][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818607080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5232\"}'\'' -e'"" [2025-09-09 11:43:25][356414818607080][5141 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2cac40d4-1865-4eda-8ca2-9f055684cc99","id":"QR_2cac40d4-1865-4eda-8ca2-9f055684cc99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:43:25][356414818607080][5297 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-09 11:43:25][356414818607080][5297 ms][DEBUG] END runCmdUntilRes#1 in 4937 ms [2025-09-09 11:43:25][356414818607080][5297 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:44:03][356174383776625][0 ms][INFO] === Request start === [2025-09-09 11:44:03][356174383776625][1 ms][DEBUG] START check_scloud [2025-09-09 11:44:03][356174383776625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:44:03][356174383776625][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 19431 5015 23880152 138768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:44:03][356174383776625][313 ms][DEBUG] targetPkg: running [2025-09-09 11:44:03][356174383776625][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 11:44:03][356174383776625][313 ms][DEBUG] START check_boot_completed [2025-09-09 11:44:03][356174383776625][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:44:03][356174383776625][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:44:03][356174383776625][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:44:03][356174383776625][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:44:03][356174383776625][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:44:03][356174383776625][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:44:03][356174383776625][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1732\nsuccessfulTxPacketsPerSecond: 0.6601777401608125\nretriedTxPackets: 324\nretriedTxPacketsPerSecond: 0.18620397799407531\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1645\nsuccessfulRxPacketsPerSecond: 0.5755395683453237\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:44:03][356174383776625][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:44:04][356174383776625][1844 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.469/294.469/294.469/0.000 ms\n [2025-09-09 11:44:04][356174383776625][1845 ms][DEBUG] check_internet: online [2025-09-09 11:44:04][356174383776625][1845 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:44:04][356174383776625][1845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356174383776625\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7576\"}'\'' -e'"" [2025-09-09 11:44:04][356174383776625][1845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:44:04][356174383776625][1845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356174383776625\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7576\"}'\'' -e'"" [2025-09-09 11:44:08][356174383776625][5171 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58761a91-8654-4a3e-9ce9-87beb3ff4f59","id":"QR_58761a91-8654-4a3e-9ce9-87beb3ff4f59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:44:08][356174383776625][5328 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 11:44:08][356174383776625][5328 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 11:44:08][356174383776625][5328 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:44:10][356174383776625][0 ms][INFO] === Request start === [2025-09-09 11:44:10][356174383776625][1 ms][DEBUG] START check_scloud [2025-09-09 11:44:10][356174383776625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:44:11][356174383776625][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 19431 5015 24002272 150120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:44:11][356174383776625][296 ms][DEBUG] targetPkg: running [2025-09-09 11:44:11][356174383776625][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 11:44:11][356174383776625][296 ms][DEBUG] START check_boot_completed [2025-09-09 11:44:11][356174383776625][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:44:11][356174383776625][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:44:11][356174383776625][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:44:11][356174383776625][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 11:44:11][356174383776625][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:44:11][356174383776625][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:44:11][356174383776625][561 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1732\nsuccessfulTxPacketsPerSecond: 0.6601777401608125\nretriedTxPackets: 324\nretriedTxPacketsPerSecond: 0.18620397799407531\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1645\nsuccessfulRxPacketsPerSecond: 0.5755395683453237\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:44:11][356174383776625][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:44:11][356174383776625][983 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.947/300.947/300.947/0.000 ms\n [2025-09-09 11:44:11][356174383776625][983 ms][DEBUG] check_internet: online [2025-09-09 11:44:11][356174383776625][983 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:44:11][356174383776625][983 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356174383776625\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6525\"}'\'' -e'"" [2025-09-09 11:44:11][356174383776625][983 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:44:11][356174383776625][983 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356174383776625\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6525\"}'\'' -e'"" [2025-09-09 11:44:16][356174383776625][5732 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c0662ce-c949-46fe-8299-d40c99be8e8c","id":"QR_7c0662ce-c949-46fe-8299-d40c99be8e8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:44:16][356174383776625][5888 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 11:44:16][356174383776625][5888 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 11:44:16][356174383776625][5888 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:46:03][354372643047306][1 ms][INFO] === Request start === [2025-09-09 11:46:03][354372643047306][1 ms][DEBUG] START check_scloud [2025-09-09 11:46:03][354372643047306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:46:04][354372643047306][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 19431 5015 24098644 161220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:46:04][354372643047306][284 ms][DEBUG] targetPkg: running [2025-09-09 11:46:04][354372643047306][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-09 11:46:04][354372643047306][284 ms][DEBUG] START check_boot_completed [2025-09-09 11:46:04][354372643047306][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:46:04][354372643047306][331 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:46:04][354372643047306][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:46:04][354372643047306][393 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 11:46:04][354372643047306][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:46:04][354372643047306][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:46:04][354372643047306][519 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1886\nsuccessfulTxPacketsPerSecond: 0.5075623494204231\nretriedTxPackets: 364\nretriedTxPacketsPerSecond: 0.13183437647283716\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1782\nsuccessfulRxPacketsPerSecond: 0.4515327394194673\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:46:04][354372643047306][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:46:04][354372643047306][925 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.455/282.455/282.455/0.000 ms\n [2025-09-09 11:46:04][354372643047306][925 ms][DEBUG] check_internet: online [2025-09-09 11:46:04][354372643047306][925 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:46:04][354372643047306][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354372643047306\",\"model\":\"SM-S921D\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DCM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9168\"}'\'' -e'"" [2025-09-09 11:46:04][354372643047306][925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:46:04][354372643047306][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354372643047306\",\"model\":\"SM-S921D\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DCM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9168\"}'\'' -e'"" [2025-09-09 11:46:09][354372643047306][5314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78e03d57-961d-4a21-8084-1fa9c877ea10","id":"QR_78e03d57-961d-4a21-8084-1fa9c877ea10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:46:09][354372643047306][5470 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-09 11:46:09][354372643047306][5470 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-09 11:46:09][354372643047306][5470 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:46:11][354372643047306][0 ms][INFO] === Request start === [2025-09-09 11:46:11][354372643047306][1 ms][DEBUG] START check_scloud [2025-09-09 11:46:11][354372643047306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:46:12][354372643047306][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 19431 5015 24224796 171896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:46:12][354372643047306][256 ms][DEBUG] targetPkg: running [2025-09-09 11:46:12][354372643047306][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 11:46:12][354372643047306][256 ms][DEBUG] START check_boot_completed [2025-09-09 11:46:12][354372643047306][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:46:12][354372643047306][303 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:46:12][354372643047306][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:46:12][354372643047306][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:46:12][354372643047306][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:46:12][354372643047306][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:46:12][354372643047306][459 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1886\nsuccessfulTxPacketsPerSecond: 0.5075623494204231\nretriedTxPackets: 364\nretriedTxPacketsPerSecond: 0.13183437647283716\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1782\nsuccessfulRxPacketsPerSecond: 0.4515327394194673\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:46:12][354372643047306][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:46:12][354372643047306][818 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.730/220.730/220.730/0.000 ms\n [2025-09-09 11:46:12][354372643047306][819 ms][DEBUG] check_internet: online [2025-09-09 11:46:12][354372643047306][819 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:46:12][354372643047306][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354372643047306\",\"model\":\"SM-S921D\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DCM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8863\"}'\'' -e'"" [2025-09-09 11:46:12][354372643047306][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:46:12][354372643047306][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354372643047306\",\"model\":\"SM-S921D\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DCM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8863\"}'\'' -e'"" [2025-09-09 11:46:17][354372643047306][5364 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77105d52-fff7-4c43-8f4b-1f4ec7204ebe","id":"QR_77105d52-fff7-4c43-8f4b-1f4ec7204ebe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:46:17][354372643047306][5520 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-09 11:46:17][354372643047306][5520 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-09 11:46:17][354372643047306][5520 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:47:03][352192665711825][0 ms][INFO] === Request start === [2025-09-09 11:47:03][352192665711825][1 ms][DEBUG] START check_scloud [2025-09-09 11:47:03][352192665711825][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:47:04][352192665711825][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19431 5015 24390776 183900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:47:04][352192665711825][316 ms][DEBUG] targetPkg: running [2025-09-09 11:47:04][352192665711825][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 11:47:04][352192665711825][316 ms][DEBUG] START check_boot_completed [2025-09-09 11:47:04][352192665711825][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:47:04][352192665711825][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:47:04][352192665711825][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:47:04][352192665711825][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:47:04][352192665711825][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:47:04][352192665711825][410 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:47:04][352192665711825][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665711825\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3338\"}'\'' -e'"" [2025-09-09 11:47:04][352192665711825][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:47:04][352192665711825][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665711825\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3338\"}'\'' -e'"" [2025-09-09 11:47:07][352192665711825][3987 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91345d22-b6df-4c3b-af07-2305d83781a6","id":"QR_91345d22-b6df-4c3b-af07-2305d83781a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:47:07][352192665711825][4143 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 11:47:07][352192665711825][4143 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-09-09 11:47:07][352192665711825][4144 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:47:10][352192665711825][0 ms][INFO] === Request start === [2025-09-09 11:47:10][352192665711825][1 ms][DEBUG] START check_scloud [2025-09-09 11:47:10][352192665711825][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:47:10][352192665711825][261 ms][DEBUG] SU: done in 261 ms; outu0_a118 19431 5015 24531328 195264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:47:10][352192665711825][261 ms][DEBUG] targetPkg: running [2025-09-09 11:47:10][352192665711825][261 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 11:47:10][352192665711825][262 ms][DEBUG] START check_boot_completed [2025-09-09 11:47:10][352192665711825][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:47:10][352192665711825][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:47:10][352192665711825][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:47:10][352192665711825][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:47:10][352192665711825][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:47:10][352192665711825][355 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:47:10][352192665711825][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665711825\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7779\"}'\'' -e'"" [2025-09-09 11:47:10][352192665711825][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:47:10][352192665711825][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665711825\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7779\"}'\'' -e'"" [2025-09-09 11:47:15][352192665711825][4948 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b785fa63-06fd-44b7-98a4-38b8210ac4ea","id":"QR_b785fa63-06fd-44b7-98a4-38b8210ac4ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:47:15][352192665711825][5104 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-09 11:47:15][352192665711825][5104 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-09 11:47:15][352192665711825][5104 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:48:05][357211454514920][1 ms][INFO] === Request start === [2025-09-09 11:48:05][357211454514920][1 ms][DEBUG] START check_scloud [2025-09-09 11:48:05][357211454514920][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:48:05][357211454514920][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 19431 5015 24632896 207352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:48:05][357211454514920][325 ms][DEBUG] targetPkg: running [2025-09-09 11:48:05][357211454514920][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 11:48:05][357211454514920][325 ms][DEBUG] START check_boot_completed [2025-09-09 11:48:05][357211454514920][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:48:05][357211454514920][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:48:05][357211454514920][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:48:05][357211454514920][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:48:05][357211454514920][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:48:05][357211454514920][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:48:05][357211454514920][528 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1957\nsuccessfulTxPacketsPerSecond: 0.622315715663073\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.14900517135594707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1845\nsuccessfulRxPacketsPerSecond: 0.5521956350249803\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:48:05][357211454514920][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:48:06][357211454514920][997 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.802/332.802/332.802/0.000 ms\n [2025-09-09 11:48:06][357211454514920][997 ms][DEBUG] check_internet: online [2025-09-09 11:48:06][357211454514920][997 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:48:06][357211454514920][997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211454514920\",\"model\":\"SM-S906U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8773\"}'\'' -e'"" [2025-09-09 11:48:06][357211454514920][997 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:48:06][357211454514920][998 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211454514920\",\"model\":\"SM-S906U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8773\"}'\'' -e'"" [2025-09-09 11:48:11][357211454514920][6855 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20aeda9f-2c10-4461-97b2-b333f11771f4","id":"QR_20aeda9f-2c10-4461-97b2-b333f11771f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:48:12][357211454514920][7011 ms][DEBUG] proc_open done in 6013 ms; code=255; res.len=3343 [2025-09-09 11:48:12][357211454514920][7011 ms][DEBUG] END runCmdUntilRes#1 in 6013 ms [2025-09-09 11:48:12][357211454514920][7011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:48:15][357211454514920][0 ms][INFO] === Request start === [2025-09-09 11:48:15][357211454514920][1 ms][DEBUG] START check_scloud [2025-09-09 11:48:15][357211454514920][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:48:16][357211454514920][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 19431 5015 24801992 217476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:48:16][357211454514920][324 ms][DEBUG] targetPkg: running [2025-09-09 11:48:16][357211454514920][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 11:48:16][357211454514920][324 ms][DEBUG] START check_boot_completed [2025-09-09 11:48:16][357211454514920][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:48:16][357211454514920][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:48:16][357211454514920][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:48:16][357211454514920][404 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 11:48:16][357211454514920][404 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 11:48:16][357211454514920][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:48:16][357211454514920][543 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1957\nsuccessfulTxPacketsPerSecond: 0.622315715663073\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.14900517135594707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1845\nsuccessfulRxPacketsPerSecond: 0.5521956350249803\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:48:16][357211454514920][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:48:16][357211454514920][980 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.634/336.634/336.634/0.000 ms\n [2025-09-09 11:48:16][357211454514920][980 ms][DEBUG] check_internet: online [2025-09-09 11:48:16][357211454514920][980 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:48:16][357211454514920][980 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211454514920\",\"model\":\"SM-S906U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4124\"}'\'' -e'"" [2025-09-09 11:48:16][357211454514920][980 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:48:16][357211454514920][980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211454514920\",\"model\":\"SM-S906U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4124\"}'\'' -e'"" [2025-09-09 11:48:20][357211454514920][4870 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_431730a3-3965-4a0c-99f8-4d95f5e5016a","id":"QR_431730a3-3965-4a0c-99f8-4d95f5e5016a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:48:20][357211454514920][5026 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-09 11:48:20][357211454514920][5026 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-09 11:48:20][357211454514920][5026 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:48:23][353138606161827][0 ms][INFO] === Request start === [2025-09-09 11:48:23][353138606161827][1 ms][DEBUG] START check_scloud [2025-09-09 11:48:23][353138606161827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:48:24][353138606161827][270 ms][DEBUG] SU: done in 270 ms; outu0_a118 19431 5015 24921936 204620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:48:24][353138606161827][271 ms][DEBUG] targetPkg: running [2025-09-09 11:48:24][353138606161827][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-09 11:48:24][353138606161827][271 ms][DEBUG] START check_boot_completed [2025-09-09 11:48:24][353138606161827][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:48:24][353138606161827][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:48:24][353138606161827][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:48:24][353138606161827][411 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 11:48:24][353138606161827][411 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 11:48:24][353138606161827][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:48:24][353138606161827][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1957\nsuccessfulTxPacketsPerSecond: 0.622315715663073\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.14900517135594707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1845\nsuccessfulRxPacketsPerSecond: 0.5521956350249803\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:48:24][353138606161827][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:48:24][353138606161827][942 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.013/327.013/327.013/0.000 ms\n [2025-09-09 11:48:24][353138606161827][942 ms][DEBUG] check_internet: online [2025-09-09 11:48:24][353138606161827][942 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:48:24][353138606161827][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353138606161827\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TNC0459KJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5772\"}'\'' -e'"" [2025-09-09 11:48:24][353138606161827][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:48:24][353138606161827][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353138606161827\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TNC0459KJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5772\"}'\'' -e'"" [2025-09-09 11:48:28][353138606161827][4332 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_120895a0-28dc-4ccf-9b93-f2eb044bbdfb","id":"QR_120895a0-28dc-4ccf-9b93-f2eb044bbdfb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:48:28][353138606161827][4488 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-09 11:48:28][353138606161827][4488 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 11:48:28][353138606161827][4488 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:50:03][353204333501279][0 ms][INFO] === Request start === [2025-09-09 11:50:03][353204333501279][1 ms][DEBUG] START check_scloud [2025-09-09 11:50:03][353204333501279][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:50:03][353204333501279][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 19431 5015 25024616 216656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:50:03][353204333501279][313 ms][DEBUG] targetPkg: running [2025-09-09 11:50:03][353204333501279][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 11:50:03][353204333501279][314 ms][DEBUG] START check_boot_completed [2025-09-09 11:50:03][353204333501279][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:50:03][353204333501279][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:50:03][353204333501279][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:50:03][353204333501279][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 11:50:03][353204333501279][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:50:03][353204333501279][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:50:04][353204333501279][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1957\nsuccessfulTxPacketsPerSecond: 0.622315715663073\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.14900517135594707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1845\nsuccessfulRxPacketsPerSecond: 0.5521956350249803\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:50:04][353204333501279][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:50:05][353204333501279][1875 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.617/306.617/306.617/0.000 ms\n [2025-09-09 11:50:05][353204333501279][1876 ms][DEBUG] check_internet: online [2025-09-09 11:50:05][353204333501279][1876 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:50:05][353204333501279][1876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204333501279\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-09-09 11:50:05][353204333501279][1876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:50:05][353204333501279][1876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204333501279\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-09-09 11:50:09][353204333501279][5609 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 11:50:09][353204333501279][5609 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 11:50:09][353204333501279][5609 ms][WARN] Detected error: Process with pid 19431 either refused to load frida-agent, or terminated during injectionProcess with pid 19431 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 11:50:09][353204333501279][5609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 11:50:09][353204333501279][5890 ms][DEBUG] SU: done in 281 ms; outsystem 5433 5015 13009568 217140 ep_poll 0 S system_server\n [2025-09-09 11:50:09][353204333501279][5890 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 11:50:09][353204333501279][6031 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 11:50:09][353204333501279][6031 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 11:50:09][353204333501279][6031 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 11:50:09][353204333501279][6156 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 11:50:09][353204333501279][6156 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 11:50:09][353204333501279][6359 ms][DEBUG] SU: done in 204 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 11:50:11][353204333501279][8374 ms][DEBUG] START check_boot_completed [2025-09-09 11:50:11][353204333501279][8374 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:50:11][353204333501279][8405 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:50:11][353204333501279][8405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:50:12][353204333501279][8452 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:50:12][353204333501279][8452 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:50:15][353204333501279][11467 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 11:50:15][353204333501279][11467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204333501279\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-09-09 11:50:18][353204333501279][15153 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52af47f6-152d-4a8f-a18b-b090c4632e0b","id":"QR_52af47f6-152d-4a8f-a18b-b090c4632e0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:50:18][353204333501279][15310 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-09-09 11:50:18][353204333501279][15310 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-09-09 11:50:18][353204333501279][15310 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:50:21][353204333501279][0 ms][INFO] === Request start === [2025-09-09 11:50:21][353204333501279][0 ms][DEBUG] START check_scloud [2025-09-09 11:50:21][353204333501279][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:50:21][353204333501279][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 21585 5015 23773572 124412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:50:21][353204333501279][254 ms][DEBUG] targetPkg: running [2025-09-09 11:50:21][353204333501279][254 ms][DEBUG] END check_scloud in 254 ms [2025-09-09 11:50:21][353204333501279][254 ms][DEBUG] START check_boot_completed [2025-09-09 11:50:21][353204333501279][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:50:21][353204333501279][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:50:21][353204333501279][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:50:21][353204333501279][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:50:21][353204333501279][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:50:21][353204333501279][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:50:21][353204333501279][441 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1957\nsuccessfulTxPacketsPerSecond: 0.622315715663073\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.14900517135594707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1845\nsuccessfulRxPacketsPerSecond: 0.5521956350249803\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:50:21][353204333501279][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:50:22][353204333501279][816 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.392/288.392/288.392/0.000 ms\n [2025-09-09 11:50:22][353204333501279][816 ms][DEBUG] check_internet: online [2025-09-09 11:50:22][353204333501279][816 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:50:22][353204333501279][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204333501279\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7421\"}'\'' -e'"" [2025-09-09 11:50:22][353204333501279][816 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:50:22][353204333501279][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204333501279\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7421\"}'\'' -e'"" [2025-09-09 11:50:27][353204333501279][5956 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69a5181b-a28b-4486-ad41-2a785b01570d","id":"QR_69a5181b-a28b-4486-ad41-2a785b01570d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:50:27][353204333501279][6112 ms][DEBUG] proc_open done in 5296 ms; code=255; res.len=3343 [2025-09-09 11:50:27][353204333501279][6112 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-09 11:50:27][353204333501279][6112 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:50:34][351240643708834][0 ms][INFO] === Request start === [2025-09-09 11:50:34][351240643708834][1 ms][DEBUG] START check_scloud [2025-09-09 11:50:34][351240643708834][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:50:35][351240643708834][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 21585 5015 23906996 137416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:50:35][351240643708834][292 ms][DEBUG] targetPkg: running [2025-09-09 11:50:35][351240643708834][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 11:50:35][351240643708834][292 ms][DEBUG] START check_boot_completed [2025-09-09 11:50:35][351240643708834][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:50:35][351240643708834][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:50:35][351240643708834][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:50:35][351240643708834][401 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 11:50:35][351240643708834][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:50:35][351240643708834][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:50:35][351240643708834][542 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1957\nsuccessfulTxPacketsPerSecond: 0.622315715663073\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.14900517135594707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1845\nsuccessfulRxPacketsPerSecond: 0.5521956350249803\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:50:35][351240643708834][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:50:35][351240643708834][1026 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.845/335.845/335.845/0.000 ms\n [2025-09-09 11:50:35][351240643708834][1026 ms][DEBUG] check_internet: online [2025-09-09 11:50:35][351240643708834][1026 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:50:35][351240643708834][1026 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643708834\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1890\"}'\'' -e'"" [2025-09-09 11:50:35][351240643708834][1026 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:50:35][351240643708834][1026 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643708834\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1890\"}'\'' -e'"" [2025-09-09 11:50:39][351240643708834][5181 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b823184-79ea-45da-ba6a-38f9b5aad645","id":"QR_8b823184-79ea-45da-ba6a-38f9b5aad645","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:50:40][351240643708834][5337 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-09 11:50:40][351240643708834][5337 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-09 11:50:40][351240643708834][5338 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:52:03][351786693301805][1 ms][INFO] === Request start === [2025-09-09 11:52:03][351786693301805][1 ms][DEBUG] START check_scloud [2025-09-09 11:52:03][351786693301805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:52:03][351786693301805][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 21585 5015 23975364 149436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:52:03][351786693301805][300 ms][DEBUG] targetPkg: running [2025-09-09 11:52:03][351786693301805][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 11:52:03][351786693301805][300 ms][DEBUG] START check_boot_completed [2025-09-09 11:52:03][351786693301805][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:52:03][351786693301805][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:52:03][351786693301805][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:52:03][351786693301805][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:52:03][351786693301805][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:52:03][351786693301805][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:52:03][351786693301805][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2374\nsuccessfulTxPacketsPerSecond: 1.3561813575472956\nretriedTxPackets: 474\nretriedTxPacketsPerSecond: 0.30245771283428896\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2193\nsuccessfulRxPacketsPerSecond: 1.1317772480250812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:52:03][351786693301805][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:52:04][351786693301805][863 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.693/253.693/253.693/0.000 ms\n [2025-09-09 11:52:04][351786693301805][863 ms][DEBUG] check_internet: online [2025-09-09 11:52:04][351786693301805][863 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:52:04][351786693301805][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693301805\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7511\"}'\'' -e'"" [2025-09-09 11:52:04][351786693301805][863 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:52:04][351786693301805][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693301805\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7511\"}'\'' -e'"" [2025-09-09 11:52:08][351786693301805][5190 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fa418de-c7d2-4e9b-878b-c1cecb5efe52","id":"QR_5fa418de-c7d2-4e9b-878b-c1cecb5efe52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:52:08][351786693301805][5346 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 11:52:08][351786693301805][5346 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 11:52:08][351786693301805][5346 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:52:11][351786693301805][0 ms][INFO] === Request start === [2025-09-09 11:52:11][351786693301805][1 ms][DEBUG] START check_scloud [2025-09-09 11:52:11][351786693301805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:52:11][351786693301805][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 21585 5015 24085888 160608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:52:11][351786693301805][262 ms][DEBUG] targetPkg: running [2025-09-09 11:52:11][351786693301805][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 11:52:11][351786693301805][262 ms][DEBUG] START check_boot_completed [2025-09-09 11:52:11][351786693301805][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:52:11][351786693301805][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:52:11][351786693301805][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:52:11][351786693301805][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 11:52:11][351786693301805][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 11:52:11][351786693301805][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:52:11][351786693301805][512 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2374\nsuccessfulTxPacketsPerSecond: 1.3561813575472956\nretriedTxPackets: 474\nretriedTxPacketsPerSecond: 0.30245771283428896\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2193\nsuccessfulRxPacketsPerSecond: 1.1317772480250812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:52:11][351786693301805][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:52:12][351786693301805][902 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.801/304.801/304.801/0.000 ms\n [2025-09-09 11:52:12][351786693301805][902 ms][DEBUG] check_internet: online [2025-09-09 11:52:12][351786693301805][902 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:52:12][351786693301805][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693301805\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4621\"}'\'' -e'"" [2025-09-09 11:52:12][351786693301805][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:52:12][351786693301805][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693301805\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4621\"}'\'' -e'"" [2025-09-09 11:52:17][351786693301805][5854 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27ead537-96d5-4d2a-933f-9be33ba2aa72","id":"QR_27ead537-96d5-4d2a-933f-9be33ba2aa72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:52:17][351786693301805][6010 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 11:52:17][351786693301805][6010 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 11:52:17][351786693301805][6010 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:53:03][350961875414442][0 ms][INFO] === Request start === [2025-09-09 11:53:03][350961875414442][1 ms][DEBUG] START check_scloud [2025-09-09 11:53:03][350961875414442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:53:04][350961875414442][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21585 5015 24204892 171540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:53:04][350961875414442][305 ms][DEBUG] targetPkg: running [2025-09-09 11:53:04][350961875414442][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 11:53:04][350961875414442][305 ms][DEBUG] START check_boot_completed [2025-09-09 11:53:04][350961875414442][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:53:04][350961875414442][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:53:04][350961875414442][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:53:04][350961875414442][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:53:04][350961875414442][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 11:53:04][350961875414442][398 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:53:04][350961875414442][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961875414442\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8932\"}'\'' -e'"" [2025-09-09 11:53:04][350961875414442][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:53:04][350961875414442][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961875414442\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8932\"}'\'' -e'"" [2025-09-09 11:53:07][350961875414442][3850 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fe44613-6a8f-4f75-9219-8cafed30de28","id":"QR_5fe44613-6a8f-4f75-9219-8cafed30de28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:53:07][350961875414442][4007 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-09 11:53:07][350961875414442][4007 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-09 11:53:07][350961875414442][4007 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:53:10][350961875414442][0 ms][INFO] === Request start === [2025-09-09 11:53:10][350961875414442][1 ms][DEBUG] START check_scloud [2025-09-09 11:53:10][350961875414442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:53:10][350961875414442][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 21585 5015 24387548 183988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:53:10][350961875414442][291 ms][DEBUG] targetPkg: running [2025-09-09 11:53:10][350961875414442][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 11:53:10][350961875414442][292 ms][DEBUG] START check_boot_completed [2025-09-09 11:53:10][350961875414442][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:53:10][350961875414442][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:53:10][350961875414442][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:53:10][350961875414442][386 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 11:53:10][350961875414442][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:53:10][350961875414442][386 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:53:10][350961875414442][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961875414442\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9075\"}'\'' -e'"" [2025-09-09 11:53:10][350961875414442][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:53:10][350961875414442][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961875414442\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9075\"}'\'' -e'"" [2025-09-09 11:53:14][350961875414442][4868 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3b1fcab-f638-4323-89e6-c65c5cb05fb0","id":"QR_b3b1fcab-f638-4323-89e6-c65c5cb05fb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:53:15][350961875414442][5024 ms][DEBUG] proc_open done in 4637 ms; code=255; res.len=3343 [2025-09-09 11:53:15][350961875414442][5024 ms][DEBUG] END runCmdUntilRes#1 in 4638 ms [2025-09-09 11:53:15][350961875414442][5024 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:56:03][352677531522315][1 ms][INFO] === Request start === [2025-09-09 11:56:03][352677531522315][1 ms][DEBUG] START check_scloud [2025-09-09 11:56:03][352677531522315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:56:03][352677531522315][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21585 5015 24499292 194532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:56:03][352677531522315][301 ms][DEBUG] targetPkg: running [2025-09-09 11:56:03][352677531522315][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 11:56:03][352677531522315][301 ms][DEBUG] START check_boot_completed [2025-09-09 11:56:03][352677531522315][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:56:04][352677531522315][331 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 11:56:04][352677531522315][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:56:04][352677531522315][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:56:04][352677531522315][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:56:04][352677531522315][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:56:04][352677531522315][519 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2374\nsuccessfulTxPacketsPerSecond: 1.3561813575472956\nretriedTxPackets: 474\nretriedTxPacketsPerSecond: 0.30245771283428896\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2193\nsuccessfulRxPacketsPerSecond: 1.1317772480250812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:56:04][352677531522315][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:56:05][352677531522315][1895 ms][DEBUG] SU: done in 1376 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.801/301.801/301.801/0.000 ms\n [2025-09-09 11:56:05][352677531522315][1895 ms][DEBUG] check_internet: online [2025-09-09 11:56:05][352677531522315][1895 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:56:05][352677531522315][1895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531522315\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6874\"}'\'' -e'"" [2025-09-09 11:56:05][352677531522315][1895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:56:05][352677531522315][1895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531522315\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6874\"}'\'' -e'"" [2025-09-09 11:56:10][352677531522315][6549 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d6ac809-c545-4914-807a-95a932295121","id":"QR_9d6ac809-c545-4914-807a-95a932295121","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:56:10][352677531522315][6705 ms][DEBUG] proc_open done in 4809 ms; code=255; res.len=3343 [2025-09-09 11:56:10][352677531522315][6705 ms][DEBUG] END runCmdUntilRes#1 in 4810 ms [2025-09-09 11:56:10][352677531522315][6705 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:56:12][352677531522315][0 ms][INFO] === Request start === [2025-09-09 11:56:12][352677531522315][1 ms][DEBUG] START check_scloud [2025-09-09 11:56:12][352677531522315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:56:13][352677531522315][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 21585 5015 24656228 206440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:56:13][352677531522315][303 ms][DEBUG] targetPkg: running [2025-09-09 11:56:13][352677531522315][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 11:56:13][352677531522315][303 ms][DEBUG] START check_boot_completed [2025-09-09 11:56:13][352677531522315][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:56:13][352677531522315][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 11:56:13][352677531522315][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:56:13][352677531522315][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:56:13][352677531522315][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 11:56:13][352677531522315][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:56:13][352677531522315][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2374\nsuccessfulTxPacketsPerSecond: 1.3561813575472956\nretriedTxPackets: 474\nretriedTxPacketsPerSecond: 0.30245771283428896\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2193\nsuccessfulRxPacketsPerSecond: 1.1317772480250812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:56:13][352677531522315][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:56:13][352677531522315][944 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.021/321.021/321.021/0.000 ms\n [2025-09-09 11:56:13][352677531522315][944 ms][DEBUG] check_internet: online [2025-09-09 11:56:13][352677531522315][944 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:56:13][352677531522315][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531522315\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8882\"}'\'' -e'"" [2025-09-09 11:56:13][352677531522315][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:56:13][352677531522315][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531522315\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8882\"}'\'' -e'"" [2025-09-09 11:56:18][352677531522315][5880 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_239eb642-2a03-4295-b653-4086c9461e55","id":"QR_239eb642-2a03-4295-b653-4086c9461e55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:56:18][352677531522315][6036 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 11:56:18][352677531522315][6036 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 11:56:18][352677531522315][6036 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:56:23][350642172602992][0 ms][INFO] === Request start === [2025-09-09 11:56:23][350642172602992][1 ms][DEBUG] START check_scloud [2025-09-09 11:56:23][350642172602992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:56:23][350642172602992][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 21585 5015 24835692 216976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:56:23][350642172602992][319 ms][DEBUG] targetPkg: running [2025-09-09 11:56:23][350642172602992][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 11:56:23][350642172602992][319 ms][DEBUG] START check_boot_completed [2025-09-09 11:56:23][350642172602992][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:56:23][350642172602992][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 11:56:23][350642172602992][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:56:23][350642172602992][443 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 11:56:23][350642172602992][443 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 11:56:23][350642172602992][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:56:23][350642172602992][553 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2374\nsuccessfulTxPacketsPerSecond: 1.3561813575472956\nretriedTxPackets: 474\nretriedTxPacketsPerSecond: 0.30245771283428896\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2193\nsuccessfulRxPacketsPerSecond: 1.1317772480250812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:56:23][350642172602992][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:56:24][350642172602992][990 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=338 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 338.824/338.824/338.824/0.000 ms\n [2025-09-09 11:56:24][350642172602992][990 ms][DEBUG] check_internet: online [2025-09-09 11:56:24][350642172602992][990 ms][DEBUG] rawBody.length=1150 [2025-09-09 11:56:24][350642172602992][990 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642172602992\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8886\"}'\'' -e'"" [2025-09-09 11:56:24][350642172602992][990 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:56:24][350642172602992][990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642172602992\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8886\"}'\'' -e'"" [2025-09-09 11:56:27][350642172602992][4333 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f37120ba-8e73-4e71-a30c-09fe08436f8b","id":"QR_f37120ba-8e73-4e71-a30c-09fe08436f8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:56:27][350642172602992][4489 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 11:56:27][350642172602992][4489 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 11:56:27][350642172602992][4489 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 11:56:30][350642172602992][0 ms][INFO] === Request start === [2025-09-09 11:56:30][350642172602992][1 ms][DEBUG] START check_scloud [2025-09-09 11:56:30][350642172602992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 11:56:30][350642172602992][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 21585 5015 24953552 229088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 11:56:30][350642172602992][312 ms][DEBUG] targetPkg: running [2025-09-09 11:56:30][350642172602992][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 11:56:30][350642172602992][312 ms][DEBUG] START check_boot_completed [2025-09-09 11:56:30][350642172602992][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 11:56:30][350642172602992][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 11:56:30][350642172602992][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 11:56:30][350642172602992][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 11:56:30][350642172602992][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 11:56:30][350642172602992][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 11:56:30][350642172602992][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2374\nsuccessfulTxPacketsPerSecond: 1.3561813575472956\nretriedTxPackets: 474\nretriedTxPacketsPerSecond: 0.30245771283428896\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2193\nsuccessfulRxPacketsPerSecond: 1.1317772480250812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 11:56:30][350642172602992][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 11:56:31][350642172602992][953 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=334 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 334.896/334.896/334.896/0.000 ms\n [2025-09-09 11:56:31][350642172602992][953 ms][DEBUG] check_internet: online [2025-09-09 11:56:31][350642172602992][953 ms][DEBUG] rawBody.length=1160 [2025-09-09 11:56:31][350642172602992][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642172602992\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-09-09 11:56:31][350642172602992][953 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 11:56:31][350642172602992][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642172602992\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-09-09 11:56:35][350642172602992][5702 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04d60dd6-afde-4604-ac2b-04bc5b8a5451","id":"QR_04d60dd6-afde-4604-ac2b-04bc5b8a5451","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 11:56:36][350642172602992][5858 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 11:56:36][350642172602992][5858 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 11:56:36][350642172602992][5858 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:00:03][352288960374374][1 ms][INFO] === Request start === [2025-09-09 12:00:03][352288960374374][1 ms][DEBUG] START check_scloud [2025-09-09 12:00:03][352288960374374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:00:04][352288960374374][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 21585 5015 25030252 240632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:00:04][352288960374374][284 ms][DEBUG] targetPkg: running [2025-09-09 12:00:04][352288960374374][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-09 12:00:04][352288960374374][284 ms][DEBUG] START check_boot_completed [2025-09-09 12:00:04][352288960374374][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:00:04][352288960374374][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:00:04][352288960374374][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:00:04][352288960374374][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:00:04][352288960374374][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 12:00:04][352288960374374][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:00:04][352288960374374][518 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2615\nsuccessfulTxPacketsPerSecond: 0.8007016937664875\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.20598964735901337\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2402\nsuccessfulRxPacketsPerSecond: 0.6943844564198999\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:00:04][352288960374374][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:00:04][352288960374374][940 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.420/308.420/308.420/0.000 ms\n [2025-09-09 12:00:04][352288960374374][940 ms][DEBUG] check_internet: online [2025-09-09 12:00:04][352288960374374][940 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:00:04][352288960374374][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960374374\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3786\"}'\'' -e'"" [2025-09-09 12:00:04][352288960374374][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:00:04][352288960374374][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960374374\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3786\"}'\'' -e'"" [2025-09-09 12:00:08][352288960374374][4595 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 12:00:08][352288960374374][4595 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 12:00:08][352288960374374][4595 ms][WARN] Detected error: Process with pid 21585 either refused to load frida-agent, or terminated during injectionProcess with pid 21585 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 12:00:08][352288960374374][4595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 12:00:08][352288960374374][4845 ms][DEBUG] SU: done in 250 ms; outsystem 5433 5015 13027004 213068 ep_poll 0 S system_server\n [2025-09-09 12:00:08][352288960374374][4845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 12:00:08][352288960374374][4986 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 12:00:08][352288960374374][4986 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 12:00:08][352288960374374][4986 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 12:00:09][352288960374374][5126 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 12:00:09][352288960374374][5126 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 12:00:09][352288960374374][5298 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 12:00:11][352288960374374][7313 ms][DEBUG] START check_boot_completed [2025-09-09 12:00:11][352288960374374][7313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:00:11][352288960374374][7360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:00:11][352288960374374][7360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:00:11][352288960374374][7422 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:00:11][352288960374374][7422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:00:14][352288960374374][10437 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 12:00:14][352288960374374][10437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960374374\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3786\"}'\'' -e'"" [2025-09-09 12:00:18][352288960374374][14655 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_898e7184-b2ba-4037-9ef9-267c2acf2296","id":"QR_898e7184-b2ba-4037-9ef9-267c2acf2296","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:00:18][352288960374374][14811 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-09-09 12:00:18][352288960374374][14812 ms][DEBUG] END runCmdUntilRes#2 in 4374 ms [2025-09-09 12:00:18][352288960374374][14812 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:00:21][352288960374374][0 ms][INFO] === Request start === [2025-09-09 12:00:21][352288960374374][1 ms][DEBUG] START check_scloud [2025-09-09 12:00:21][352288960374374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:00:21][352288960374374][243 ms][DEBUG] SU: done in 242 ms; outu0_a118 23205 5015 23734848 124700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:00:21][352288960374374][243 ms][DEBUG] targetPkg: running [2025-09-09 12:00:21][352288960374374][243 ms][DEBUG] END check_scloud in 242 ms [2025-09-09 12:00:21][352288960374374][243 ms][DEBUG] START check_boot_completed [2025-09-09 12:00:21][352288960374374][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:00:21][352288960374374][289 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:00:21][352288960374374][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:00:21][352288960374374][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:00:21][352288960374374][336 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:00:21][352288960374374][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:00:21][352288960374374][432 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2615\nsuccessfulTxPacketsPerSecond: 0.8007016937664875\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.20598964735901337\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2402\nsuccessfulRxPacketsPerSecond: 0.6943844564198999\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:00:21][352288960374374][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:00:22][352288960374374][883 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.716/322.716/322.716/0.000 ms\n [2025-09-09 12:00:22][352288960374374][883 ms][DEBUG] check_internet: online [2025-09-09 12:00:22][352288960374374][883 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:00:22][352288960374374][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960374374\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5371\"}'\'' -e'"" [2025-09-09 12:00:22][352288960374374][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:00:22][352288960374374][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960374374\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5371\"}'\'' -e'"" [2025-09-09 12:00:27][352288960374374][6132 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab71505b-707c-4c00-92fe-0e8488f14b1c","id":"QR_ab71505b-707c-4c00-92fe-0e8488f14b1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:00:27][352288960374374][6288 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-09 12:00:27][352288960374374][6288 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-09 12:00:27][352288960374374][6288 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:01:05][356697219730358][0 ms][INFO] === Request start === [2025-09-09 12:01:05][356697219730358][1 ms][DEBUG] START check_scloud [2025-09-09 12:01:05][356697219730358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:01:05][356697219730358][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 23205 5015 23812700 138484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:01:05][356697219730358][260 ms][DEBUG] targetPkg: running [2025-09-09 12:01:05][356697219730358][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 12:01:05][356697219730358][261 ms][DEBUG] START check_boot_completed [2025-09-09 12:01:05][356697219730358][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:01:05][356697219730358][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:01:05][356697219730358][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:01:05][356697219730358][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:01:05][356697219730358][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:01:05][356697219730358][354 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:01:05][356697219730358][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697219730358\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8900\"}'\'' -e'"" [2025-09-09 12:01:05][356697219730358][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:01:05][356697219730358][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697219730358\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8900\"}'\'' -e'"" [2025-09-09 12:01:10][356697219730358][5243 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2315ac26-24f3-41dd-9026-13d5492edff1","id":"QR_2315ac26-24f3-41dd-9026-13d5492edff1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:01:10][356697219730358][5399 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-09 12:01:10][356697219730358][5399 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-09-09 12:01:10][356697219730358][5399 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:01:14][356697219730358][0 ms][INFO] === Request start === [2025-09-09 12:01:14][356697219730358][1 ms][DEBUG] START check_scloud [2025-09-09 12:01:14][356697219730358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:01:14][356697219730358][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 23205 5015 23959332 149740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:01:14][356697219730358][298 ms][DEBUG] targetPkg: running [2025-09-09 12:01:14][356697219730358][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 12:01:14][356697219730358][298 ms][DEBUG] START check_boot_completed [2025-09-09 12:01:14][356697219730358][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:01:14][356697219730358][344 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 12:01:14][356697219730358][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:01:14][356697219730358][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:01:14][356697219730358][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:01:14][356697219730358][391 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:01:14][356697219730358][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697219730358\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8029\"}'\'' -e'"" [2025-09-09 12:01:14][356697219730358][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:01:14][356697219730358][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697219730358\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8029\"}'\'' -e'"" [2025-09-09 12:01:19][356697219730358][4843 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fd29f29-dd3e-42cd-a200-e02c3e876153","id":"QR_5fd29f29-dd3e-42cd-a200-e02c3e876153","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:01:19][356697219730358][4999 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-09 12:01:19][356697219730358][4999 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-09 12:01:19][356697219730358][4999 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:04:05][356556776733942][1 ms][INFO] === Request start === [2025-09-09 12:04:05][356556776733942][1 ms][DEBUG] START check_scloud [2025-09-09 12:04:05][356556776733942][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:04:05][356556776733942][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23205 5015 24043544 160988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:04:05][356556776733942][310 ms][DEBUG] targetPkg: running [2025-09-09 12:04:05][356556776733942][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 12:04:05][356556776733942][311 ms][DEBUG] START check_boot_completed [2025-09-09 12:04:05][356556776733942][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:04:05][356556776733942][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:04:05][356556776733942][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:04:05][356556776733942][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:04:05][356556776733942][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 12:04:05][356556776733942][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:04:05][356556776733942][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2776\nsuccessfulTxPacketsPerSecond: 0.5348215323799558\nretriedTxPackets: 581\nretriedTxPacketsPerSecond: 0.14948427923663363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2545\nsuccessfulRxPacketsPerSecond: 0.47502782068530236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:04:05][356556776733942][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:04:07][356556776733942][1904 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.524/303.524/303.524/0.000 ms\n [2025-09-09 12:04:07][356556776733942][1904 ms][DEBUG] check_internet: online [2025-09-09 12:04:07][356556776733942][1904 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:04:07][356556776733942][1904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556776733942\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4261\"}'\'' -e'"" [2025-09-09 12:04:07][356556776733942][1905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:04:07][356556776733942][1905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556776733942\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4261\"}'\'' -e'"" [2025-09-09 12:04:12][356556776733942][6840 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ba910be-0d4d-47e0-83d1-1c2265b3b874","id":"QR_6ba910be-0d4d-47e0-83d1-1c2265b3b874","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:04:12][356556776733942][6996 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 12:04:12][356556776733942][6996 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 12:04:12][356556776733942][6997 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:04:15][356556776733942][0 ms][INFO] === Request start === [2025-09-09 12:04:15][356556776733942][1 ms][DEBUG] START check_scloud [2025-09-09 12:04:15][356556776733942][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:04:16][356556776733942][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 23205 5015 24188192 171896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:04:16][356556776733942][308 ms][DEBUG] targetPkg: running [2025-09-09 12:04:16][356556776733942][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 12:04:16][356556776733942][308 ms][DEBUG] START check_boot_completed [2025-09-09 12:04:16][356556776733942][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:04:16][356556776733942][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:04:16][356556776733942][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:04:16][356556776733942][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:04:16][356556776733942][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:04:16][356556776733942][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:04:16][356556776733942][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2776\nsuccessfulTxPacketsPerSecond: 0.5348215323799558\nretriedTxPackets: 581\nretriedTxPacketsPerSecond: 0.14948427923663363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2545\nsuccessfulRxPacketsPerSecond: 0.47502782068530236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:04:16][356556776733942][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:04:16][356556776733942][886 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.518/256.518/256.518/0.000 ms\n [2025-09-09 12:04:16][356556776733942][886 ms][DEBUG] check_internet: online [2025-09-09 12:04:16][356556776733942][886 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:04:16][356556776733942][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556776733942\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6137\"}'\'' -e'"" [2025-09-09 12:04:16][356556776733942][886 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:04:16][356556776733942][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556776733942\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6137\"}'\'' -e'"" [2025-09-09 12:04:20][356556776733942][4760 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6107c1b8-aa1c-40ce-b0cd-8959f44042fe","id":"QR_6107c1b8-aa1c-40ce-b0cd-8959f44042fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:04:20][356556776733942][4916 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 12:04:20][356556776733942][4916 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 12:04:20][356556776733942][4916 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:05:03][350481057460931][0 ms][INFO] === Request start === [2025-09-09 12:05:03][350481057460931][1 ms][DEBUG] START check_scloud [2025-09-09 12:05:03][350481057460931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:05:04][350481057460931][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 23205 5015 24313404 183920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:05:04][350481057460931][323 ms][DEBUG] targetPkg: running [2025-09-09 12:05:04][350481057460931][323 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 12:05:04][350481057460931][323 ms][DEBUG] START check_boot_completed [2025-09-09 12:05:04][350481057460931][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:05:04][350481057460931][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:05:04][350481057460931][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:05:04][350481057460931][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:05:04][350481057460931][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:05:04][350481057460931][417 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:05:04][350481057460931][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481057460931\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7424\"}'\'' -e'"" [2025-09-09 12:05:04][350481057460931][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:05:04][350481057460931][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481057460931\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7424\"}'\'' -e'"" [2025-09-09 12:05:07][350481057460931][3822 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbe5ebae-1f31-4a0b-b0b2-382a67fc213b","id":"QR_cbe5ebae-1f31-4a0b-b0b2-382a67fc213b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:05:07][350481057460931][3978 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-09 12:05:07][350481057460931][3978 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-09 12:05:07][350481057460931][3978 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:05:10][350481057460931][0 ms][INFO] === Request start === [2025-09-09 12:05:10][350481057460931][1 ms][DEBUG] START check_scloud [2025-09-09 12:05:10][350481057460931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:05:10][350481057460931][280 ms][DEBUG] SU: done in 280 ms; outu0_a118 23205 5015 24435396 194784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:05:10][350481057460931][281 ms][DEBUG] targetPkg: running [2025-09-09 12:05:10][350481057460931][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-09 12:05:10][350481057460931][281 ms][DEBUG] START check_boot_completed [2025-09-09 12:05:10][350481057460931][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:05:10][350481057460931][326 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 12:05:10][350481057460931][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:05:10][350481057460931][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:05:10][350481057460931][389 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 12:05:10][350481057460931][389 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:05:10][350481057460931][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481057460931\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6280\"}'\'' -e'"" [2025-09-09 12:05:10][350481057460931][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:05:10][350481057460931][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481057460931\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6280\"}'\'' -e'"" [2025-09-09 12:05:16][350481057460931][6621 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_586c3de8-ab67-4641-b991-2f57f323bb85","id":"QR_586c3de8-ab67-4641-b991-2f57f323bb85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:05:16][350481057460931][6778 ms][DEBUG] proc_open done in 6388 ms; code=255; res.len=3343 [2025-09-09 12:05:16][350481057460931][6778 ms][DEBUG] END runCmdUntilRes#1 in 6389 ms [2025-09-09 12:05:16][350481057460931][6778 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:07:03][350753207249004][1 ms][INFO] === Request start === [2025-09-09 12:07:03][350753207249004][1 ms][DEBUG] START check_scloud [2025-09-09 12:07:03][350753207249004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:07:03][350753207249004][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 23205 5015 24561540 207208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:07:03][350753207249004][262 ms][DEBUG] targetPkg: running [2025-09-09 12:07:03][350753207249004][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 12:07:03][350753207249004][262 ms][DEBUG] START check_boot_completed [2025-09-09 12:07:03][350753207249004][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:07:03][350753207249004][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:07:03][350753207249004][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:07:03][350753207249004][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:07:03][350753207249004][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:07:03][350753207249004][356 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:07:03][350753207249004][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753207249004\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2794\"}'\'' -e'"" [2025-09-09 12:07:03][350753207249004][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:07:03][350753207249004][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753207249004\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2794\"}'\'' -e'"" [2025-09-09 12:07:07][350753207249004][4808 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f60d001f-a8f8-4723-b568-5918b9f65441","id":"QR_f60d001f-a8f8-4723-b568-5918b9f65441","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:07:08][350753207249004][4964 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-09 12:07:08][350753207249004][4964 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-09 12:07:08][350753207249004][4964 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:07:10][350753207249004][0 ms][INFO] === Request start === [2025-09-09 12:07:10][350753207249004][1 ms][DEBUG] START check_scloud [2025-09-09 12:07:10][350753207249004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:07:10][350753207249004][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 23205 5015 24687756 217848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:07:10][350753207249004][275 ms][DEBUG] targetPkg: running [2025-09-09 12:07:10][350753207249004][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 12:07:10][350753207249004][275 ms][DEBUG] START check_boot_completed [2025-09-09 12:07:10][350753207249004][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:07:10][350753207249004][306 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:07:10][350753207249004][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:07:10][350753207249004][368 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:07:10][350753207249004][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:07:10][350753207249004][369 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:07:10][350753207249004][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753207249004\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2685\"}'\'' -e'"" [2025-09-09 12:07:10][350753207249004][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:07:10][350753207249004][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753207249004\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2685\"}'\'' -e'"" [2025-09-09 12:07:15][350753207249004][5320 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8005d991-4367-4434-bcd4-83f4dd3e3d4e","id":"QR_8005d991-4367-4434-bcd4-83f4dd3e3d4e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:07:15][350753207249004][5476 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 12:07:15][350753207249004][5476 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 12:07:15][350753207249004][5476 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:08:03][354916449080695][0 ms][INFO] === Request start === [2025-09-09 12:08:03][354916449080695][1 ms][DEBUG] START check_scloud [2025-09-09 12:08:03][354916449080695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:08:03][354916449080695][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 23205 5015 24821964 229976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:08:03][354916449080695][309 ms][DEBUG] targetPkg: running [2025-09-09 12:08:03][354916449080695][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 12:08:03][354916449080695][309 ms][DEBUG] START check_boot_completed [2025-09-09 12:08:03][354916449080695][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:08:03][354916449080695][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:08:03][354916449080695][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:08:03][354916449080695][389 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 12:08:03][354916449080695][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 12:08:03][354916449080695][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:08:04][354916449080695][497 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2931\nsuccessfulTxPacketsPerSecond: 0.5146475328461336\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.11953103988684395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2681\nsuccessfulRxPacketsPerSecond: 0.45156170623918823\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:08:04][354916449080695][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:08:04][354916449080695][872 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.083/258.083/258.083/0.000 ms\n [2025-09-09 12:08:04][354916449080695][872 ms][DEBUG] check_internet: online [2025-09-09 12:08:04][354916449080695][872 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:08:04][354916449080695][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916449080695\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3668\"}'\'' -e'"" [2025-09-09 12:08:04][354916449080695][872 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:08:04][354916449080695][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916449080695\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3668\"}'\'' -e'"" [2025-09-09 12:08:09][354916449080695][5464 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6862ceaa-ded0-4c9a-8f6b-5d128832ac38","id":"QR_6862ceaa-ded0-4c9a-8f6b-5d128832ac38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:08:09][354916449080695][5620 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-09 12:08:09][354916449080695][5620 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-09 12:08:09][354916449080695][5620 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:08:11][354916449080695][0 ms][INFO] === Request start === [2025-09-09 12:08:11][354916449080695][1 ms][DEBUG] START check_scloud [2025-09-09 12:08:11][354916449080695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:08:11][354916449080695][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 23205 5015 24987092 240976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:08:11][354916449080695][260 ms][DEBUG] targetPkg: running [2025-09-09 12:08:11][354916449080695][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 12:08:11][354916449080695][260 ms][DEBUG] START check_boot_completed [2025-09-09 12:08:11][354916449080695][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:08:11][354916449080695][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:08:11][354916449080695][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:08:11][354916449080695][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:08:11][354916449080695][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:08:11][354916449080695][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:08:12][354916449080695][478 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2931\nsuccessfulTxPacketsPerSecond: 0.5146475328461336\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.11953103988684395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2681\nsuccessfulRxPacketsPerSecond: 0.45156170623918823\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:08:12][354916449080695][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:08:12][354916449080695][917 ms][DEBUG] SU: done in 439 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.091/335.091/335.091/0.000 ms\n [2025-09-09 12:08:12][354916449080695][917 ms][DEBUG] check_internet: online [2025-09-09 12:08:12][354916449080695][917 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:08:12][354916449080695][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916449080695\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4074\"}'\'' -e'"" [2025-09-09 12:08:12][354916449080695][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:08:12][354916449080695][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916449080695\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4074\"}'\'' -e'"" [2025-09-09 12:08:16][354916449080695][4650 ms][DEBUG] proc_open done in 3732 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 12:08:16][354916449080695][4650 ms][DEBUG] END runCmdUntilRes#1 in 3732 ms [2025-09-09 12:08:16][354916449080695][4650 ms][WARN] Detected error: Process with pid 23205 either refused to load frida-agent, or terminated during injectionProcess with pid 23205 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 12:08:16][354916449080695][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 12:08:16][354916449080695][4915 ms][DEBUG] SU: done in 265 ms; outsystem 5433 5015 13044440 188572 ep_poll 0 S system_server\n [2025-09-09 12:08:16][354916449080695][4915 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 12:08:16][354916449080695][5042 ms][DEBUG] SU: done in 127 ms; out [2025-09-09 12:08:16][354916449080695][5042 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 12:08:16][354916449080695][5042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 12:08:16][354916449080695][5196 ms][DEBUG] SU: done in 154 ms; out [2025-09-09 12:08:16][354916449080695][5196 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 12:08:16][354916449080695][5352 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 12:08:18][354916449080695][7367 ms][DEBUG] START check_boot_completed [2025-09-09 12:08:18][354916449080695][7367 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:08:19][354916449080695][7414 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:08:19][354916449080695][7414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:08:19][354916449080695][7461 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:08:19][354916449080695][7461 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:08:22][354916449080695][10476 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 12:08:22][354916449080695][10476 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916449080695\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4074\"}'\'' -e'"" [2025-09-09 12:08:26][354916449080695][15381 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e293150-58a3-4502-aacf-1ca941597499","id":"QR_6e293150-58a3-4502-aacf-1ca941597499","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:08:27][354916449080695][15537 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-09 12:08:27][354916449080695][15537 ms][DEBUG] END runCmdUntilRes#2 in 5061 ms [2025-09-09 12:08:27][354916449080695][15537 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:08:31][356513703684300][0 ms][INFO] === Request start === [2025-09-09 12:08:31][356513703684300][1 ms][DEBUG] START check_scloud [2025-09-09 12:08:31][356513703684300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:08:31][356513703684300][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 24912 5015 23761788 124224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:08:31][356513703684300][239 ms][DEBUG] targetPkg: running [2025-09-09 12:08:31][356513703684300][239 ms][DEBUG] END check_scloud in 239 ms [2025-09-09 12:08:31][356513703684300][239 ms][DEBUG] START check_boot_completed [2025-09-09 12:08:31][356513703684300][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:08:31][356513703684300][286 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:08:31][356513703684300][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:08:31][356513703684300][349 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:08:31][356513703684300][349 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:08:31][356513703684300][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:08:31][356513703684300][489 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2931\nsuccessfulTxPacketsPerSecond: 0.5146475328461336\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.11953103988684395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2681\nsuccessfulRxPacketsPerSecond: 0.45156170623918823\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:08:31][356513703684300][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:08:32][356513703684300][911 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=311 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 311.222/311.222/311.222/0.000 ms\n [2025-09-09 12:08:32][356513703684300][911 ms][DEBUG] check_internet: online [2025-09-09 12:08:32][356513703684300][911 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:08:32][356513703684300][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513703684300\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7738\"}'\'' -e'"" [2025-09-09 12:08:32][356513703684300][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:08:32][356513703684300][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513703684300\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7738\"}'\'' -e'"" [2025-09-09 12:08:35][356513703684300][4254 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ebf7cec-2946-4641-a459-556ab9285b31","id":"QR_8ebf7cec-2946-4641-a459-556ab9285b31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:08:35][356513703684300][4410 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 12:08:35][356513703684300][4410 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 12:08:35][356513703684300][4410 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:08:38][356513703684300][0 ms][INFO] === Request start === [2025-09-09 12:08:38][356513703684300][1 ms][DEBUG] START check_scloud [2025-09-09 12:08:38][356513703684300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:08:38][356513703684300][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 24912 5015 23938324 137744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:08:38][356513703684300][319 ms][DEBUG] targetPkg: running [2025-09-09 12:08:38][356513703684300][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 12:08:38][356513703684300][319 ms][DEBUG] START check_boot_completed [2025-09-09 12:08:38][356513703684300][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:08:38][356513703684300][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:08:38][356513703684300][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:08:38][356513703684300][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:08:38][356513703684300][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:08:38][356513703684300][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:08:38][356513703684300][552 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2931\nsuccessfulTxPacketsPerSecond: 0.5146475328461336\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.11953103988684395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2681\nsuccessfulRxPacketsPerSecond: 0.45156170623918823\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:08:38][356513703684300][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:08:39][356513703684300][912 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.188/262.188/262.188/0.000 ms\n [2025-09-09 12:08:39][356513703684300][912 ms][DEBUG] check_internet: online [2025-09-09 12:08:39][356513703684300][912 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:08:39][356513703684300][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513703684300\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6057\"}'\'' -e'"" [2025-09-09 12:08:39][356513703684300][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:08:39][356513703684300][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513703684300\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6057\"}'\'' -e'"" [2025-09-09 12:08:43][356513703684300][5551 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_882e1193-809c-4193-8468-d27be3c076aa","id":"QR_882e1193-809c-4193-8468-d27be3c076aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:08:43][356513703684300][5707 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 12:08:43][356513703684300][5707 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 12:08:43][356513703684300][5708 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:09:03][350250290007852][0 ms][INFO] === Request start === [2025-09-09 12:09:03][350250290007852][1 ms][DEBUG] START check_scloud [2025-09-09 12:09:03][350250290007852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:09:03][350250290007852][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 24912 5015 23951360 150052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:09:03][350250290007852][304 ms][DEBUG] targetPkg: running [2025-09-09 12:09:03][350250290007852][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 12:09:03][350250290007852][305 ms][DEBUG] START check_boot_completed [2025-09-09 12:09:03][350250290007852][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:09:03][350250290007852][350 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 12:09:03][350250290007852][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:09:03][350250290007852][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:09:03][350250290007852][397 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 12:09:03][350250290007852][397 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:09:03][350250290007852][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250290007852\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7368\"}'\'' -e'"" [2025-09-09 12:09:03][350250290007852][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:09:03][350250290007852][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250290007852\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7368\"}'\'' -e'"" [2025-09-09 12:09:07][350250290007852][3724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78728d11-67fd-4021-acf8-5ffb18acbf04","id":"QR_78728d11-67fd-4021-acf8-5ffb18acbf04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:09:07][350250290007852][3880 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 12:09:07][350250290007852][3880 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 12:09:07][350250290007852][3880 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:09:09][350250290007852][1 ms][INFO] === Request start === [2025-09-09 12:09:09][350250290007852][1 ms][DEBUG] START check_scloud [2025-09-09 12:09:09][350250290007852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:09:09][350250290007852][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 24912 5015 24114504 161000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:09:09][350250290007852][254 ms][DEBUG] targetPkg: running [2025-09-09 12:09:09][350250290007852][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 12:09:09][350250290007852][254 ms][DEBUG] START check_boot_completed [2025-09-09 12:09:09][350250290007852][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:09:09][350250290007852][286 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:09:09][350250290007852][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:09:10][350250290007852][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:09:10][350250290007852][333 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 12:09:10][350250290007852][333 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:09:10][350250290007852][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250290007852\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4500\"}'\'' -e'"" [2025-09-09 12:09:10][350250290007852][333 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:09:10][350250290007852][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250290007852\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4500\"}'\'' -e'"" [2025-09-09 12:09:14][350250290007852][4941 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_661df16d-b02f-480f-8639-8557eca41da2","id":"QR_661df16d-b02f-480f-8639-8557eca41da2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:09:14][350250290007852][5097 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-09 12:09:14][350250290007852][5097 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-09 12:09:14][350250290007852][5097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:10:04][359944697845366][0 ms][INFO] === Request start === [2025-09-09 12:10:04][359944697845366][1 ms][DEBUG] START check_scloud [2025-09-09 12:10:04][359944697845366][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:10:04][359944697845366][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 24912 5015 24229376 171584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:10:04][359944697845366][299 ms][DEBUG] targetPkg: running [2025-09-09 12:10:04][359944697845366][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 12:10:04][359944697845366][299 ms][DEBUG] START check_boot_completed [2025-09-09 12:10:04][359944697845366][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:10:04][359944697845366][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:10:04][359944697845366][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:10:04][359944697845366][424 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 12:10:04][359944697845366][424 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 12:10:04][359944697845366][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:10:04][359944697845366][549 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3147\nsuccessfulTxPacketsPerSecond: 1.2571149212557182\nretriedTxPackets: 679\nretriedTxPacketsPerSecond: 0.36083854221228945\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2866\nsuccessfulRxPacketsPerSecond: 1.0766956501495735\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:10:04][359944697845366][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:10:06][359944697845366][2080 ms][DEBUG] SU: done in 1531 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=393 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 393.458/393.458/393.458/0.000 ms\n [2025-09-09 12:10:06][359944697845366][2080 ms][DEBUG] check_internet: online [2025-09-09 12:10:06][359944697845366][2081 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:10:06][359944697845366][2081 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944697845366\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9051\"}'\'' -e'"" [2025-09-09 12:10:06][359944697845366][2081 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:10:06][359944697845366][2081 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944697845366\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9051\"}'\'' -e'"" [2025-09-09 12:10:09][359944697845366][5719 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81559382-e9ae-4a80-af7b-e89eb643b014","id":"QR_81559382-e9ae-4a80-af7b-e89eb643b014","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:10:09][359944697845366][5876 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-09 12:10:09][359944697845366][5876 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-09 12:10:09][359944697845366][5876 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:10:12][359944697845366][0 ms][INFO] === Request start === [2025-09-09 12:10:12][359944697845366][1 ms][DEBUG] START check_scloud [2025-09-09 12:10:12][359944697845366][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:10:12][359944697845366][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 24912 5015 24355464 183340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:10:12][359944697845366][321 ms][DEBUG] targetPkg: running [2025-09-09 12:10:12][359944697845366][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 12:10:12][359944697845366][321 ms][DEBUG] START check_boot_completed [2025-09-09 12:10:12][359944697845366][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:10:12][359944697845366][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:10:12][359944697845366][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:10:12][359944697845366][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:10:12][359944697845366][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:10:12][359944697845366][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:10:12][359944697845366][539 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3147\nsuccessfulTxPacketsPerSecond: 1.2571149212557182\nretriedTxPackets: 679\nretriedTxPacketsPerSecond: 0.36083854221228945\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2866\nsuccessfulRxPacketsPerSecond: 1.0766956501495735\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:10:12][359944697845366][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:10:13][359944697845366][867 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.330/226.330/226.330/0.000 ms\n [2025-09-09 12:10:13][359944697845366][867 ms][DEBUG] check_internet: online [2025-09-09 12:10:13][359944697845366][867 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:10:13][359944697845366][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944697845366\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7634\"}'\'' -e'"" [2025-09-09 12:10:13][359944697845366][867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:10:13][359944697845366][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944697845366\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7634\"}'\'' -e'"" [2025-09-09 12:10:18][359944697845366][5928 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bd4fda0-b533-4f5b-9cbb-2868a1fff71a","id":"QR_6bd4fda0-b533-4f5b-9cbb-2868a1fff71a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:10:18][359944697845366][6084 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 12:10:18][359944697845366][6085 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-09 12:10:18][359944697845366][6085 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:14:03][352142132653712][1 ms][INFO] === Request start === [2025-09-09 12:14:03][352142132653712][1 ms][DEBUG] START check_scloud [2025-09-09 12:14:03][352142132653712][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:14:04][352142132653712][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 24912 5015 24458008 194844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:14:04][352142132653712][313 ms][DEBUG] targetPkg: running [2025-09-09 12:14:04][352142132653712][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 12:14:04][352142132653712][313 ms][DEBUG] START check_boot_completed [2025-09-09 12:14:04][352142132653712][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:14:04][352142132653712][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:14:04][352142132653712][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:14:04][352142132653712][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:14:04][352142132653712][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 12:14:04][352142132653712][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:14:04][352142132653712][503 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3147\nsuccessfulTxPacketsPerSecond: 1.2571149212557182\nretriedTxPackets: 679\nretriedTxPacketsPerSecond: 0.36083854221228945\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2866\nsuccessfulRxPacketsPerSecond: 1.0766956501495735\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:14:04][352142132653712][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:14:04][352142132653712][876 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.807/261.807/261.807/0.000 ms\n [2025-09-09 12:14:04][352142132653712][876 ms][DEBUG] check_internet: online [2025-09-09 12:14:04][352142132653712][876 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:14:04][352142132653712][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142132653712\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9685\"}'\'' -e'"" [2025-09-09 12:14:04][352142132653712][876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:14:04][352142132653712][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142132653712\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9685\"}'\'' -e'"" [2025-09-09 12:14:08][352142132653712][5062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b8eee1d-998a-41d9-b525-2da994c1ac32","id":"QR_7b8eee1d-998a-41d9-b525-2da994c1ac32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:14:09][352142132653712][5218 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-09-09 12:14:09][352142132653712][5218 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-09-09 12:14:09][352142132653712][5218 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:14:11][352142132653712][0 ms][INFO] === Request start === [2025-09-09 12:14:11][352142132653712][1 ms][DEBUG] START check_scloud [2025-09-09 12:14:11][352142132653712][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:14:11][352142132653712][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 24912 5015 24590432 207032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:14:11][352142132653712][299 ms][DEBUG] targetPkg: running [2025-09-09 12:14:11][352142132653712][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 12:14:11][352142132653712][299 ms][DEBUG] START check_boot_completed [2025-09-09 12:14:11][352142132653712][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:14:11][352142132653712][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:14:11][352142132653712][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:14:11][352142132653712][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:14:11][352142132653712][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:14:11][352142132653712][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:14:12][352142132653712][549 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3147\nsuccessfulTxPacketsPerSecond: 1.2571149212557182\nretriedTxPackets: 679\nretriedTxPacketsPerSecond: 0.36083854221228945\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2866\nsuccessfulRxPacketsPerSecond: 1.0766956501495735\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:14:12][352142132653712][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:14:12][352142132653712][940 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.719/294.719/294.719/0.000 ms\n [2025-09-09 12:14:12][352142132653712][940 ms][DEBUG] check_internet: online [2025-09-09 12:14:12][352142132653712][940 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:14:12][352142132653712][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142132653712\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1267\"}'\'' -e'"" [2025-09-09 12:14:12][352142132653712][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:14:12][352142132653712][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352142132653712\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1267\"}'\'' -e'"" [2025-09-09 12:14:16][352142132653712][5376 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f9aa681-c053-45eb-b7dd-3538470d9c90","id":"QR_0f9aa681-c053-45eb-b7dd-3538470d9c90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:14:17][352142132653712][5532 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 12:14:17][352142132653712][5532 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-09 12:14:17][352142132653712][5532 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:16:04][351521285975454][1 ms][INFO] === Request start === [2025-09-09 12:16:04][351521285975454][1 ms][DEBUG] START check_scloud [2025-09-09 12:16:04][351521285975454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:16:04][351521285975454][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 24912 5015 24735008 218188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:16:04][351521285975454][279 ms][DEBUG] targetPkg: running [2025-09-09 12:16:04][351521285975454][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 12:16:04][351521285975454][280 ms][DEBUG] START check_boot_completed [2025-09-09 12:16:04][351521285975454][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:16:04][351521285975454][310 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 12:16:04][351521285975454][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:16:04][351521285975454][373 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:16:04][351521285975454][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:16:04][351521285975454][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:16:04][351521285975454][500 ms][DEBUG] SU: done in 127 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3311\nsuccessfulTxPacketsPerSecond: 0.5291858926785196\nretriedTxPackets: 722\nretriedTxPacketsPerSecond: 0.1387499596657094\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3008\nsuccessfulRxPacketsPerSecond: 0.45819754122164497\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:16:04][351521285975454][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:16:06][351521285975454][1966 ms][DEBUG] SU: done in 1466 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.452/300.452/300.452/0.000 ms\n [2025-09-09 12:16:06][351521285975454][1966 ms][DEBUG] check_internet: online [2025-09-09 12:16:06][351521285975454][1966 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:16:06][351521285975454][1967 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521285975454\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7303\"}'\'' -e'"" [2025-09-09 12:16:06][351521285975454][1967 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:16:06][351521285975454][1967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521285975454\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7303\"}'\'' -e'"" [2025-09-09 12:16:09][351521285975454][5590 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b25c764-5d7c-478f-bcaa-55100cccfb2e","id":"QR_7b25c764-5d7c-478f-bcaa-55100cccfb2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:16:09][351521285975454][5746 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=3343 [2025-09-09 12:16:09][351521285975454][5746 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-09 12:16:09][351521285975454][5747 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:16:12][351521285975454][0 ms][INFO] === Request start === [2025-09-09 12:16:12][351521285975454][1 ms][DEBUG] START check_scloud [2025-09-09 12:16:12][351521285975454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:16:12][351521285975454][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 24912 5015 24855080 230108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:16:12][351521285975454][312 ms][DEBUG] targetPkg: running [2025-09-09 12:16:12][351521285975454][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 12:16:12][351521285975454][312 ms][DEBUG] START check_boot_completed [2025-09-09 12:16:12][351521285975454][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:16:12][351521285975454][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:16:12][351521285975454][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:16:12][351521285975454][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:16:12][351521285975454][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:16:12][351521285975454][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:16:12][351521285975454][530 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3311\nsuccessfulTxPacketsPerSecond: 0.5291858926785196\nretriedTxPackets: 722\nretriedTxPacketsPerSecond: 0.1387499596657094\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3008\nsuccessfulRxPacketsPerSecond: 0.45819754122164497\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:16:12][351521285975454][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:16:13][351521285975454][905 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.122/254.122/254.122/0.000 ms\n [2025-09-09 12:16:13][351521285975454][905 ms][DEBUG] check_internet: online [2025-09-09 12:16:13][351521285975454][905 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:16:13][351521285975454][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521285975454\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8824\"}'\'' -e'"" [2025-09-09 12:16:13][351521285975454][905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:16:13][351521285975454][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521285975454\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8824\"}'\'' -e'"" [2025-09-09 12:16:18][351521285975454][6466 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b245f938-d9b9-4dd4-bb38-84ceb7a68b6e","id":"QR_b245f938-d9b9-4dd4-bb38-84ceb7a68b6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:16:18][351521285975454][6622 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-09 12:16:18][351521285975454][6622 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-09 12:16:18][351521285975454][6622 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:17:03][353249140799426][0 ms][INFO] === Request start === [2025-09-09 12:17:03][353249140799426][1 ms][DEBUG] START check_scloud [2025-09-09 12:17:03][353249140799426][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:17:03][353249140799426][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 24912 5015 24991464 241156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:17:03][353249140799426][301 ms][DEBUG] targetPkg: running [2025-09-09 12:17:03][353249140799426][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 12:17:03][353249140799426][301 ms][DEBUG] START check_boot_completed [2025-09-09 12:17:03][353249140799426][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:17:03][353249140799426][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:17:03][353249140799426][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:17:03][353249140799426][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:17:03][353249140799426][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:17:03][353249140799426][395 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:17:03][353249140799426][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249140799426\",\"model\":\"SM-F926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9050\"}'\'' -e'"" [2025-09-09 12:17:03][353249140799426][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:17:03][353249140799426][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249140799426\",\"model\":\"SM-F926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9050\"}'\'' -e'"" [2025-09-09 12:17:07][353249140799426][4128 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 12:17:07][353249140799426][4128 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 12:17:07][353249140799426][4128 ms][WARN] Detected error: Process with pid 24912 either refused to load frida-agent, or terminated during injectionProcess with pid 24912 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 12:17:07][353249140799426][4128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 12:17:07][353249140799426][4441 ms][DEBUG] SU: done in 312 ms; outsystem 5433 5015 13044440 189080 ep_poll 0 S system_server\n [2025-09-09 12:17:07][353249140799426][4441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 12:17:07][353249140799426][4581 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 12:17:07][353249140799426][4581 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 12:17:07][353249140799426][4581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 12:17:08][353249140799426][4706 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 12:17:08][353249140799426][4706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 12:17:08][353249140799426][4849 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 12:17:10][353249140799426][6862 ms][DEBUG] START check_boot_completed [2025-09-09 12:17:10][353249140799426][6862 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:17:10][353249140799426][6909 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:17:10][353249140799426][6909 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:17:10][353249140799426][6956 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:17:10][353249140799426][6956 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:17:13][353249140799426][9971 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 12:17:13][353249140799426][9971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249140799426\",\"model\":\"SM-F926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9050\"}'\'' -e'"" [2025-09-09 12:17:17][353249140799426][14532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa0e5c3e-9f71-4e21-88fa-9120ffe3bb4d","id":"QR_fa0e5c3e-9f71-4e21-88fa-9120ffe3bb4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:17:18][353249140799426][14688 ms][DEBUG] proc_open done in 4718 ms; code=255; res.len=3343 [2025-09-09 12:17:18][353249140799426][14688 ms][DEBUG] END runCmdUntilRes#2 in 4718 ms [2025-09-09 12:17:18][353249140799426][14689 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:17:20][353249140799426][0 ms][INFO] === Request start === [2025-09-09 12:17:20][353249140799426][1 ms][DEBUG] START check_scloud [2025-09-09 12:17:20][353249140799426][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:17:20][353249140799426][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 26426 5015 23719812 125208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:17:20][353249140799426][300 ms][DEBUG] targetPkg: running [2025-09-09 12:17:20][353249140799426][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 12:17:20][353249140799426][300 ms][DEBUG] START check_boot_completed [2025-09-09 12:17:20][353249140799426][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:17:20][353249140799426][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:17:20][353249140799426][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:17:20][353249140799426][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:17:20][353249140799426][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:17:20][353249140799426][409 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:17:20][353249140799426][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249140799426\",\"model\":\"SM-F926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7860\"}'\'' -e'"" [2025-09-09 12:17:20][353249140799426][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:17:20][353249140799426][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249140799426\",\"model\":\"SM-F926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7860\"}'\'' -e'"" [2025-09-09 12:17:25][353249140799426][5345 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9901d167-2a57-4c0d-8046-46ce962cde7a","id":"QR_9901d167-2a57-4c0d-8046-46ce962cde7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:17:25][353249140799426][5502 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 12:17:25][353249140799426][5502 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 12:17:25][353249140799426][5502 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:17:30][355680659645444][0 ms][INFO] === Request start === [2025-09-09 12:17:30][355680659645444][1 ms][DEBUG] START check_scloud [2025-09-09 12:17:30][355680659645444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:17:30][355680659645444][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 26426 5015 23911704 138124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:17:30][355680659645444][305 ms][DEBUG] targetPkg: running [2025-09-09 12:17:30][355680659645444][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 12:17:30][355680659645444][305 ms][DEBUG] START check_boot_completed [2025-09-09 12:17:30][355680659645444][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:17:30][355680659645444][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:17:30][355680659645444][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:17:30][355680659645444][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:17:30][355680659645444][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:17:30][355680659645444][399 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:17:30][355680659645444][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680659645444\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1097\"}'\'' -e'"" [2025-09-09 12:17:30][355680659645444][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:17:30][355680659645444][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680659645444\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1097\"}'\'' -e'"" [2025-09-09 12:17:33][355680659645444][3710 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbd1077c-650f-49ce-99af-8ff65f2bcd8d","id":"QR_dbd1077c-650f-49ce-99af-8ff65f2bcd8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:17:34][355680659645444][3866 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 12:17:34][355680659645444][3866 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 12:17:34][355680659645444][3866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:17:36][355680659645444][0 ms][INFO] === Request start === [2025-09-09 12:17:36][355680659645444][1 ms][DEBUG] START check_scloud [2025-09-09 12:17:36][355680659645444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:17:36][355680659645444][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 26426 5015 24073716 149952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:17:36][355680659645444][308 ms][DEBUG] targetPkg: running [2025-09-09 12:17:36][355680659645444][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 12:17:36][355680659645444][308 ms][DEBUG] START check_boot_completed [2025-09-09 12:17:36][355680659645444][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:17:36][355680659645444][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:17:36][355680659645444][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:17:36][355680659645444][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:17:36][355680659645444][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:17:36][355680659645444][401 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:17:36][355680659645444][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680659645444\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3127\"}'\'' -e'"" [2025-09-09 12:17:36][355680659645444][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:17:36][355680659645444][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680659645444\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3127\"}'\'' -e'"" [2025-09-09 12:17:41][355680659645444][5228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c5b4834-f334-4382-846b-1c9e9639a769","id":"QR_9c5b4834-f334-4382-846b-1c9e9639a769","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:17:41][355680659645444][5385 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-09 12:17:41][355680659645444][5385 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-09 12:17:41][355680659645444][5385 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:18:04][350719581766012][0 ms][INFO] === Request start === [2025-09-09 12:18:04][350719581766012][1 ms][DEBUG] START check_scloud [2025-09-09 12:18:04][350719581766012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:18:04][350719581766012][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 26426 5015 24139104 161612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:18:04][350719581766012][314 ms][DEBUG] targetPkg: running [2025-09-09 12:18:04][350719581766012][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 12:18:04][350719581766012][315 ms][DEBUG] START check_boot_completed [2025-09-09 12:18:04][350719581766012][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:18:04][350719581766012][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:18:04][350719581766012][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:18:04][350719581766012][424 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:18:04][350719581766012][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:18:04][350719581766012][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:18:04][350719581766012][564 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3311\nsuccessfulTxPacketsPerSecond: 0.5291858926785196\nretriedTxPackets: 722\nretriedTxPacketsPerSecond: 0.1387499596657094\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3008\nsuccessfulRxPacketsPerSecond: 0.45819754122164497\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:18:04][350719581766012][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:18:05][350719581766012][1002 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.014/329.014/329.014/0.000 ms\n [2025-09-09 12:18:05][350719581766012][1002 ms][DEBUG] check_internet: online [2025-09-09 12:18:05][350719581766012][1002 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:18:05][350719581766012][1002 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350719581766012\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1391\"}'\'' -e'"" [2025-09-09 12:18:05][350719581766012][1002 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:18:05][350719581766012][1002 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350719581766012\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1391\"}'\'' -e'"" [2025-09-09 12:18:08][350719581766012][4423 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1eab113-def8-4021-ac6c-76a9f8c0fceb","id":"QR_e1eab113-def8-4021-ac6c-76a9f8c0fceb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:18:08][350719581766012][4579 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-09 12:18:08][350719581766012][4579 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 12:18:08][350719581766012][4579 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:18:10][350642178938374][1 ms][INFO] === Request start === [2025-09-09 12:18:10][350642178938374][1 ms][DEBUG] START check_scloud [2025-09-09 12:18:10][350642178938374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:18:11][350642178938374][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 26426 5015 24280544 172836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:18:11][350642178938374][302 ms][DEBUG] targetPkg: running [2025-09-09 12:18:11][350642178938374][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 12:18:11][350642178938374][302 ms][DEBUG] START check_boot_completed [2025-09-09 12:18:11][350642178938374][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:18:11][350642178938374][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:18:11][350642178938374][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:18:11][350642178938374][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:18:11][350642178938374][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:18:11][350642178938374][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:18:11][350642178938374][489 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3311\nsuccessfulTxPacketsPerSecond: 0.5291858926785196\nretriedTxPackets: 722\nretriedTxPacketsPerSecond: 0.1387499596657094\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3008\nsuccessfulRxPacketsPerSecond: 0.45819754122164497\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:18:11][350642178938374][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:18:11][350642178938374][833 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.914/247.914/247.914/0.000 ms\n [2025-09-09 12:18:11][350642178938374][833 ms][DEBUG] check_internet: online [2025-09-09 12:18:11][350642178938374][833 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:18:11][350642178938374][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642178938374\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4283\"}'\'' -e'"" [2025-09-09 12:18:11][350642178938374][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:18:11][350642178938374][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642178938374\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4283\"}'\'' -e'"" [2025-09-09 12:18:15][350642178938374][4207 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b33674e-41e3-469e-9ca8-184ce985cb79","id":"QR_1b33674e-41e3-469e-9ca8-184ce985cb79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:18:15][350642178938374][4363 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 12:18:15][350642178938374][4363 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 12:18:15][350642178938374][4364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:18:17][350642178938374][0 ms][INFO] === Request start === [2025-09-09 12:18:17][350642178938374][1 ms][DEBUG] START check_scloud [2025-09-09 12:18:17][350642178938374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:18:17][350642178938374][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 26426 5015 24459880 183648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:18:17][350642178938374][305 ms][DEBUG] targetPkg: running [2025-09-09 12:18:17][350642178938374][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 12:18:17][350642178938374][305 ms][DEBUG] START check_boot_completed [2025-09-09 12:18:17][350642178938374][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:18:17][350642178938374][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:18:17][350642178938374][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:18:17][350642178938374][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:18:17][350642178938374][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:18:17][350642178938374][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:18:18][350642178938374][571 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3311\nsuccessfulTxPacketsPerSecond: 0.5291858926785196\nretriedTxPackets: 722\nretriedTxPacketsPerSecond: 0.1387499596657094\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3008\nsuccessfulRxPacketsPerSecond: 0.45819754122164497\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:18:18][350642178938374][571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:18:18][350642178938374][992 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.580/302.580/302.580/0.000 ms\n [2025-09-09 12:18:18][350642178938374][992 ms][DEBUG] check_internet: online [2025-09-09 12:18:18][350642178938374][993 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:18:18][350642178938374][993 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642178938374\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4150\"}'\'' -e'"" [2025-09-09 12:18:18][350642178938374][993 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:18:18][350642178938374][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350642178938374\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4150\"}'\'' -e'"" [2025-09-09 12:18:22][350642178938374][5319 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a39c7884-7380-4153-8f4e-203234e09c14","id":"QR_a39c7884-7380-4153-8f4e-203234e09c14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:18:23][350642178938374][5475 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 12:18:23][350642178938374][5475 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 12:18:23][350642178938374][5475 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:23:03][350013883042128][1 ms][INFO] === Request start === [2025-09-09 12:23:03][350013883042128][1 ms][DEBUG] START check_scloud [2025-09-09 12:23:03][350013883042128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:23:04][350013883042128][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 26426 5015 24568560 175244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:23:04][350013883042128][338 ms][DEBUG] targetPkg: running [2025-09-09 12:23:04][350013883042128][338 ms][DEBUG] END check_scloud in 337 ms [2025-09-09 12:23:04][350013883042128][338 ms][DEBUG] START check_boot_completed [2025-09-09 12:23:04][350013883042128][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:23:04][350013883042128][385 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:23:04][350013883042128][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:23:04][350013883042128][434 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 12:23:04][350013883042128][434 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-09 12:23:04][350013883042128][434 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:23:04][350013883042128][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883042128\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6330\"}'\'' -e'"" [2025-09-09 12:23:04][350013883042128][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:23:04][350013883042128][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883042128\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6330\"}'\'' -e'"" [2025-09-09 12:23:09][350013883042128][5290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19e92105-b35f-4afb-9942-55330e89f17b","id":"QR_19e92105-b35f-4afb-9942-55330e89f17b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:23:09][350013883042128][5446 ms][DEBUG] proc_open done in 5012 ms; code=255; res.len=3343 [2025-09-09 12:23:09][350013883042128][5446 ms][DEBUG] END runCmdUntilRes#1 in 5012 ms [2025-09-09 12:23:09][350013883042128][5446 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:23:11][350013883042128][0 ms][INFO] === Request start === [2025-09-09 12:23:11][350013883042128][1 ms][DEBUG] START check_scloud [2025-09-09 12:23:11][350013883042128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:23:12][350013883042128][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 26426 5015 24688632 139960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:23:12][350013883042128][309 ms][DEBUG] targetPkg: running [2025-09-09 12:23:12][350013883042128][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 12:23:12][350013883042128][310 ms][DEBUG] START check_boot_completed [2025-09-09 12:23:12][350013883042128][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:23:12][350013883042128][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:23:12][350013883042128][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:23:12][350013883042128][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:23:12][350013883042128][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:23:12][350013883042128][419 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:23:12][350013883042128][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883042128\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8649\"}'\'' -e'"" [2025-09-09 12:23:12][350013883042128][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:23:12][350013883042128][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883042128\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8649\"}'\'' -e'"" [2025-09-09 12:23:16][350013883042128][5199 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_129d7be3-7c89-41a7-a196-f777e6012e7c","id":"QR_129d7be3-7c89-41a7-a196-f777e6012e7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:23:17][350013883042128][5355 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-09 12:23:17][350013883042128][5355 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-09 12:23:17][350013883042128][5355 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:23:21][351044514329500][0 ms][INFO] === Request start === [2025-09-09 12:23:21][351044514329500][1 ms][DEBUG] START check_scloud [2025-09-09 12:23:21][351044514329500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:23:21][351044514329500][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 26426 5015 24847616 157012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:23:21][351044514329500][316 ms][DEBUG] targetPkg: running [2025-09-09 12:23:21][351044514329500][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 12:23:21][351044514329500][316 ms][DEBUG] START check_boot_completed [2025-09-09 12:23:21][351044514329500][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:23:21][351044514329500][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:23:21][351044514329500][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:23:21][351044514329500][441 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 12:23:21][351044514329500][441 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 12:23:21][351044514329500][441 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:23:21][351044514329500][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514329500\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8455\"}'\'' -e'"" [2025-09-09 12:23:21][351044514329500][441 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:23:21][351044514329500][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514329500\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8455\"}'\'' -e'"" [2025-09-09 12:23:26][351044514329500][4814 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6fd3d78-69b6-49d8-bfed-2ea75bd4c712","id":"QR_f6fd3d78-69b6-49d8-bfed-2ea75bd4c712","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:23:26][351044514329500][4971 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-09 12:23:26][351044514329500][4971 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-09 12:23:26][351044514329500][4971 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:23:28][351044514329500][0 ms][INFO] === Request start === [2025-09-09 12:23:28][351044514329500][1 ms][DEBUG] START check_scloud [2025-09-09 12:23:28][351044514329500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:23:28][351044514329500][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 26426 5015 24977892 165400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:23:28][351044514329500][258 ms][DEBUG] targetPkg: running [2025-09-09 12:23:28][351044514329500][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 12:23:28][351044514329500][258 ms][DEBUG] START check_boot_completed [2025-09-09 12:23:28][351044514329500][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:23:28][351044514329500][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:23:28][351044514329500][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:23:29][351044514329500][352 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 12:23:29][351044514329500][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:23:29][351044514329500][352 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:23:29][351044514329500][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514329500\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-09-09 12:23:29][351044514329500][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:23:29][351044514329500][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514329500\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-09-09 12:23:33][351044514329500][4944 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03165c34-a280-498b-a5fb-78580b4c86d0","id":"QR_03165c34-a280-498b-a5fb-78580b4c86d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:23:33][351044514329500][5100 ms][DEBUG] proc_open done in 4747 ms; code=255; res.len=3343 [2025-09-09 12:23:33][351044514329500][5100 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-09 12:23:33][351044514329500][5100 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:24:03][353452301610859][0 ms][INFO] === Request start === [2025-09-09 12:24:03][353452301610859][1 ms][DEBUG] START check_scloud [2025-09-09 12:24:03][353452301610859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:24:03][353452301610859][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 26426 5015 25067008 176620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:24:03][353452301610859][242 ms][DEBUG] targetPkg: running [2025-09-09 12:24:03][353452301610859][242 ms][DEBUG] END check_scloud in 241 ms [2025-09-09 12:24:03][353452301610859][242 ms][DEBUG] START check_boot_completed [2025-09-09 12:24:03][353452301610859][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:24:03][353452301610859][273 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:24:03][353452301610859][273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:24:03][353452301610859][320 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:24:03][353452301610859][320 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 12:24:03][353452301610859][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:24:03][353452301610859][429 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3567\nsuccessfulTxPacketsPerSecond: 1.0071483930868705\nretriedTxPackets: 795\nretriedTxPacketsPerSecond: 0.2871946589661779\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3227\nsuccessfulRxPacketsPerSecond: 0.8615839768985337\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:24:03][353452301610859][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:24:05][353452301610859][1804 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.494/300.494/300.494/0.000 ms\n [2025-09-09 12:24:05][353452301610859][1804 ms][DEBUG] check_internet: online [2025-09-09 12:24:05][353452301610859][1804 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:24:05][353452301610859][1804 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353452301610859\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4915\"}'\'' -e'"" [2025-09-09 12:24:05][353452301610859][1804 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:24:05][353452301610859][1804 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353452301610859\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4915\"}'\'' -e'"" [2025-09-09 12:24:09][353452301610859][6006 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 12:24:09][353452301610859][6006 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-09 12:24:09][353452301610859][6006 ms][WARN] Detected error: Process with pid 26426 either refused to load frida-agent, or terminated during injectionProcess with pid 26426 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 12:24:09][353452301610859][6006 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 12:24:09][353452301610859][6319 ms][DEBUG] SU: done in 312 ms; outsystem 5433 5015 13043808 202712 ep_poll 0 S system_server\n [2025-09-09 12:24:09][353452301610859][6319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 12:24:09][353452301610859][6475 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 12:24:09][353452301610859][6475 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 12:24:09][353452301610859][6475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 12:24:09][353452301610859][6631 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 12:24:09][353452301610859][6631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 12:24:10][353452301610859][6834 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 12:24:12][353452301610859][8849 ms][DEBUG] START check_boot_completed [2025-09-09 12:24:12][353452301610859][8849 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:24:12][353452301610859][8896 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:24:12][353452301610859][8896 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:24:12][353452301610859][8943 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:24:12][353452301610859][8943 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:24:15][353452301610859][11958 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 12:24:15][353452301610859][11958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353452301610859\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4915\"}'\'' -e'"" [2025-09-09 12:24:19][353452301610859][15785 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7aa8098-97ac-4d49-a309-aff1bc601503","id":"QR_a7aa8098-97ac-4d49-a309-aff1bc601503","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:24:19][353452301610859][15941 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-09 12:24:19][353452301610859][15941 ms][DEBUG] END runCmdUntilRes#2 in 3984 ms [2025-09-09 12:24:19][353452301610859][15941 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:24:21][353452301610859][0 ms][INFO] === Request start === [2025-09-09 12:24:21][353452301610859][1 ms][DEBUG] START check_scloud [2025-09-09 12:24:21][353452301610859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:24:21][353452301610859][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 28882 5015 23738272 123640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:24:21][353452301610859][257 ms][DEBUG] targetPkg: running [2025-09-09 12:24:21][353452301610859][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 12:24:21][353452301610859][257 ms][DEBUG] START check_boot_completed [2025-09-09 12:24:21][353452301610859][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:24:22][353452301610859][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:24:22][353452301610859][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:24:22][353452301610859][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:24:22][353452301610859][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:24:22][353452301610859][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:24:22][353452301610859][444 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3567\nsuccessfulTxPacketsPerSecond: 1.0071483930868705\nretriedTxPackets: 795\nretriedTxPacketsPerSecond: 0.2871946589661779\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3227\nsuccessfulRxPacketsPerSecond: 0.8615839768985337\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:24:22][353452301610859][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:24:22][353452301610859][819 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.674/273.674/273.674/0.000 ms\n [2025-09-09 12:24:22][353452301610859][819 ms][DEBUG] check_internet: online [2025-09-09 12:24:22][353452301610859][819 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:24:22][353452301610859][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353452301610859\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9311\"}'\'' -e'"" [2025-09-09 12:24:22][353452301610859][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:24:22][353452301610859][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353452301610859\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9311\"}'\'' -e'"" [2025-09-09 12:24:27][353452301610859][5739 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5ecdb7f-5dbf-4aa1-945b-995f52f61c91","id":"QR_b5ecdb7f-5dbf-4aa1-945b-995f52f61c91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:24:27][353452301610859][5896 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-09-09 12:24:27][353452301610859][5896 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-09 12:24:27][353452301610859][5896 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:24:31][351064753094284][0 ms][INFO] === Request start === [2025-09-09 12:24:31][351064753094284][1 ms][DEBUG] START check_scloud [2025-09-09 12:24:31][351064753094284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:24:32][351064753094284][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 28882 5015 23890164 136896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:24:32][351064753094284][298 ms][DEBUG] targetPkg: running [2025-09-09 12:24:32][351064753094284][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 12:24:32][351064753094284][298 ms][DEBUG] START check_boot_completed [2025-09-09 12:24:32][351064753094284][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:24:32][351064753094284][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:24:32][351064753094284][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:24:32][351064753094284][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:24:32][351064753094284][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:24:32][351064753094284][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:24:32][351064753094284][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3816\nsuccessfulTxPacketsPerSecond: 0.8093060444435777\nretriedTxPackets: 863\nretriedTxPacketsPerSecond: 0.22101530530989272\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3450\nsuccessfulRxPacketsPerSecond: 0.7248001924133246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:24:32][351064753094284][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:24:32][351064753094284][954 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=311 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 311.523/311.523/311.523/0.000 ms\n [2025-09-09 12:24:32][351064753094284][954 ms][DEBUG] check_internet: online [2025-09-09 12:24:32][351064753094284][954 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:24:32][351064753094284][954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064753094284\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5426\"}'\'' -e'"" [2025-09-09 12:24:32][351064753094284][955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:24:32][351064753094284][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064753094284\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5426\"}'\'' -e'"" [2025-09-09 12:24:36][351064753094284][4203 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_322321fc-a6d5-4f57-ae89-fa889f45f8a5","id":"QR_322321fc-a6d5-4f57-ae89-fa889f45f8a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:24:36][351064753094284][4359 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=3343 [2025-09-09 12:24:36][351064753094284][4360 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-09 12:24:36][351064753094284][4360 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:24:38][351064753094284][0 ms][INFO] === Request start === [2025-09-09 12:24:38][351064753094284][1 ms][DEBUG] START check_scloud [2025-09-09 12:24:38][351064753094284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:24:38][351064753094284][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 28882 5015 24001104 148852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:24:38][351064753094284][319 ms][DEBUG] targetPkg: running [2025-09-09 12:24:38][351064753094284][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 12:24:38][351064753094284][319 ms][DEBUG] START check_boot_completed [2025-09-09 12:24:38][351064753094284][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:24:39][351064753094284][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:24:39][351064753094284][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:24:39][351064753094284][460 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 12:24:39][351064753094284][460 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 12:24:39][351064753094284][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:24:39][351064753094284][584 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3816\nsuccessfulTxPacketsPerSecond: 0.8093060444435777\nretriedTxPackets: 863\nretriedTxPacketsPerSecond: 0.22101530530989272\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3450\nsuccessfulRxPacketsPerSecond: 0.7248001924133246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:24:39][351064753094284][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:24:39][351064753094284][944 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.529/226.529/226.529/0.000 ms\n [2025-09-09 12:24:39][351064753094284][944 ms][DEBUG] check_internet: online [2025-09-09 12:24:39][351064753094284][944 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:24:39][351064753094284][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064753094284\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8643\"}'\'' -e'"" [2025-09-09 12:24:39][351064753094284][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:24:39][351064753094284][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064753094284\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8643\"}'\'' -e'"" [2025-09-09 12:24:44][351064753094284][5724 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7919342f-3f4b-4fbb-aed2-864316041dee","id":"QR_7919342f-3f4b-4fbb-aed2-864316041dee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:24:44][351064753094284][5880 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-09 12:24:44][351064753094284][5880 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-09 12:24:44][351064753094284][5880 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:29:03][354068191587996][1 ms][INFO] === Request start === [2025-09-09 12:29:03][354068191587996][1 ms][DEBUG] START check_scloud [2025-09-09 12:29:03][354068191587996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:29:04][354068191587996][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 28882 5015 24005772 160284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:29:04][354068191587996][299 ms][DEBUG] targetPkg: running [2025-09-09 12:29:04][354068191587996][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 12:29:04][354068191587996][299 ms][DEBUG] START check_boot_completed [2025-09-09 12:29:04][354068191587996][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:29:04][354068191587996][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:29:04][354068191587996][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:29:04][354068191587996][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:29:04][354068191587996][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 12:29:04][354068191587996][377 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:29:04][354068191587996][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191587996\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1923\"}'\'' -e'"" [2025-09-09 12:29:04][354068191587996][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:29:04][354068191587996][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191587996\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1923\"}'\'' -e'"" [2025-09-09 12:29:09][354068191587996][5314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d9d3e98-3ddc-42a3-8dc0-8dc55e629ff8","id":"QR_0d9d3e98-3ddc-42a3-8dc0-8dc55e629ff8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:29:09][354068191587996][5470 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 12:29:09][354068191587996][5470 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 12:29:09][354068191587996][5470 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:29:11][354068191587996][0 ms][INFO] === Request start === [2025-09-09 12:29:11][354068191587996][1 ms][DEBUG] START check_scloud [2025-09-09 12:29:11][354068191587996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:29:12][354068191587996][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 28882 5015 24154452 170656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:29:12][354068191587996][294 ms][DEBUG] targetPkg: running [2025-09-09 12:29:12][354068191587996][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 12:29:12][354068191587996][294 ms][DEBUG] START check_boot_completed [2025-09-09 12:29:12][354068191587996][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:29:12][354068191587996][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:29:12][354068191587996][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:29:12][354068191587996][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:29:12][354068191587996][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:29:12][354068191587996][404 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:29:12][354068191587996][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191587996\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5604\"}'\'' -e'"" [2025-09-09 12:29:12][354068191587996][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:29:12][354068191587996][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191587996\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5604\"}'\'' -e'"" [2025-09-09 12:29:17][354068191587996][5605 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d871348b-f964-4060-8b16-1ac33fd3d69a","id":"QR_d871348b-f964-4060-8b16-1ac33fd3d69a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:29:17][354068191587996][5761 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-09-09 12:29:17][354068191587996][5761 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-09 12:29:17][354068191587996][5762 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:29:21][350929877009312][0 ms][INFO] === Request start === [2025-09-09 12:29:21][350929877009312][1 ms][DEBUG] START check_scloud [2025-09-09 12:29:21][350929877009312][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:29:22][350929877009312][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 28882 5015 24308700 182560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:29:22][350929877009312][307 ms][DEBUG] targetPkg: running [2025-09-09 12:29:22][350929877009312][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 12:29:22][350929877009312][307 ms][DEBUG] START check_boot_completed [2025-09-09 12:29:22][350929877009312][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:29:22][350929877009312][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:29:22][350929877009312][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:29:22][350929877009312][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:29:22][350929877009312][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:29:22][350929877009312][416 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:29:22][350929877009312][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929877009312\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5663\"}'\'' -e'"" [2025-09-09 12:29:22][350929877009312][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:29:22][350929877009312][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929877009312\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5663\"}'\'' -e'"" [2025-09-09 12:29:25][350929877009312][3759 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac4e1290-7412-45bb-b81e-ef023cc794b0","id":"QR_ac4e1290-7412-45bb-b81e-ef023cc794b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:29:25][350929877009312][3915 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=3343 [2025-09-09 12:29:25][350929877009312][3915 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 12:29:25][350929877009312][3915 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:29:28][350929877009312][0 ms][INFO] === Request start === [2025-09-09 12:29:28][350929877009312][1 ms][DEBUG] START check_scloud [2025-09-09 12:29:28][350929877009312][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:29:28][350929877009312][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 28882 5015 24443968 193372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:29:28][350929877009312][263 ms][DEBUG] targetPkg: running [2025-09-09 12:29:28][350929877009312][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 12:29:28][350929877009312][263 ms][DEBUG] START check_boot_completed [2025-09-09 12:29:28][350929877009312][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:29:28][350929877009312][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:29:28][350929877009312][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:29:28][350929877009312][372 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:29:28][350929877009312][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:29:28][350929877009312][372 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:29:28][350929877009312][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929877009312\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5786\"}'\'' -e'"" [2025-09-09 12:29:28][350929877009312][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:29:28][350929877009312][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929877009312\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5786\"}'\'' -e'"" [2025-09-09 12:29:32][350929877009312][4731 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30518f8c-a9d7-48fa-ad48-7edf53553be0","id":"QR_30518f8c-a9d7-48fa-ad48-7edf53553be0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:29:32][350929877009312][4887 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-09 12:29:32][350929877009312][4887 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-09 12:29:32][350929877009312][4887 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:31:04][357994250536045][1 ms][INFO] === Request start === [2025-09-09 12:31:04][357994250536045][1 ms][DEBUG] START check_scloud [2025-09-09 12:31:04][357994250536045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:31:04][357994250536045][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 28882 5015 24565980 205988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:31:04][357994250536045][294 ms][DEBUG] targetPkg: running [2025-09-09 12:31:04][357994250536045][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 12:31:04][357994250536045][294 ms][DEBUG] START check_boot_completed [2025-09-09 12:31:04][357994250536045][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:31:04][357994250536045][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:31:04][357994250536045][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:31:04][357994250536045][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:31:04][357994250536045][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:31:04][357994250536045][387 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:31:04][357994250536045][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994250536045\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5810\"}'\'' -e'"" [2025-09-09 12:31:04][357994250536045][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:31:04][357994250536045][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994250536045\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5810\"}'\'' -e'"" [2025-09-09 12:31:10][357994250536045][5855 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93fdc05d-448d-4b62-bbff-e8183777ecfe","id":"QR_93fdc05d-448d-4b62-bbff-e8183777ecfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:31:10][357994250536045][6011 ms][DEBUG] proc_open done in 5624 ms; code=255; res.len=3343 [2025-09-09 12:31:10][357994250536045][6011 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-09-09 12:31:10][357994250536045][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:31:14][357994250536045][0 ms][INFO] === Request start === [2025-09-09 12:31:14][357994250536045][1 ms][DEBUG] START check_scloud [2025-09-09 12:31:14][357994250536045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:31:14][357994250536045][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 28882 5015 24739172 216700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:31:14][357994250536045][306 ms][DEBUG] targetPkg: running [2025-09-09 12:31:14][357994250536045][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 12:31:14][357994250536045][306 ms][DEBUG] START check_boot_completed [2025-09-09 12:31:14][357994250536045][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:31:14][357994250536045][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:31:14][357994250536045][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:31:14][357994250536045][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:31:14][357994250536045][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:31:14][357994250536045][399 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:31:14][357994250536045][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994250536045\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8316\"}'\'' -e'"" [2025-09-09 12:31:14][357994250536045][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:31:14][357994250536045][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994250536045\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8316\"}'\'' -e'"" [2025-09-09 12:31:19][357994250536045][5241 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ffbb4c0-fd6e-4308-8916-8553ab67f0fa","id":"QR_7ffbb4c0-fd6e-4308-8916-8553ab67f0fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:31:19][357994250536045][5398 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-09 12:31:19][357994250536045][5398 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 12:31:19][357994250536045][5398 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:31:21][355195305754292][0 ms][INFO] === Request start === [2025-09-09 12:31:21][355195305754292][1 ms][DEBUG] START check_scloud [2025-09-09 12:31:21][355195305754292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:31:21][355195305754292][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 28882 5015 24879596 228412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:31:21][355195305754292][302 ms][DEBUG] targetPkg: running [2025-09-09 12:31:21][355195305754292][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 12:31:21][355195305754292][303 ms][DEBUG] START check_boot_completed [2025-09-09 12:31:21][355195305754292][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:31:21][355195305754292][348 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 12:31:21][355195305754292][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:31:21][355195305754292][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:31:21][355195305754292][395 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 12:31:21][355195305754292][395 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:31:21][355195305754292][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195305754292\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-09-09 12:31:21][355195305754292][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:31:21][355195305754292][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195305754292\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-09-09 12:31:25][355195305754292][3972 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1512f3ba-a268-461b-a033-c3d052907e68","id":"QR_1512f3ba-a268-461b-a033-c3d052907e68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:31:25][355195305754292][4128 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 12:31:25][355195305754292][4128 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 12:31:25][355195305754292][4128 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:31:27][355195305754292][0 ms][INFO] === Request start === [2025-09-09 12:31:27][355195305754292][1 ms][DEBUG] START check_scloud [2025-09-09 12:31:27][355195305754292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:31:28][355195305754292][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 28882 5015 25028244 239376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:31:28][355195305754292][278 ms][DEBUG] targetPkg: running [2025-09-09 12:31:28][355195305754292][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 12:31:28][355195305754292][278 ms][DEBUG] START check_boot_completed [2025-09-09 12:31:28][355195305754292][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:31:28][355195305754292][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:31:28][355195305754292][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:31:28][355195305754292][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:31:28][355195305754292][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:31:28][355195305754292][372 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:31:28][355195305754292][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195305754292\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3871\"}'\'' -e'"" [2025-09-09 12:31:28][355195305754292][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:31:28][355195305754292][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195305754292\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3871\"}'\'' -e'"" [2025-09-09 12:31:31][355195305754292][4043 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 12:31:31][355195305754292][4043 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 12:31:31][355195305754292][4043 ms][WARN] Detected error: Process with pid 28882 either refused to load frida-agent, or terminated during injectionProcess with pid 28882 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 12:31:31][355195305754292][4043 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 12:31:32][355195305754292][4308 ms][DEBUG] SU: done in 265 ms; outsystem 5433 5015 13043808 195688 ep_poll 0 S system_server\n [2025-09-09 12:31:32][355195305754292][4308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 12:31:32][355195305754292][4449 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 12:31:32][355195305754292][4449 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 12:31:32][355195305754292][4449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 12:31:32][355195305754292][4574 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 12:31:32][355195305754292][4574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 12:31:32][355195305754292][4731 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 12:31:34][355195305754292][6745 ms][DEBUG] START check_boot_completed [2025-09-09 12:31:34][355195305754292][6745 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:31:34][355195305754292][6792 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:31:34][355195305754292][6792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:31:34][355195305754292][6840 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 12:31:34][355195305754292][6840 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 12:31:37][355195305754292][9854 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 12:31:37][355195305754292][9854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195305754292\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3871\"}'\'' -e'"" [2025-09-09 12:31:41][355195305754292][14056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be7ff649-afa3-4ca0-8d82-23d5e33337c5","id":"QR_be7ff649-afa3-4ca0-8d82-23d5e33337c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:31:42][355195305754292][14212 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-09-09 12:31:42][355195305754292][14212 ms][DEBUG] END runCmdUntilRes#2 in 4358 ms [2025-09-09 12:31:42][355195305754292][14212 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:32:04][359619980002509][0 ms][INFO] === Request start === [2025-09-09 12:32:04][359619980002509][1 ms][DEBUG] START check_scloud [2025-09-09 12:32:04][359619980002509][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:32:05][359619980002509][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 30162 5015 23755416 127212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:32:05][359619980002509][321 ms][DEBUG] targetPkg: running [2025-09-09 12:32:05][359619980002509][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 12:32:05][359619980002509][321 ms][DEBUG] START check_boot_completed [2025-09-09 12:32:05][359619980002509][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:32:05][359619980002509][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:32:05][359619980002509][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:32:05][359619980002509][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:32:05][359619980002509][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:32:05][359619980002509][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:32:05][359619980002509][540 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3988\nsuccessfulTxPacketsPerSecond: 0.5707762557077626\nretriedTxPackets: 901\nretriedTxPacketsPerSecond: 0.1261017309121801\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3604\nsuccessfulRxPacketsPerSecond: 0.5110438568546246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:32:05][359619980002509][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:32:06][359619980002509][1868 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.808/305.808/305.808/0.000 ms\n [2025-09-09 12:32:06][359619980002509][1868 ms][DEBUG] check_internet: online [2025-09-09 12:32:06][359619980002509][1868 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:32:06][359619980002509][1868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359619980002509\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4322\"}'\'' -e'"" [2025-09-09 12:32:06][359619980002509][1868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:32:06][359619980002509][1868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359619980002509\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4322\"}'\'' -e'"" [2025-09-09 12:32:11][359619980002509][6913 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e54af16-2a15-4875-a7d6-52d1f1ced582","id":"QR_9e54af16-2a15-4875-a7d6-52d1f1ced582","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:32:11][359619980002509][7069 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 12:32:11][359619980002509][7070 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 12:32:11][359619980002509][7070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:32:15][359619980002509][0 ms][INFO] === Request start === [2025-09-09 12:32:15][359619980002509][1 ms][DEBUG] START check_scloud [2025-09-09 12:32:15][359619980002509][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:32:15][359619980002509][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 30162 5015 23879072 137884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:32:15][359619980002509][251 ms][DEBUG] targetPkg: running [2025-09-09 12:32:15][359619980002509][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 12:32:15][359619980002509][251 ms][DEBUG] START check_boot_completed [2025-09-09 12:32:15][359619980002509][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:32:15][359619980002509][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:32:15][359619980002509][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:32:15][359619980002509][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:32:15][359619980002509][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:32:15][359619980002509][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:32:15][359619980002509][454 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3988\nsuccessfulTxPacketsPerSecond: 0.5707762557077626\nretriedTxPackets: 901\nretriedTxPacketsPerSecond: 0.1261017309121801\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3604\nsuccessfulRxPacketsPerSecond: 0.5110438568546246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:32:15][359619980002509][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:32:16][359619980002509][876 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.915/292.915/292.915/0.000 ms\n [2025-09-09 12:32:16][359619980002509][876 ms][DEBUG] check_internet: online [2025-09-09 12:32:16][359619980002509][876 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:32:16][359619980002509][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359619980002509\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6404\"}'\'' -e'"" [2025-09-09 12:32:16][359619980002509][876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:32:16][359619980002509][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359619980002509\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6404\"}'\'' -e'"" [2025-09-09 12:32:20][359619980002509][4687 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c4b9bca-eb46-439f-b9a1-1069d026c9a3","id":"QR_1c4b9bca-eb46-439f-b9a1-1069d026c9a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:32:20][359619980002509][4843 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-09 12:32:20][359619980002509][4843 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-09 12:32:20][359619980002509][4843 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:32:22][351204852955031][0 ms][INFO] === Request start === [2025-09-09 12:32:22][351204852955031][1 ms][DEBUG] START check_scloud [2025-09-09 12:32:22][351204852955031][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:32:22][351204852955031][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 30162 5015 24048296 149720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:32:22][351204852955031][258 ms][DEBUG] targetPkg: running [2025-09-09 12:32:22][351204852955031][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 12:32:22][351204852955031][258 ms][DEBUG] START check_boot_completed [2025-09-09 12:32:22][351204852955031][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:32:22][351204852955031][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:32:22][351204852955031][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:32:22][351204852955031][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:32:22][351204852955031][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:32:22][351204852955031][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:32:22][351204852955031][461 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3988\nsuccessfulTxPacketsPerSecond: 0.5707762557077626\nretriedTxPackets: 901\nretriedTxPacketsPerSecond: 0.1261017309121801\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3604\nsuccessfulRxPacketsPerSecond: 0.5110438568546246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:32:22][351204852955031][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:32:23][351204852955031][898 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.652/306.652/306.652/0.000 ms\n [2025-09-09 12:32:23][351204852955031][898 ms][DEBUG] check_internet: online [2025-09-09 12:32:23][351204852955031][898 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:32:23][351204852955031][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351204852955031\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3435\"}'\'' -e'"" [2025-09-09 12:32:23][351204852955031][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:32:23][351204852955031][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351204852955031\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3435\"}'\'' -e'"" [2025-09-09 12:32:26][351204852955031][4225 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bed4a54f-584a-4329-8ff1-0f728a32d0f0","id":"QR_bed4a54f-584a-4329-8ff1-0f728a32d0f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:32:26][351204852955031][4382 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 12:32:26][351204852955031][4382 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 12:32:26][351204852955031][4382 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:32:28][351204852955031][0 ms][INFO] === Request start === [2025-09-09 12:32:28][351204852955031][1 ms][DEBUG] START check_scloud [2025-09-09 12:32:28][351204852955031][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:32:29][351204852955031][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 30162 5015 24195908 160788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:32:29][351204852955031][285 ms][DEBUG] targetPkg: running [2025-09-09 12:32:29][351204852955031][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-09 12:32:29][351204852955031][286 ms][DEBUG] START check_boot_completed [2025-09-09 12:32:29][351204852955031][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:32:29][351204852955031][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:32:29][351204852955031][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:32:29][351204852955031][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:32:29][351204852955031][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:32:29][351204852955031][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:32:29][351204852955031][535 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3988\nsuccessfulTxPacketsPerSecond: 0.5707762557077626\nretriedTxPackets: 901\nretriedTxPacketsPerSecond: 0.1261017309121801\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3604\nsuccessfulRxPacketsPerSecond: 0.5110438568546246\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:32:29][351204852955031][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:32:29][351204852955031][863 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.534/226.534/226.534/0.000 ms\n [2025-09-09 12:32:29][351204852955031][864 ms][DEBUG] check_internet: online [2025-09-09 12:32:29][351204852955031][864 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:32:29][351204852955031][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351204852955031\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4686\"}'\'' -e'"" [2025-09-09 12:32:29][351204852955031][864 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:32:29][351204852955031][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351204852955031\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4686\"}'\'' -e'"" [2025-09-09 12:32:34][351204852955031][5097 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca7095c1-59e9-4c15-8cd1-ec4d80acc976","id":"QR_ca7095c1-59e9-4c15-8cd1-ec4d80acc976","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:32:34][351204852955031][5253 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 12:32:34][351204852955031][5253 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 12:32:34][351204852955031][5253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:33:03][351677991459124][0 ms][INFO] === Request start === [2025-09-09 12:33:03][351677991459124][0 ms][DEBUG] START check_scloud [2025-09-09 12:33:03][351677991459124][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:33:04][351677991459124][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 30162 5015 24266656 172016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:33:04][351677991459124][308 ms][DEBUG] targetPkg: running [2025-09-09 12:33:04][351677991459124][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 12:33:04][351677991459124][309 ms][DEBUG] START check_boot_completed [2025-09-09 12:33:04][351677991459124][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:33:04][351677991459124][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:33:04][351677991459124][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:33:04][351677991459124][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:33:04][351677991459124][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:33:04][351677991459124][402 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:33:04][351677991459124][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351677991459124\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6420\"}'\'' -e'"" [2025-09-09 12:33:04][351677991459124][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:33:04][351677991459124][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351677991459124\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6420\"}'\'' -e'"" [2025-09-09 12:33:07][351677991459124][3667 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbaebf94-b536-4e89-996f-6e45e80a780c","id":"QR_bbaebf94-b536-4e89-996f-6e45e80a780c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:33:07][351677991459124][3823 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=3343 [2025-09-09 12:33:07][351677991459124][3823 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-09 12:33:07][351677991459124][3823 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:33:10][351677991459124][1 ms][INFO] === Request start === [2025-09-09 12:33:10][351677991459124][1 ms][DEBUG] START check_scloud [2025-09-09 12:33:10][351677991459124][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:33:10][351677991459124][254 ms][DEBUG] SU: done in 252 ms; outu0_a118 30162 5015 24399016 182972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:33:10][351677991459124][254 ms][DEBUG] targetPkg: running [2025-09-09 12:33:10][351677991459124][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 12:33:10][351677991459124][254 ms][DEBUG] START check_boot_completed [2025-09-09 12:33:10][351677991459124][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:33:10][351677991459124][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:33:10][351677991459124][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:33:10][351677991459124][363 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:33:10][351677991459124][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:33:10][351677991459124][363 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:33:10][351677991459124][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351677991459124\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2417\"}'\'' -e'"" [2025-09-09 12:33:10][351677991459124][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:33:10][351677991459124][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351677991459124\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2417\"}'\'' -e'"" [2025-09-09 12:33:15][351677991459124][5986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4ab510f-524b-4e95-bd60-4a9be4c1b81a","id":"QR_b4ab510f-524b-4e95-bd60-4a9be4c1b81a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:33:16][351677991459124][6143 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-09-09 12:33:16][351677991459124][6143 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-09-09 12:33:16][351677991459124][6143 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:36:04][357651713224052][1 ms][INFO] === Request start === [2025-09-09 12:36:04][357651713224052][1 ms][DEBUG] START check_scloud [2025-09-09 12:36:04][357651713224052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:36:05][357651713224052][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 30162 5015 24500408 195284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:36:05][357651713224052][308 ms][DEBUG] targetPkg: running [2025-09-09 12:36:05][357651713224052][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 12:36:05][357651713224052][308 ms][DEBUG] START check_boot_completed [2025-09-09 12:36:05][357651713224052][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:36:05][357651713224052][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:36:05][357651713224052][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:36:05][357651713224052][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:36:05][357651713224052][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 12:36:05][357651713224052][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:36:05][357651713224052][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0031289651827886\nretriedTxPackets: 985\nretriedTxPacketsPerSecond: 0.27901600356077566\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3858\nsuccessfulRxPacketsPerSecond: 0.8436912488623455\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:36:05][357651713224052][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:36:05][357651713224052][933 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.813/306.813/306.813/0.000 ms\n [2025-09-09 12:36:05][357651713224052][933 ms][DEBUG] check_internet: online [2025-09-09 12:36:05][357651713224052][933 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:36:05][357651713224052][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713224052\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4642\"}'\'' -e'"" [2025-09-09 12:36:05][357651713224052][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:36:05][357651713224052][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713224052\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4642\"}'\'' -e'"" [2025-09-09 12:36:12][357651713224052][7416 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38455518-cc75-4abe-8009-7b841890c1b2","id":"QR_38455518-cc75-4abe-8009-7b841890c1b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:36:12][357651713224052][7572 ms][DEBUG] proc_open done in 6638 ms; code=255; res.len=3343 [2025-09-09 12:36:12][357651713224052][7572 ms][DEBUG] END runCmdUntilRes#1 in 6639 ms [2025-09-09 12:36:12][357651713224052][7572 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:36:15][357651713224052][0 ms][INFO] === Request start === [2025-09-09 12:36:15][357651713224052][1 ms][DEBUG] START check_scloud [2025-09-09 12:36:15][357651713224052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:36:16][357651713224052][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 30162 5015 24624576 206188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:36:16][357651713224052][309 ms][DEBUG] targetPkg: running [2025-09-09 12:36:16][357651713224052][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 12:36:16][357651713224052][309 ms][DEBUG] START check_boot_completed [2025-09-09 12:36:16][357651713224052][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:36:16][357651713224052][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:36:16][357651713224052][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:36:16][357651713224052][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:36:16][357651713224052][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:36:16][357651713224052][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:36:16][357651713224052][528 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0031289651827886\nretriedTxPackets: 985\nretriedTxPacketsPerSecond: 0.27901600356077566\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3858\nsuccessfulRxPacketsPerSecond: 0.8436912488623455\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:36:16][357651713224052][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:36:16][357651713224052][934 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.374/291.374/291.374/0.000 ms\n [2025-09-09 12:36:16][357651713224052][934 ms][DEBUG] check_internet: online [2025-09-09 12:36:16][357651713224052][934 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:36:16][357651713224052][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713224052\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5452\"}'\'' -e'"" [2025-09-09 12:36:16][357651713224052][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:36:16][357651713224052][935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713224052\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5452\"}'\'' -e'"" [2025-09-09 12:36:20][357651713224052][4777 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d2fc4a5-67ad-4635-986c-5f146e879235","id":"QR_2d2fc4a5-67ad-4635-986c-5f146e879235","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:36:20][357651713224052][4933 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-09 12:36:20][357651713224052][4933 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-09 12:36:20][357651713224052][4933 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:36:23][352177395652308][0 ms][INFO] === Request start === [2025-09-09 12:36:23][352177395652308][1 ms][DEBUG] START check_scloud [2025-09-09 12:36:23][352177395652308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:36:24][352177395652308][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 30162 5015 24780488 218012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:36:24][352177395652308][293 ms][DEBUG] targetPkg: running [2025-09-09 12:36:24][352177395652308][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 12:36:24][352177395652308][293 ms][DEBUG] START check_boot_completed [2025-09-09 12:36:24][352177395652308][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:36:24][352177395652308][340 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:36:24][352177395652308][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:36:24][352177395652308][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:36:24][352177395652308][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:36:24][352177395652308][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:36:24][352177395652308][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0031289651827886\nretriedTxPackets: 985\nretriedTxPacketsPerSecond: 0.27901600356077566\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3858\nsuccessfulRxPacketsPerSecond: 0.8436912488623455\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:36:24][352177395652308][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:36:24][352177395652308][902 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=307 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 307.024/307.024/307.024/0.000 ms\n [2025-09-09 12:36:24][352177395652308][902 ms][DEBUG] check_internet: online [2025-09-09 12:36:24][352177395652308][902 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:36:24][352177395652308][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395652308\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9527\"}'\'' -e'"" [2025-09-09 12:36:24][352177395652308][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:36:24][352177395652308][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395652308\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9527\"}'\'' -e'"" [2025-09-09 12:36:29][352177395652308][5432 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac4b7dfa-7043-4fa0-8c4e-82f27d5359db","id":"QR_ac4b7dfa-7043-4fa0-8c4e-82f27d5359db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:36:29][352177395652308][5588 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3343 [2025-09-09 12:36:29][352177395652308][5588 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 12:36:29][352177395652308][5588 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:36:33][352177395652308][0 ms][INFO] === Request start === [2025-09-09 12:36:33][352177395652308][1 ms][DEBUG] START check_scloud [2025-09-09 12:36:33][352177395652308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:36:33][352177395652308][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 30162 5015 24918764 229044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:36:33][352177395652308][260 ms][DEBUG] targetPkg: running [2025-09-09 12:36:33][352177395652308][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 12:36:33][352177395652308][260 ms][DEBUG] START check_boot_completed [2025-09-09 12:36:33][352177395652308][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:36:33][352177395652308][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:36:33][352177395652308][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:36:33][352177395652308][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:36:33][352177395652308][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:36:33][352177395652308][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:36:33][352177395652308][463 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0031289651827886\nretriedTxPackets: 985\nretriedTxPacketsPerSecond: 0.27901600356077566\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3858\nsuccessfulRxPacketsPerSecond: 0.8436912488623455\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:36:33][352177395652308][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:36:33][352177395652308][916 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.973/330.973/330.973/0.000 ms\n [2025-09-09 12:36:33][352177395652308][916 ms][DEBUG] check_internet: online [2025-09-09 12:36:33][352177395652308][916 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:36:33][352177395652308][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395652308\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7804\"}'\'' -e'"" [2025-09-09 12:36:33][352177395652308][916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:36:33][352177395652308][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395652308\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7804\"}'\'' -e'"" [2025-09-09 12:36:37][352177395652308][4228 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a533388-41f2-4436-9a64-bf31f41fc9f0","id":"QR_1a533388-41f2-4436-9a64-bf31f41fc9f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:36:37][352177395652308][4384 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-09 12:36:37][352177395652308][4384 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-09 12:36:37][352177395652308][4384 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:37:03][352682506276798][0 ms][INFO] === Request start === [2025-09-09 12:37:03][352682506276798][1 ms][DEBUG] START check_scloud [2025-09-09 12:37:03][352682506276798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:37:03][352682506276798][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 30162 5015 25040780 241276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:37:03][352682506276798][317 ms][DEBUG] targetPkg: running [2025-09-09 12:37:03][352682506276798][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 12:37:03][352682506276798][317 ms][DEBUG] START check_boot_completed [2025-09-09 12:37:03][352682506276798][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:37:03][352682506276798][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:37:03][352682506276798][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:37:03][352682506276798][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:37:03][352682506276798][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:37:03][352682506276798][411 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:37:03][352682506276798][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682506276798\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2973\"}'\'' -e'"" [2025-09-09 12:37:03][352682506276798][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:37:03][352682506276798][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682506276798\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2973\"}'\'' -e'"" [2025-09-09 12:37:07][352682506276798][4004 ms][DEBUG] proc_open done in 3593 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 12:37:07][352682506276798][4004 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-09 12:37:07][352682506276798][4004 ms][WARN] Detected error: Process with pid 30162 either refused to load frida-agent, or terminated during injectionProcess with pid 30162 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 12:37:07][352682506276798][4004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 12:37:07][352682506276798][4285 ms][DEBUG] SU: done in 281 ms; outsystem 5433 5015 13032024 191552 ep_poll 0 S system_server\n [2025-09-09 12:37:07][352682506276798][4285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 12:37:07][352682506276798][4425 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 12:37:07][352682506276798][4426 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 12:37:07][352682506276798][4426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 12:37:08][352682506276798][4582 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 12:37:08][352682506276798][4582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 12:37:08][352682506276798][4738 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 12:37:10][352682506276798][6753 ms][DEBUG] START check_boot_completed [2025-09-09 12:37:10][352682506276798][6753 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:37:10][352682506276798][6800 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:37:10][352682506276798][6800 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:37:10][352682506276798][6878 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 12:37:10][352682506276798][6878 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 12:37:13][352682506276798][9893 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 12:37:13][352682506276798][9893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682506276798\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2973\"}'\'' -e'"" [2025-09-09 12:37:16][352682506276798][13220 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16562782-9293-4159-a255-7163397ef488","id":"QR_16562782-9293-4159-a255-7163397ef488","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:37:16][352682506276798][13376 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 12:37:16][352682506276798][13376 ms][DEBUG] END runCmdUntilRes#2 in 3484 ms [2025-09-09 12:37:16][352682506276798][13376 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:37:19][352682506276798][0 ms][INFO] === Request start === [2025-09-09 12:37:19][352682506276798][1 ms][DEBUG] START check_scloud [2025-09-09 12:37:19][352682506276798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:37:19][352682506276798][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 31625 5015 23734364 123740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:37:19][352682506276798][274 ms][DEBUG] targetPkg: running [2025-09-09 12:37:19][352682506276798][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-09 12:37:19][352682506276798][274 ms][DEBUG] START check_boot_completed [2025-09-09 12:37:19][352682506276798][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:37:19][352682506276798][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:37:19][352682506276798][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:37:19][352682506276798][369 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 12:37:19][352682506276798][369 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 12:37:19][352682506276798][369 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:37:19][352682506276798][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682506276798\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-09-09 12:37:19][352682506276798][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:37:19][352682506276798][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682506276798\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-09-09 12:37:25][352682506276798][6381 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_476acfe3-b76d-456a-b829-fd31b1a3980f","id":"QR_476acfe3-b76d-456a-b829-fd31b1a3980f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:37:25][352682506276798][6538 ms][DEBUG] proc_open done in 6168 ms; code=255; res.len=3343 [2025-09-09 12:37:25][352682506276798][6538 ms][DEBUG] END runCmdUntilRes#1 in 6169 ms [2025-09-09 12:37:25][352682506276798][6538 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:38:04][353122991790036][0 ms][INFO] === Request start === [2025-09-09 12:38:04][353122991790036][1 ms][DEBUG] START check_scloud [2025-09-09 12:38:04][353122991790036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:38:04][353122991790036][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 31625 5015 23795580 137516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:38:04][353122991790036][311 ms][DEBUG] targetPkg: running [2025-09-09 12:38:04][353122991790036][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 12:38:04][353122991790036][311 ms][DEBUG] START check_boot_completed [2025-09-09 12:38:04][353122991790036][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:38:04][353122991790036][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:38:04][353122991790036][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:38:04][353122991790036][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:38:04][353122991790036][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:38:04][353122991790036][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:38:04][353122991790036][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0031289651827886\nretriedTxPackets: 985\nretriedTxPacketsPerSecond: 0.27901600356077566\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3858\nsuccessfulRxPacketsPerSecond: 0.8436912488623455\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:38:04][353122991790036][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:38:06][353122991790036][1889 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.572/300.572/300.572/0.000 ms\n [2025-09-09 12:38:06][353122991790036][1889 ms][DEBUG] check_internet: online [2025-09-09 12:38:06][353122991790036][1889 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:38:06][353122991790036][1889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122991790036\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-09-09 12:38:06][353122991790036][1889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:38:06][353122991790036][1889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122991790036\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-09-09 12:38:11][353122991790036][6637 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_450fa82c-6f2b-41c8-84f0-fae6176dc811","id":"QR_450fa82c-6f2b-41c8-84f0-fae6176dc811","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:38:11][353122991790036][6793 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 12:38:11][353122991790036][6793 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-09 12:38:11][353122991790036][6793 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:38:14][353122991790036][1 ms][INFO] === Request start === [2025-09-09 12:38:14][353122991790036][1 ms][DEBUG] START check_scloud [2025-09-09 12:38:14][353122991790036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:38:15][353122991790036][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 31625 5015 23968708 148684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:38:15][353122991790036][296 ms][DEBUG] targetPkg: running [2025-09-09 12:38:15][353122991790036][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 12:38:15][353122991790036][296 ms][DEBUG] START check_boot_completed [2025-09-09 12:38:15][353122991790036][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:38:15][353122991790036][343 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:38:15][353122991790036][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:38:15][353122991790036][421 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 12:38:15][353122991790036][421 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 12:38:15][353122991790036][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:38:15][353122991790036][562 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0031289651827886\nretriedTxPackets: 985\nretriedTxPacketsPerSecond: 0.27901600356077566\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3858\nsuccessfulRxPacketsPerSecond: 0.8436912488623455\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:38:15][353122991790036][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:38:15][353122991790036][999 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=331 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 331.971/331.971/331.971/0.000 ms\n [2025-09-09 12:38:15][353122991790036][1000 ms][DEBUG] check_internet: online [2025-09-09 12:38:15][353122991790036][1000 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:38:15][353122991790036][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122991790036\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2013\"}'\'' -e'"" [2025-09-09 12:38:15][353122991790036][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:38:15][353122991790036][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122991790036\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2013\"}'\'' -e'"" [2025-09-09 12:38:19][353122991790036][4545 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff8ff8c1-f8a0-4574-b336-8902f1ebbac8","id":"QR_ff8ff8c1-f8a0-4574-b336-8902f1ebbac8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:38:19][353122991790036][4701 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-09-09 12:38:19][353122991790036][4701 ms][DEBUG] END runCmdUntilRes#1 in 3701 ms [2025-09-09 12:38:19][353122991790036][4701 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:39:04][352415379984895][0 ms][INFO] === Request start === [2025-09-09 12:39:04][352415379984895][1 ms][DEBUG] START check_scloud [2025-09-09 12:39:04][352415379984895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:39:05][352415379984895][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31625 5015 24088580 159872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:39:05][352415379984895][310 ms][DEBUG] targetPkg: running [2025-09-09 12:39:05][352415379984895][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 12:39:05][352415379984895][310 ms][DEBUG] START check_boot_completed [2025-09-09 12:39:05][352415379984895][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:39:05][352415379984895][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:39:05][352415379984895][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:39:05][352415379984895][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:39:05][352415379984895][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:39:05][352415379984895][404 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:39:05][352415379984895][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352415379984895\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2274\"}'\'' -e'"" [2025-09-09 12:39:05][352415379984895][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:39:05][352415379984895][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352415379984895\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2274\"}'\'' -e'"" [2025-09-09 12:39:10][352415379984895][5840 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4fe7d5d-d9dd-445b-8f2b-72f7cb3c62db","id":"QR_e4fe7d5d-d9dd-445b-8f2b-72f7cb3c62db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:39:10][352415379984895][5996 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-09-09 12:39:10][352415379984895][5996 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-09-09 12:39:10][352415379984895][5996 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:39:14][352415379984895][0 ms][INFO] === Request start === [2025-09-09 12:39:14][352415379984895][1 ms][DEBUG] START check_scloud [2025-09-09 12:39:14][352415379984895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:39:14][352415379984895][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 31625 5015 24219840 171232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:39:14][352415379984895][273 ms][DEBUG] targetPkg: running [2025-09-09 12:39:14][352415379984895][273 ms][DEBUG] END check_scloud in 273 ms [2025-09-09 12:39:14][352415379984895][273 ms][DEBUG] START check_boot_completed [2025-09-09 12:39:14][352415379984895][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:39:14][352415379984895][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:39:14][352415379984895][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:39:14][352415379984895][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:39:14][352415379984895][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:39:14][352415379984895][366 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:39:14][352415379984895][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352415379984895\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4954\"}'\'' -e'"" [2025-09-09 12:39:14][352415379984895][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:39:14][352415379984895][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352415379984895\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4954\"}'\'' -e'"" [2025-09-09 12:39:18][352415379984895][3709 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00d0b7b7-3b1f-4cfe-9391-48cd9d3e0db8","id":"QR_00d0b7b7-3b1f-4cfe-9391-48cd9d3e0db8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:39:18][352415379984895][3865 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 12:39:18][352415379984895][3865 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 12:39:18][352415379984895][3866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:41:04][353154433269303][1 ms][INFO] === Request start === [2025-09-09 12:41:04][353154433269303][1 ms][DEBUG] START check_scloud [2025-09-09 12:41:04][353154433269303][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:41:04][353154433269303][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 31625 5015 24336156 183516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:41:04][353154433269303][281 ms][DEBUG] targetPkg: running [2025-09-09 12:41:04][353154433269303][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-09 12:41:04][353154433269303][281 ms][DEBUG] START check_boot_completed [2025-09-09 12:41:04][353154433269303][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:41:04][353154433269303][328 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:41:04][353154433269303][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:41:04][353154433269303][390 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:41:04][353154433269303][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:41:04][353154433269303][390 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:41:04][353154433269303][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433269303\",\"model\":\"SM-M356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7294\"}'\'' -e'"" [2025-09-09 12:41:04][353154433269303][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:41:04][353154433269303][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433269303\",\"model\":\"SM-M356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7294\"}'\'' -e'"" [2025-09-09 12:41:08][353154433269303][4733 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_862725da-f312-43c5-a73c-6a03ed44379f","id":"QR_862725da-f312-43c5-a73c-6a03ed44379f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:41:08][353154433269303][4889 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-09-09 12:41:08][353154433269303][4889 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-09-09 12:41:08][353154433269303][4890 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:41:11][353530674498422][0 ms][INFO] === Request start === [2025-09-09 12:41:11][353530674498422][1 ms][DEBUG] START check_scloud [2025-09-09 12:41:11][353530674498422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:41:11][353530674498422][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 31625 5015 24490020 194492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:41:11][353530674498422][306 ms][DEBUG] targetPkg: running [2025-09-09 12:41:11][353530674498422][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 12:41:11][353530674498422][306 ms][DEBUG] START check_boot_completed [2025-09-09 12:41:11][353530674498422][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:41:11][353530674498422][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:41:11][353530674498422][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:41:11][353530674498422][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:41:11][353530674498422][414 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 12:41:11][353530674498422][414 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:41:11][353530674498422][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530674498422\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5594\"}'\'' -e'"" [2025-09-09 12:41:11][353530674498422][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:41:11][353530674498422][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530674498422\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5594\"}'\'' -e'"" [2025-09-09 12:41:14][353530674498422][3757 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a887bfce-765e-45cb-b9bc-cc004cfaed85","id":"QR_a887bfce-765e-45cb-b9bc-cc004cfaed85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:41:14][353530674498422][3913 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 12:41:14][353530674498422][3913 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 12:41:14][353530674498422][3913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:41:17][350637544987816][0 ms][INFO] === Request start === [2025-09-09 12:41:17][350637544987816][1 ms][DEBUG] START check_scloud [2025-09-09 12:41:17][350637544987816][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:41:17][350637544987816][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 31625 5015 24671532 206396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:41:17][350637544987816][290 ms][DEBUG] targetPkg: running [2025-09-09 12:41:17][350637544987816][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 12:41:17][350637544987816][290 ms][DEBUG] START check_boot_completed [2025-09-09 12:41:17][350637544987816][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:41:17][350637544987816][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:41:17][350637544987816][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:41:17][350637544987816][384 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:41:17][350637544987816][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:41:17][350637544987816][384 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:41:17][350637544987816][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544987816\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2045\"}'\'' -e'"" [2025-09-09 12:41:17][350637544987816][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:41:17][350637544987816][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544987816\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2045\"}'\'' -e'"" [2025-09-09 12:41:20][350637544987816][3883 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50812955-2495-4f36-a161-81a5d9f36c5c","id":"QR_50812955-2495-4f36-a161-81a5d9f36c5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:41:21][350637544987816][4039 ms][DEBUG] proc_open done in 3654 ms; code=255; res.len=3343 [2025-09-09 12:41:21][350637544987816][4039 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 12:41:21][350637544987816][4039 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:41:23][350019156590750][0 ms][INFO] === Request start === [2025-09-09 12:41:23][350019156590750][1 ms][DEBUG] START check_scloud [2025-09-09 12:41:23][350019156590750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:41:23][350019156590750][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 31625 5015 24853044 217328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:41:23][350019156590750][316 ms][DEBUG] targetPkg: running [2025-09-09 12:41:23][350019156590750][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 12:41:23][350019156590750][316 ms][DEBUG] START check_boot_completed [2025-09-09 12:41:23][350019156590750][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:41:23][350019156590750][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:41:23][350019156590750][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:41:23][350019156590750][425 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 12:41:23][350019156590750][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:41:23][350019156590750][425 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:41:23][350019156590750][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019156590750\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8945\"}'\'' -e'"" [2025-09-09 12:41:23][350019156590750][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:41:23][350019156590750][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019156590750\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8945\"}'\'' -e'"" [2025-09-09 12:41:26][350019156590750][3752 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c30afc82-45ac-4d12-80f3-f8ac7486204b","id":"QR_c30afc82-45ac-4d12-80f3-f8ac7486204b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:41:27][350019156590750][3908 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 12:41:27][350019156590750][3909 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 12:41:27][350019156590750][3909 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:43:03][357648372980495][0 ms][INFO] === Request start === [2025-09-09 12:43:03][357648372980495][1 ms][DEBUG] START check_scloud [2025-09-09 12:43:03][357648372980495][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:43:04][357648372980495][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31625 5015 24966828 229516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:43:04][357648372980495][308 ms][DEBUG] targetPkg: running [2025-09-09 12:43:04][357648372980495][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 12:43:04][357648372980495][308 ms][DEBUG] START check_boot_completed [2025-09-09 12:43:04][357648372980495][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:43:04][357648372980495][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:43:04][357648372980495][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:43:04][357648372980495][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:43:04][357648372980495][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:43:04][357648372980495][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:43:04][357648372980495][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357648372980495\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3186\"}'\'' -e'"" [2025-09-09 12:43:04][357648372980495][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:43:04][357648372980495][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357648372980495\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3186\"}'\'' -e'"" [2025-09-09 12:43:08][357648372980495][4557 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7aba2734-5ae7-435b-90f1-25a3e1b488f8","id":"QR_7aba2734-5ae7-435b-90f1-25a3e1b488f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:43:08][357648372980495][4713 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-09 12:43:08][357648372980495][4713 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-09 12:43:08][357648372980495][4713 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:45:03][355039461331414][1 ms][INFO] === Request start === [2025-09-09 12:45:03][355039461331414][1 ms][DEBUG] START check_scloud [2025-09-09 12:45:03][355039461331414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:45:03][355039461331414][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 31625 5015 25099152 240844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:45:03][355039461331414][296 ms][DEBUG] targetPkg: running [2025-09-09 12:45:03][355039461331414][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 12:45:03][355039461331414][297 ms][DEBUG] START check_boot_completed [2025-09-09 12:45:03][355039461331414][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:45:04][355039461331414][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 12:45:04][355039461331414][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:45:04][355039461331414][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:45:04][355039461331414][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 12:45:04][355039461331414][375 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:45:04][355039461331414][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039461331414\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8154\"}'\'' -e'"" [2025-09-09 12:45:04][355039461331414][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:45:04][355039461331414][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039461331414\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8154\"}'\'' -e'"" [2025-09-09 12:45:07][355039461331414][4061 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 12:45:07][355039461331414][4062 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-09 12:45:07][355039461331414][4062 ms][WARN] Detected error: Process with pid 31625 either refused to load frida-agent, or terminated during injectionProcess with pid 31625 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 12:45:07][355039461331414][4062 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 12:45:08][355039461331414][4374 ms][DEBUG] SU: done in 312 ms; outsystem 5433 5015 13032024 190980 ep_poll 0 S system_server\n [2025-09-09 12:45:08][355039461331414][4374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 12:45:08][355039461331414][4514 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 12:45:08][355039461331414][4514 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 12:45:08][355039461331414][4514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 12:45:08][355039461331414][4624 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 12:45:08][355039461331414][4624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 12:45:08][355039461331414][4796 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 12:45:10][355039461331414][6810 ms][DEBUG] START check_boot_completed [2025-09-09 12:45:10][355039461331414][6811 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:45:10][355039461331414][6857 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:45:10][355039461331414][6857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:45:10][355039461331414][6904 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:45:10][355039461331414][6904 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:45:13][355039461331414][9919 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 12:45:13][355039461331414][9919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039461331414\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8154\"}'\'' -e'"" [2025-09-09 12:45:18][355039461331414][15121 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b002886d-7048-4652-928b-8dc647c03b02","id":"QR_b002886d-7048-4652-928b-8dc647c03b02","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:45:18][355039461331414][15277 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-09 12:45:18][355039461331414][15277 ms][DEBUG] END runCmdUntilRes#2 in 5358 ms [2025-09-09 12:45:18][355039461331414][15277 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:45:21][355039461331414][0 ms][INFO] === Request start === [2025-09-09 12:45:21][355039461331414][1 ms][DEBUG] START check_scloud [2025-09-09 12:45:21][355039461331414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:45:21][355039461331414][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 448 5015 23758236 124276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:45:21][355039461331414][252 ms][DEBUG] targetPkg: running [2025-09-09 12:45:21][355039461331414][252 ms][DEBUG] END check_scloud in 252 ms [2025-09-09 12:45:21][355039461331414][252 ms][DEBUG] START check_boot_completed [2025-09-09 12:45:21][355039461331414][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:45:21][355039461331414][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:45:21][355039461331414][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:45:21][355039461331414][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:45:21][355039461331414][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:45:21][355039461331414][346 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:45:21][355039461331414][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039461331414\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7825\"}'\'' -e'"" [2025-09-09 12:45:21][355039461331414][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:45:21][355039461331414][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039461331414\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7825\"}'\'' -e'"" [2025-09-09 12:45:26][355039461331414][5407 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bac75ca7-3df3-43e6-ada5-5dad1c497db5","id":"QR_bac75ca7-3df3-43e6-ada5-5dad1c497db5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:45:26][355039461331414][5563 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 12:45:26][355039461331414][5563 ms][DEBUG] END runCmdUntilRes#1 in 5218 ms [2025-09-09 12:45:26][355039461331414][5564 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:46:03][353079704858908][0 ms][INFO] === Request start === [2025-09-09 12:46:03][353079704858908][1 ms][DEBUG] START check_scloud [2025-09-09 12:46:03][353079704858908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:46:03][353079704858908][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 448 5015 23848380 138192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:46:03][353079704858908][302 ms][DEBUG] targetPkg: running [2025-09-09 12:46:03][353079704858908][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 12:46:03][353079704858908][302 ms][DEBUG] START check_boot_completed [2025-09-09 12:46:03][353079704858908][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:46:03][353079704858908][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:46:03][353079704858908][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:46:03][353079704858908][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:46:03][353079704858908][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 12:46:03][353079704858908][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:46:03][353079704858908][536 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4691\nsuccessfulTxPacketsPerSecond: 0.03312059655114759\nretriedTxPackets: 1107\nretriedTxPacketsPerSecond: 5.208846948430441E-6\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4190\nsuccessfulRxPacketsPerSecond: 1.6545749130308457E-5\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:46:03][353079704858908][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:46:05][353079704858908][1973 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=392 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 392.578/392.578/392.578/0.000 ms\n [2025-09-09 12:46:05][353079704858908][1974 ms][DEBUG] check_internet: online [2025-09-09 12:46:05][353079704858908][1974 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:46:05][353079704858908][1974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079704858908\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2401\"}'\'' -e'"" [2025-09-09 12:46:05][353079704858908][1974 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:46:05][353079704858908][1974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079704858908\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2401\"}'\'' -e'"" [2025-09-09 12:46:08][353079704858908][5394 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4899be5-3ccb-4d76-9c4b-c0f16598985d","id":"QR_c4899be5-3ccb-4d76-9c4b-c0f16598985d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:46:08][353079704858908][5551 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-09 12:46:08][353079704858908][5551 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 12:46:08][353079704858908][5551 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:46:11][353079704858908][0 ms][INFO] === Request start === [2025-09-09 12:46:11][353079704858908][1 ms][DEBUG] START check_scloud [2025-09-09 12:46:11][353079704858908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:46:11][353079704858908][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 448 5015 23982660 149268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:46:11][353079704858908][310 ms][DEBUG] targetPkg: running [2025-09-09 12:46:11][353079704858908][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 12:46:11][353079704858908][310 ms][DEBUG] START check_boot_completed [2025-09-09 12:46:11][353079704858908][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:46:11][353079704858908][356 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 12:46:11][353079704858908][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:46:11][353079704858908][434 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 12:46:11][353079704858908][434 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-09 12:46:11][353079704858908][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:46:12][353079704858908][559 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4691\nsuccessfulTxPacketsPerSecond: 0.03312059655114759\nretriedTxPackets: 1107\nretriedTxPacketsPerSecond: 5.208846948430441E-6\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4190\nsuccessfulRxPacketsPerSecond: 1.6545749130308457E-5\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:46:12][353079704858908][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:46:12][353079704858908][981 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.561/301.561/301.561/0.000 ms\n [2025-09-09 12:46:12][353079704858908][981 ms][DEBUG] check_internet: online [2025-09-09 12:46:12][353079704858908][981 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:46:12][353079704858908][981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079704858908\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8694\"}'\'' -e'"" [2025-09-09 12:46:12][353079704858908][981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:46:12][353079704858908][981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079704858908\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8694\"}'\'' -e'"" [2025-09-09 12:46:16][353079704858908][5120 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64d50f0a-1c8a-4d32-8446-2e2f52457e0e","id":"QR_64d50f0a-1c8a-4d32-8446-2e2f52457e0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:46:16][353079704858908][5276 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-09-09 12:46:16][353079704858908][5276 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-09 12:46:16][353079704858908][5276 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:48:03][351234160020376][0 ms][INFO] === Request start === [2025-09-09 12:48:03][351234160020376][0 ms][DEBUG] START check_scloud [2025-09-09 12:48:03][351234160020376][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:48:04][351234160020376][243 ms][DEBUG] SU: done in 242 ms; outu0_a118 448 5015 24107596 160632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:48:04][351234160020376][243 ms][DEBUG] targetPkg: running [2025-09-09 12:48:04][351234160020376][243 ms][DEBUG] END check_scloud in 242 ms [2025-09-09 12:48:04][351234160020376][243 ms][DEBUG] START check_boot_completed [2025-09-09 12:48:04][351234160020376][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:48:04][351234160020376][288 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 12:48:04][351234160020376][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:48:04][351234160020376][350 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:48:04][351234160020376][350 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-09 12:48:04][351234160020376][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:48:04][351234160020376][475 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4691\nsuccessfulTxPacketsPerSecond: 0.03312059655114759\nretriedTxPackets: 1107\nretriedTxPacketsPerSecond: 5.208846948430441E-6\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4190\nsuccessfulRxPacketsPerSecond: 1.6545749130308457E-5\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:48:04][351234160020376][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:48:04][351234160020376][928 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=311 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 311.913/311.913/311.913/0.000 ms\n [2025-09-09 12:48:04][351234160020376][928 ms][DEBUG] check_internet: online [2025-09-09 12:48:04][351234160020376][928 ms][DEBUG] rawBody.length=1150 [2025-09-09 12:48:04][351234160020376][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160020376\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3004\"}'\'' -e'"" [2025-09-09 12:48:04][351234160020376][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:48:04][351234160020376][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160020376\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3004\"}'\'' -e'"" [2025-09-09 12:48:08][351234160020376][5224 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf7ca004-b1e8-4427-80fb-a093847be09a","id":"QR_bf7ca004-b1e8-4427-80fb-a093847be09a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:48:09][351234160020376][5380 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-09-09 12:48:09][351234160020376][5380 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 12:48:09][351234160020376][5380 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:48:11][351234160020376][0 ms][INFO] === Request start === [2025-09-09 12:48:11][351234160020376][1 ms][DEBUG] START check_scloud [2025-09-09 12:48:11][351234160020376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:48:11][351234160020376][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 448 5015 24270676 171604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:48:11][351234160020376][252 ms][DEBUG] targetPkg: running [2025-09-09 12:48:11][351234160020376][252 ms][DEBUG] END check_scloud in 252 ms [2025-09-09 12:48:11][351234160020376][252 ms][DEBUG] START check_boot_completed [2025-09-09 12:48:11][351234160020376][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:48:11][351234160020376][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:48:11][351234160020376][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:48:11][351234160020376][362 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:48:11][351234160020376][362 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:48:11][351234160020376][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:48:12][351234160020376][518 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4691\nsuccessfulTxPacketsPerSecond: 0.03312059655114759\nretriedTxPackets: 1107\nretriedTxPacketsPerSecond: 5.208846948430441E-6\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4190\nsuccessfulRxPacketsPerSecond: 1.6545749130308457E-5\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:48:12][351234160020376][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:48:12][351234160020376][955 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.391/335.391/335.391/0.000 ms\n [2025-09-09 12:48:12][351234160020376][955 ms][DEBUG] check_internet: online [2025-09-09 12:48:12][351234160020376][955 ms][DEBUG] rawBody.length=1160 [2025-09-09 12:48:12][351234160020376][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160020376\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5677\"}'\'' -e'"" [2025-09-09 12:48:12][351234160020376][956 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:48:12][351234160020376][956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160020376\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5677\"}'\'' -e'"" [2025-09-09 12:48:17][351234160020376][6313 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a46a5e47-13f8-41c3-8b00-0bf09794bc42","id":"QR_a46a5e47-13f8-41c3-8b00-0bf09794bc42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:48:17][351234160020376][6469 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-09 12:48:17][351234160020376][6469 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-09 12:48:17][351234160020376][6469 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:49:03][353289767615588][0 ms][INFO] === Request start === [2025-09-09 12:49:03][353289767615588][1 ms][DEBUG] START check_scloud [2025-09-09 12:49:03][353289767615588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:49:03][353289767615588][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 448 5015 24362004 183644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:49:03][353289767615588][251 ms][DEBUG] targetPkg: running [2025-09-09 12:49:03][353289767615588][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 12:49:03][353289767615588][251 ms][DEBUG] START check_boot_completed [2025-09-09 12:49:03][353289767615588][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:49:04][353289767615588][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:49:04][353289767615588][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:49:04][353289767615588][346 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 12:49:04][353289767615588][346 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 12:49:04][353289767615588][346 ms][DEBUG] rawBody.length=1149 [2025-09-09 12:49:04][353289767615588][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289767615588\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8944\"}'\'' -e'"" [2025-09-09 12:49:04][353289767615588][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:49:04][353289767615588][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289767615588\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8944\"}'\'' -e'"" [2025-09-09 12:49:07][353289767615588][3609 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3591abf-c44f-455f-a5ff-0d6bf4f2e714","id":"QR_c3591abf-c44f-455f-a5ff-0d6bf4f2e714","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:49:07][353289767615588][3765 ms][DEBUG] proc_open done in 3419 ms; code=255; res.len=3343 [2025-09-09 12:49:07][353289767615588][3765 ms][DEBUG] END runCmdUntilRes#1 in 3419 ms [2025-09-09 12:49:07][353289767615588][3765 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:49:09][353289767615588][1 ms][INFO] === Request start === [2025-09-09 12:49:09][353289767615588][1 ms][DEBUG] START check_scloud [2025-09-09 12:49:09][353289767615588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:49:10][353289767615588][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 448 5015 24500508 194604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:49:10][353289767615588][301 ms][DEBUG] targetPkg: running [2025-09-09 12:49:10][353289767615588][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 12:49:10][353289767615588][301 ms][DEBUG] START check_boot_completed [2025-09-09 12:49:10][353289767615588][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:49:10][353289767615588][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 12:49:10][353289767615588][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:49:10][353289767615588][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 12:49:10][353289767615588][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 12:49:10][353289767615588][410 ms][DEBUG] rawBody.length=1159 [2025-09-09 12:49:10][353289767615588][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289767615588\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6203\"}'\'' -e'"" [2025-09-09 12:49:10][353289767615588][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:49:10][353289767615588][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289767615588\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6203\"}'\'' -e'"" [2025-09-09 12:49:14][353289767615588][4768 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a8ec7d2-b54e-4e44-80ab-0c01c04accd2","id":"QR_5a8ec7d2-b54e-4e44-80ab-0c01c04accd2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:49:14][353289767615588][4925 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-09 12:49:14][353289767615588][4925 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-09 12:49:14][353289767615588][4925 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 12:50:06][353325477878080][1 ms][INFO] === Request start === [2025-09-09 12:50:06][353325477878080][1 ms][DEBUG] START check_scloud [2025-09-09 12:50:06][353325477878080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 12:50:06][353325477878080][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 448 5015 24647004 206824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 12:50:06][353325477878080][304 ms][DEBUG] targetPkg: running [2025-09-09 12:50:06][353325477878080][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 12:50:06][353325477878080][304 ms][DEBUG] START check_boot_completed [2025-09-09 12:50:06][353325477878080][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 12:50:06][353325477878080][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 12:50:06][353325477878080][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 12:50:06][353325477878080][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 12:50:06][353325477878080][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 12:50:06][353325477878080][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 12:50:06][353325477878080][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4904\nsuccessfulTxPacketsPerSecond: 0.7859459579131475\nretriedTxPackets: 1174\nretriedTxPacketsPerSecond: 0.24722243746563793\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4370\nsuccessfulRxPacketsPerSecond: 0.6641796827435049\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 12:50:06][353325477878080][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 12:50:06][353325477878080][944 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.386/333.386/333.386/0.000 ms\n [2025-09-09 12:50:06][353325477878080][944 ms][DEBUG] check_internet: online [2025-09-09 12:50:06][353325477878080][945 ms][DEBUG] rawBody.length=1170 [2025-09-09 12:50:06][353325477878080][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477878080\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X40259BA\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6789\"}'\'' -e'"" [2025-09-09 12:50:06][353325477878080][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 12:50:06][353325477878080][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477878080\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X40259BA\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6789\"}'\'' -e'"" [2025-09-09 12:50:12][353325477878080][6912 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b57f4b7-c047-46fc-bbdf-50ec075708bf","id":"QR_7b57f4b7-c047-46fc-bbdf-50ec075708bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 12:50:13][353325477878080][7068 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-09 12:50:13][353325477878080][7068 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-09 12:50:13][353325477878080][7068 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:02:03][351877477402875][1 ms][INFO] === Request start === [2025-09-09 13:02:03][351877477402875][1 ms][DEBUG] START check_scloud [2025-09-09 13:02:03][351877477402875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:02:03][351877477402875][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 448 5015 24759796 218508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:02:03][351877477402875][284 ms][DEBUG] targetPkg: running [2025-09-09 13:02:03][351877477402875][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-09 13:02:03][351877477402875][284 ms][DEBUG] START check_boot_completed [2025-09-09 13:02:03][351877477402875][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:02:03][351877477402875][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:02:03][351877477402875][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:02:03][351877477402875][378 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:02:03][351877477402875][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:02:03][351877477402875][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:02:03][351877477402875][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4966\nsuccessfulTxPacketsPerSecond: 0.023252492168892816\nretriedTxPackets: 1205\nretriedTxPacketsPerSecond: 0.0199307075733367\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4416\nsuccessfulRxPacketsPerSecond: 0.016608922977780584\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:02:03][351877477402875][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:02:05][351877477402875][2065 ms][DEBUG] SU: done in 1562 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.457/303.457/303.457/0.000 ms\n [2025-09-09 13:02:05][351877477402875][2065 ms][DEBUG] check_internet: online [2025-09-09 13:02:05][351877477402875][2065 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:02:05][351877477402875][2066 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477402875\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2470\"}'\'' -e'"" [2025-09-09 13:02:05][351877477402875][2066 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:02:05][351877477402875][2066 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477402875\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2470\"}'\'' -e'"" [2025-09-09 13:02:09][351877477402875][5892 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b543e3b-439c-459c-9733-53e12532c13f","id":"QR_6b543e3b-439c-459c-9733-53e12532c13f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:02:09][351877477402875][6048 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-09-09 13:02:09][351877477402875][6048 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-09-09 13:02:09][351877477402875][6048 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:02:11][351877477402875][0 ms][INFO] === Request start === [2025-09-09 13:02:11][351877477402875][1 ms][DEBUG] START check_scloud [2025-09-09 13:02:11][351877477402875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:02:12][351877477402875][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 448 5015 24932168 230376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:02:12][351877477402875][288 ms][DEBUG] targetPkg: running [2025-09-09 13:02:12][351877477402875][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 13:02:12][351877477402875][288 ms][DEBUG] START check_boot_completed [2025-09-09 13:02:12][351877477402875][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:02:12][351877477402875][335 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:02:12][351877477402875][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:02:12][351877477402875][397 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:02:12][351877477402875][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:02:12][351877477402875][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:02:12][351877477402875][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4966\nsuccessfulTxPacketsPerSecond: 0.023252492168892816\nretriedTxPackets: 1205\nretriedTxPacketsPerSecond: 0.0199307075733367\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4416\nsuccessfulRxPacketsPerSecond: 0.016608922977780584\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:02:12][351877477402875][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:02:12][351877477402875][959 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=334 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 334.317/334.317/334.317/0.000 ms\n [2025-09-09 13:02:12][351877477402875][959 ms][DEBUG] check_internet: online [2025-09-09 13:02:12][351877477402875][960 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:02:12][351877477402875][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477402875\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4597\"}'\'' -e'"" [2025-09-09 13:02:12][351877477402875][960 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:02:12][351877477402875][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477402875\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4597\"}'\'' -e'"" [2025-09-09 13:02:17][351877477402875][5802 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07b83513-c46a-4081-809a-90c665eb6cdb","id":"QR_07b83513-c46a-4081-809a-90c665eb6cdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:02:17][351877477402875][5958 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 13:02:17][351877477402875][5958 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 13:02:17][351877477402875][5958 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:06:03][350013880282784][1 ms][INFO] === Request start === [2025-09-09 13:06:03][350013880282784][1 ms][DEBUG] START check_scloud [2025-09-09 13:06:03][350013880282784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:06:03][350013880282784][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 448 5015 25046024 241020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:06:03][350013880282784][305 ms][DEBUG] targetPkg: running [2025-09-09 13:06:03][350013880282784][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 13:06:03][350013880282784][306 ms][DEBUG] START check_boot_completed [2025-09-09 13:06:03][350013880282784][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:06:03][350013880282784][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:06:03][350013880282784][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:06:03][350013880282784][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:06:03][350013880282784][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:06:03][350013880282784][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:06:03][350013880282784][493 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5028\nsuccessfulTxPacketsPerSecond: 4.048208498881118E-6\nretriedTxPackets: 1227\nretriedTxPacketsPerSecond: 1.436461080248139E-6\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4472\nsuccessfulRxPacketsPerSecond: 3.6564463860861714E-6\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:06:03][350013880282784][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:06:04][350013880282784][899 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.295/302.295/302.295/0.000 ms\n [2025-09-09 13:06:04][350013880282784][899 ms][DEBUG] check_internet: online [2025-09-09 13:06:04][350013880282784][899 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:06:04][350013880282784][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880282784\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8480\"}'\'' -e'"" [2025-09-09 13:06:04][350013880282784][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:06:04][350013880282784][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880282784\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8480\"}'\'' -e'"" [2025-09-09 13:06:08][350013880282784][5320 ms][DEBUG] proc_open done in 4420 ms (timeout); code=4; out.len=0 err.len=89 [2025-09-09 13:06:08][350013880282784][5320 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-09-09 13:06:08][350013880282784][5320 ms][WARN] Detected error: Process with pid 448 either refused to load frida-agent, or terminated during injectionProcess with pid 448 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:06:08][350013880282784][5320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:06:08][350013880282784][5585 ms][DEBUG] SU: done in 265 ms; outsystem 5433 5015 12941112 181484 ep_poll 0 S system_server\n [2025-09-09 13:06:08][350013880282784][5585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:06:09][350013880282784][5741 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 13:06:09][350013880282784][5742 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:06:09][350013880282784][5742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:06:09][350013880282784][5882 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 13:06:09][350013880282784][5882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:06:09][350013880282784][6070 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:06:11][350013880282784][8084 ms][DEBUG] START check_boot_completed [2025-09-09 13:06:11][350013880282784][8085 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:06:11][350013880282784][8131 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:06:11][350013880282784][8132 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:06:11][350013880282784][8178 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:06:11][350013880282784][8178 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:06:14][350013880282784][11193 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:06:14][350013880282784][11193 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880282784\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8480\"}'\'' -e'"" [2025-09-09 13:06:19][350013880282784][15864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7812d206-cda1-4116-8687-12af87c5d40f","id":"QR_7812d206-cda1-4116-8687-12af87c5d40f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:06:19][350013880282784][16020 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-09 13:06:19][350013880282784][16020 ms][DEBUG] END runCmdUntilRes#2 in 4827 ms [2025-09-09 13:06:19][350013880282784][16020 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:06:21][350013880282784][0 ms][INFO] === Request start === [2025-09-09 13:06:21][350013880282784][1 ms][DEBUG] START check_scloud [2025-09-09 13:06:21][350013880282784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:06:22][350013880282784][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 2721 5015 23789472 124000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:06:22][350013880282784][272 ms][DEBUG] targetPkg: running [2025-09-09 13:06:22][350013880282784][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 13:06:22][350013880282784][272 ms][DEBUG] START check_boot_completed [2025-09-09 13:06:22][350013880282784][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:06:22][350013880282784][319 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:06:22][350013880282784][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:06:22][350013880282784][384 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 13:06:22][350013880282784][384 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 13:06:22][350013880282784][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:06:22][350013880282784][491 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5028\nsuccessfulTxPacketsPerSecond: 4.048208498881118E-6\nretriedTxPackets: 1227\nretriedTxPacketsPerSecond: 1.436461080248139E-6\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4472\nsuccessfulRxPacketsPerSecond: 3.6564463860861714E-6\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:06:22][350013880282784][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:06:22][350013880282784][928 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.492/297.492/297.492/0.000 ms\n [2025-09-09 13:06:22][350013880282784][928 ms][DEBUG] check_internet: online [2025-09-09 13:06:22][350013880282784][928 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:06:22][350013880282784][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880282784\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9695\"}'\'' -e'"" [2025-09-09 13:06:22][350013880282784][929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:06:22][350013880282784][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880282784\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9695\"}'\'' -e'"" [2025-09-09 13:06:28][350013880282784][7083 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4c35e43-516e-4bde-a499-ada479c08114","id":"QR_d4c35e43-516e-4bde-a499-ada479c08114","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:06:29][350013880282784][7239 ms][DEBUG] proc_open done in 6310 ms; code=255; res.len=3343 [2025-09-09 13:06:29][350013880282784][7239 ms][DEBUG] END runCmdUntilRes#1 in 6310 ms [2025-09-09 13:06:29][350013880282784][7239 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:10:03][355042520281265][0 ms][INFO] === Request start === [2025-09-09 13:10:03][355042520281265][0 ms][DEBUG] START check_scloud [2025-09-09 13:10:03][355042520281265][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:10:04][355042520281265][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 2721 5015 23836492 137460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:10:04][355042520281265][303 ms][DEBUG] targetPkg: running [2025-09-09 13:10:04][355042520281265][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 13:10:04][355042520281265][303 ms][DEBUG] START check_boot_completed [2025-09-09 13:10:04][355042520281265][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:10:04][355042520281265][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:10:04][355042520281265][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:10:04][355042520281265][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:10:04][355042520281265][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:10:04][355042520281265][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:10:04][355042520281265][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:10:04][355042520281265][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:10:05][355042520281265][1865 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.832/300.832/300.832/0.000 ms\n [2025-09-09 13:10:05][355042520281265][1865 ms][DEBUG] check_internet: online [2025-09-09 13:10:05][355042520281265][1865 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:10:05][355042520281265][1865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355042520281265\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8799\"}'\'' -e'"" [2025-09-09 13:10:05][355042520281265][1865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:10:05][355042520281265][1865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355042520281265\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8799\"}'\'' -e'"" [2025-09-09 13:10:09][355042520281265][5661 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b560eb0b-ac17-4742-90de-61f3c951584a","id":"QR_b560eb0b-ac17-4742-90de-61f3c951584a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:10:09][355042520281265][5817 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-09 13:10:09][355042520281265][5817 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-09 13:10:09][355042520281265][5818 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:10:12][355042520281265][0 ms][INFO] === Request start === [2025-09-09 13:10:12][355042520281265][0 ms][DEBUG] START check_scloud [2025-09-09 13:10:12][355042520281265][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:10:12][355042520281265][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 2721 5015 23966548 149148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:10:12][355042520281265][300 ms][DEBUG] targetPkg: running [2025-09-09 13:10:12][355042520281265][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 13:10:12][355042520281265][300 ms][DEBUG] START check_boot_completed [2025-09-09 13:10:12][355042520281265][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:10:12][355042520281265][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:10:12][355042520281265][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:10:12][355042520281265][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:10:12][355042520281265][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:10:12][355042520281265][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:10:12][355042520281265][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:10:12][355042520281265][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:10:13][355042520281265][893 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.245/303.245/303.245/0.000 ms\n [2025-09-09 13:10:13][355042520281265][893 ms][DEBUG] check_internet: online [2025-09-09 13:10:13][355042520281265][893 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:10:13][355042520281265][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355042520281265\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5747\"}'\'' -e'"" [2025-09-09 13:10:13][355042520281265][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:10:13][355042520281265][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355042520281265\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5747\"}'\'' -e'"" [2025-09-09 13:10:17][355042520281265][5752 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_980d9014-4155-4fec-993a-c7d0974790e2","id":"QR_980d9014-4155-4fec-993a-c7d0974790e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:10:18][355042520281265][5908 ms][DEBUG] proc_open done in 5015 ms; code=255; res.len=3343 [2025-09-09 13:10:18][355042520281265][5908 ms][DEBUG] END runCmdUntilRes#1 in 5015 ms [2025-09-09 13:10:18][355042520281265][5908 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:10:22][353310803197066][0 ms][INFO] === Request start === [2025-09-09 13:10:22][353310803197066][1 ms][DEBUG] START check_scloud [2025-09-09 13:10:22][353310803197066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:10:22][353310803197066][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 2721 5015 24125468 159992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:10:22][353310803197066][297 ms][DEBUG] targetPkg: running [2025-09-09 13:10:22][353310803197066][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 13:10:22][353310803197066][297 ms][DEBUG] START check_boot_completed [2025-09-09 13:10:22][353310803197066][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:10:22][353310803197066][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:10:22][353310803197066][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:10:22][353310803197066][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:10:22][353310803197066][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:10:22][353310803197066][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:10:22][353310803197066][500 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:10:22][353310803197066][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:10:23][353310803197066][906 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.777/308.777/308.777/0.000 ms\n [2025-09-09 13:10:23][353310803197066][906 ms][DEBUG] check_internet: online [2025-09-09 13:10:23][353310803197066][906 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:10:23][353310803197066][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803197066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4954\"}'\'' -e'"" [2025-09-09 13:10:23][353310803197066][906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:10:23][353310803197066][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803197066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4954\"}'\'' -e'"" [2025-09-09 13:10:26][353310803197066][4124 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed2985e2-f1cc-4b31-b0e7-677a93c0686c","id":"QR_ed2985e2-f1cc-4b31-b0e7-677a93c0686c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:10:26][353310803197066][4280 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=3343 [2025-09-09 13:10:26][353310803197066][4280 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-09 13:10:26][353310803197066][4280 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:10:28][353310803197066][0 ms][INFO] === Request start === [2025-09-09 13:10:28][353310803197066][1 ms][DEBUG] START check_scloud [2025-09-09 13:10:28][353310803197066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:10:29][353310803197066][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 2721 5015 24239360 170856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:10:29][353310803197066][240 ms][DEBUG] targetPkg: running [2025-09-09 13:10:29][353310803197066][240 ms][DEBUG] END check_scloud in 239 ms [2025-09-09 13:10:29][353310803197066][240 ms][DEBUG] START check_boot_completed [2025-09-09 13:10:29][353310803197066][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:10:29][353310803197066][271 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:10:29][353310803197066][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:10:29][353310803197066][318 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:10:29][353310803197066][318 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:10:29][353310803197066][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:10:29][353310803197066][413 ms][DEBUG] SU: done in 95 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:10:29][353310803197066][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:10:29][353310803197066][833 ms][DEBUG] SU: done in 420 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.005/318.005/318.005/0.000 ms\n [2025-09-09 13:10:29][353310803197066][833 ms][DEBUG] check_internet: online [2025-09-09 13:10:29][353310803197066][833 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:10:29][353310803197066][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803197066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5016\"}'\'' -e'"" [2025-09-09 13:10:29][353310803197066][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:10:29][353310803197066][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803197066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5016\"}'\'' -e'"" [2025-09-09 13:10:34][353310803197066][5082 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02d8b686-a398-4da1-a9c2-fabcbf7b33fb","id":"QR_02d8b686-a398-4da1-a9c2-fabcbf7b33fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:10:34][353310803197066][5238 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-09 13:10:34][353310803197066][5239 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-09 13:10:34][353310803197066][5239 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:13:04][352967353291648][1 ms][INFO] === Request start === [2025-09-09 13:13:04][352967353291648][1 ms][DEBUG] START check_scloud [2025-09-09 13:13:04][352967353291648][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:13:05][352967353291648][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 2721 5015 24352668 183144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:13:05][352967353291648][301 ms][DEBUG] targetPkg: running [2025-09-09 13:13:05][352967353291648][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 13:13:05][352967353291648][301 ms][DEBUG] START check_boot_completed [2025-09-09 13:13:05][352967353291648][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:13:05][352967353291648][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:13:05][352967353291648][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:13:05][352967353291648][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:13:05][352967353291648][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:13:05][352967353291648][379 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:13:05][352967353291648][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353291648\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2717\"}'\'' -e'"" [2025-09-09 13:13:05][352967353291648][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:13:05][352967353291648][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353291648\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2717\"}'\'' -e'"" [2025-09-09 13:13:11][352967353291648][6424 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfdc2471-1936-46c1-83aa-d624e34b4c5b","id":"QR_cfdc2471-1936-46c1-83aa-d624e34b4c5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:13:11][352967353291648][6581 ms][DEBUG] proc_open done in 6202 ms; code=255; res.len=3343 [2025-09-09 13:13:11][352967353291648][6581 ms][DEBUG] END runCmdUntilRes#1 in 6202 ms [2025-09-09 13:13:11][352967353291648][6581 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:13:15][352967353291648][0 ms][INFO] === Request start === [2025-09-09 13:13:15][352967353291648][1 ms][DEBUG] START check_scloud [2025-09-09 13:13:15][352967353291648][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:13:15][352967353291648][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 2721 5015 24508516 194040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:13:15][352967353291648][302 ms][DEBUG] targetPkg: running [2025-09-09 13:13:15][352967353291648][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 13:13:15][352967353291648][302 ms][DEBUG] START check_boot_completed [2025-09-09 13:13:15][352967353291648][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:13:15][352967353291648][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:13:15][352967353291648][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:13:15][352967353291648][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:13:15][352967353291648][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:13:15][352967353291648][381 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:13:15][352967353291648][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353291648\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8284\"}'\'' -e'"" [2025-09-09 13:13:15][352967353291648][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:13:15][352967353291648][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353291648\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8284\"}'\'' -e'"" [2025-09-09 13:13:19][352967353291648][4192 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aca24b2-7d56-4df7-b971-8a2852d0802a","id":"QR_2aca24b2-7d56-4df7-b971-8a2852d0802a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:13:19][352967353291648][4348 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-09-09 13:13:19][352967353291648][4349 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-09 13:13:19][352967353291648][4349 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:14:03][354389832166911][0 ms][INFO] === Request start === [2025-09-09 13:14:03][354389832166911][1 ms][DEBUG] START check_scloud [2025-09-09 13:14:03][354389832166911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:14:03][354389832166911][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 2721 5015 24651044 206336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:14:03][354389832166911][313 ms][DEBUG] targetPkg: running [2025-09-09 13:14:03][354389832166911][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 13:14:03][354389832166911][313 ms][DEBUG] START check_boot_completed [2025-09-09 13:14:03][354389832166911][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:14:03][354389832166911][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:14:03][354389832166911][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:14:03][354389832166911][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:14:03][354389832166911][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:14:03][354389832166911][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:14:03][354389832166911][502 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:14:03][354389832166911][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:14:04][354389832166911][875 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.843/258.843/258.843/0.000 ms\n [2025-09-09 13:14:04][354389832166911][875 ms][DEBUG] check_internet: online [2025-09-09 13:14:04][354389832166911][875 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:14:04][354389832166911][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354389832166911\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8709\"}'\'' -e'"" [2025-09-09 13:14:04][354389832166911][875 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:14:04][354389832166911][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354389832166911\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8709\"}'\'' -e'"" [2025-09-09 13:14:07][354389832166911][4187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65d25530-fbd7-48f8-bb9a-7099196f46a3","id":"QR_65d25530-fbd7-48f8-bb9a-7099196f46a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:14:07][354389832166911][4343 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 13:14:07][354389832166911][4343 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 13:14:07][354389832166911][4343 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:14:10][354389832166911][0 ms][INFO] === Request start === [2025-09-09 13:14:10][354389832166911][1 ms][DEBUG] START check_scloud [2025-09-09 13:14:10][354389832166911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:14:10][354389832166911][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 2721 5015 24783404 217104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:14:10][354389832166911][266 ms][DEBUG] targetPkg: running [2025-09-09 13:14:10][354389832166911][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 13:14:10][354389832166911][266 ms][DEBUG] START check_boot_completed [2025-09-09 13:14:10][354389832166911][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:14:10][354389832166911][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:14:10][354389832166911][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:14:10][354389832166911][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:14:10][354389832166911][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:14:10][354389832166911][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:14:10][354389832166911][469 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:14:10][354389832166911][469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:14:11][354389832166911][890 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.565/267.565/267.565/0.000 ms\n [2025-09-09 13:14:11][354389832166911][891 ms][DEBUG] check_internet: online [2025-09-09 13:14:11][354389832166911][891 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:14:11][354389832166911][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354389832166911\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4966\"}'\'' -e'"" [2025-09-09 13:14:11][354389832166911][891 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:14:11][354389832166911][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354389832166911\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4966\"}'\'' -e'"" [2025-09-09 13:14:16][354389832166911][6545 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93ee517f-9b00-4e66-8f15-af51eae4b479","id":"QR_93ee517f-9b00-4e66-8f15-af51eae4b479","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:14:16][354389832166911][6701 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-09 13:14:16][354389832166911][6701 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-09 13:14:16][354389832166911][6701 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:14:21][355450532323605][0 ms][INFO] === Request start === [2025-09-09 13:14:21][355450532323605][1 ms][DEBUG] START check_scloud [2025-09-09 13:14:21][355450532323605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:14:21][355450532323605][277 ms][DEBUG] SU: done in 277 ms; outu0_a118 2721 5015 24919732 229040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:14:21][355450532323605][278 ms][DEBUG] targetPkg: running [2025-09-09 13:14:21][355450532323605][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 13:14:21][355450532323605][278 ms][DEBUG] START check_boot_completed [2025-09-09 13:14:21][355450532323605][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:14:21][355450532323605][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:14:21][355450532323605][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:14:21][355450532323605][402 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 13:14:21][355450532323605][402 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 13:14:21][355450532323605][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:14:21][355450532323605][559 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:14:21][355450532323605][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:14:22][355450532323605][980 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.508/300.508/300.508/0.000 ms\n [2025-09-09 13:14:22][355450532323605][980 ms][DEBUG] check_internet: online [2025-09-09 13:14:22][355450532323605][980 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:14:22][355450532323605][980 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355450532323605\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4825\"}'\'' -e'"" [2025-09-09 13:14:22][355450532323605][980 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:14:22][355450532323605][980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355450532323605\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4825\"}'\'' -e'"" [2025-09-09 13:14:26][355450532323605][4964 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f5f2023-10a0-4efc-8891-b7c8ca4bf573","id":"QR_5f5f2023-10a0-4efc-8891-b7c8ca4bf573","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:14:26][355450532323605][5120 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-09-09 13:14:26][355450532323605][5120 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-09-09 13:14:26][355450532323605][5120 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:14:28][355450532323605][0 ms][INFO] === Request start === [2025-09-09 13:14:28][355450532323605][1 ms][DEBUG] START check_scloud [2025-09-09 13:14:28][355450532323605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:14:28][355450532323605][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 2721 5015 25076444 239928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:14:28][355450532323605][251 ms][DEBUG] targetPkg: running [2025-09-09 13:14:28][355450532323605][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 13:14:28][355450532323605][251 ms][DEBUG] START check_boot_completed [2025-09-09 13:14:28][355450532323605][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:14:28][355450532323605][282 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:14:28][355450532323605][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:14:28][355450532323605][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:14:28][355450532323605][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:14:28][355450532323605][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:14:29][355450532323605][454 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5372\nsuccessfulTxPacketsPerSecond: 0.003113075783182421\nretriedTxPackets: 1264\nretriedTxPacketsPerSecond: 3.3483663947020235E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4775\nsuccessfulRxPacketsPerSecond: 0.002742040588093819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:14:29][355450532323605][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:14:29][355450532323605][813 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.321/224.321/224.321/0.000 ms\n [2025-09-09 13:14:29][355450532323605][813 ms][DEBUG] check_internet: online [2025-09-09 13:14:29][355450532323605][813 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:14:29][355450532323605][813 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355450532323605\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4229\"}'\'' -e'"" [2025-09-09 13:14:29][355450532323605][814 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:14:29][355450532323605][814 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355450532323605\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4229\"}'\'' -e'"" [2025-09-09 13:14:33][355450532323605][4484 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 13:14:33][355450532323605][4484 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 13:14:33][355450532323605][4484 ms][WARN] Detected error: Process with pid 2721 either refused to load frida-agent, or terminated during injectionProcess with pid 2721 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:14:33][355450532323605][4484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:14:33][355450532323605][4781 ms][DEBUG] SU: done in 297 ms; outsystem 5433 5015 13028372 188016 ep_poll 0 S system_server\n [2025-09-09 13:14:33][355450532323605][4781 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:14:33][355450532323605][4922 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 13:14:33][355450532323605][4922 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:14:33][355450532323605][4922 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:14:33][355450532323605][5047 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 13:14:33][355450532323605][5047 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:14:33][355450532323605][5203 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:14:35][355450532323605][7218 ms][DEBUG] START check_boot_completed [2025-09-09 13:14:35][355450532323605][7218 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:14:35][355450532323605][7265 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:14:35][355450532323605][7265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:14:35][355450532323605][7312 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:14:35][355450532323605][7312 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:14:38][355450532323605][10326 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:14:38][355450532323605][10327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355450532323605\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4229\"}'\'' -e'"" [2025-09-09 13:14:43][355450532323605][14435 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d97f2e5a-8b9d-4032-8941-1987401f684f","id":"QR_d97f2e5a-8b9d-4032-8941-1987401f684f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:14:43][355450532323605][14591 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-09 13:14:43][355450532323605][14591 ms][DEBUG] END runCmdUntilRes#2 in 4265 ms [2025-09-09 13:14:43][355450532323605][14591 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:15:03][357645762337344][0 ms][INFO] === Request start === [2025-09-09 13:15:03][357645762337344][1 ms][DEBUG] START check_scloud [2025-09-09 13:15:03][357645762337344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:15:04][357645762337344][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 4278 5015 23830980 126136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:15:04][357645762337344][302 ms][DEBUG] targetPkg: running [2025-09-09 13:15:04][357645762337344][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 13:15:04][357645762337344][302 ms][DEBUG] START check_boot_completed [2025-09-09 13:15:04][357645762337344][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:15:04][357645762337344][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:15:04][357645762337344][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:15:04][357645762337344][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:15:04][357645762337344][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:15:04][357645762337344][411 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:15:04][357645762337344][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357645762337344\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9584\"}'\'' -e'"" [2025-09-09 13:15:04][357645762337344][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:15:04][357645762337344][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357645762337344\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9584\"}'\'' -e'"" [2025-09-09 13:15:07][357645762337344][3817 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57872fc7-2b6d-4b80-bec5-3bc7a685a5a2","id":"QR_57872fc7-2b6d-4b80-bec5-3bc7a685a5a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:15:07][357645762337344][3973 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=3343 [2025-09-09 13:15:07][357645762337344][3973 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-09 13:15:07][357645762337344][3973 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:15:10][357645762337344][1 ms][INFO] === Request start === [2025-09-09 13:15:10][357645762337344][1 ms][DEBUG] START check_scloud [2025-09-09 13:15:10][357645762337344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:15:10][357645762337344][236 ms][DEBUG] SU: done in 235 ms; outu0_a118 4278 5015 23887260 137152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:15:10][357645762337344][236 ms][DEBUG] targetPkg: running [2025-09-09 13:15:10][357645762337344][237 ms][DEBUG] END check_scloud in 236 ms [2025-09-09 13:15:10][357645762337344][237 ms][DEBUG] START check_boot_completed [2025-09-09 13:15:10][357645762337344][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:15:10][357645762337344][283 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:15:10][357645762337344][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:15:10][357645762337344][346 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:15:10][357645762337344][346 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:15:10][357645762337344][346 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:15:10][357645762337344][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357645762337344\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6487\"}'\'' -e'"" [2025-09-09 13:15:10][357645762337344][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:15:10][357645762337344][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357645762337344\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6487\"}'\'' -e'"" [2025-09-09 13:15:15][357645762337344][5001 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f8430d1-82fd-44c3-bc7b-62eb861b46f4","id":"QR_5f8430d1-82fd-44c3-bc7b-62eb861b46f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:15:15][357645762337344][5157 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 13:15:15][357645762337344][5157 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 13:15:15][357645762337344][5157 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:16:04][353960260924954][0 ms][INFO] === Request start === [2025-09-09 13:16:04][353960260924954][1 ms][DEBUG] START check_scloud [2025-09-09 13:16:04][353960260924954][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:16:05][353960260924954][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 4278 5015 24041016 148740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:16:05][353960260924954][263 ms][DEBUG] targetPkg: running [2025-09-09 13:16:05][353960260924954][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 13:16:05][353960260924954][263 ms][DEBUG] START check_boot_completed [2025-09-09 13:16:05][353960260924954][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:16:05][353960260924954][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:16:05][353960260924954][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:16:05][353960260924954][372 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:16:05][353960260924954][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:16:05][353960260924954][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:16:05][353960260924954][528 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5609\nsuccessfulTxPacketsPerSecond: 0.8372753576084306\nretriedTxPackets: 1336\nretriedTxPacketsPerSecond: 0.2543621339569916\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4971\nsuccessfulRxPacketsPerSecond: 0.6924302535495882\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:16:05][353960260924954][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:16:06][353960260924954][1887 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.733/301.733/301.733/0.000 ms\n [2025-09-09 13:16:06][353960260924954][1887 ms][DEBUG] check_internet: online [2025-09-09 13:16:06][353960260924954][1887 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:16:06][353960260924954][1887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960260924954\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9234\"}'\'' -e'"" [2025-09-09 13:16:06][353960260924954][1887 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:16:06][353960260924954][1887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960260924954\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9234\"}'\'' -e'"" [2025-09-09 13:16:11][353960260924954][6324 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d38e022-0389-44e1-a84f-c912bc3cf499","id":"QR_6d38e022-0389-44e1-a84f-c912bc3cf499","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:16:11][353960260924954][6480 ms][DEBUG] proc_open done in 4593 ms; code=255; res.len=3343 [2025-09-09 13:16:11][353960260924954][6480 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-09-09 13:16:11][353960260924954][6480 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:16:14][353960260924954][0 ms][INFO] === Request start === [2025-09-09 13:16:14][353960260924954][1 ms][DEBUG] START check_scloud [2025-09-09 13:16:14][353960260924954][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:16:15][353960260924954][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 4278 5015 24206080 159612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:16:15][353960260924954][273 ms][DEBUG] targetPkg: running [2025-09-09 13:16:15][353960260924954][273 ms][DEBUG] END check_scloud in 273 ms [2025-09-09 13:16:15][353960260924954][273 ms][DEBUG] START check_boot_completed [2025-09-09 13:16:15][353960260924954][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:16:15][353960260924954][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:16:15][353960260924954][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:16:15][353960260924954][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:16:15][353960260924954][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:16:15][353960260924954][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:16:15][353960260924954][476 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5609\nsuccessfulTxPacketsPerSecond: 0.8372753576084306\nretriedTxPackets: 1336\nretriedTxPacketsPerSecond: 0.2543621339569916\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4971\nsuccessfulRxPacketsPerSecond: 0.6924302535495882\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:16:15][353960260924954][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:16:15][353960260924954][867 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.251/305.251/305.251/0.000 ms\n [2025-09-09 13:16:15][353960260924954][867 ms][DEBUG] check_internet: online [2025-09-09 13:16:15][353960260924954][867 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:16:15][353960260924954][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960260924954\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1705\"}'\'' -e'"" [2025-09-09 13:16:15][353960260924954][867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:16:15][353960260924954][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960260924954\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1705\"}'\'' -e'"" [2025-09-09 13:16:19][353960260924954][4584 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_621ca6a1-3177-48ce-9587-cf959d495750","id":"QR_621ca6a1-3177-48ce-9587-cf959d495750","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:16:19][353960260924954][4741 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-09 13:16:19][353960260924954][4741 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 13:16:19][353960260924954][4741 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:16:22][354519744898777][0 ms][INFO] === Request start === [2025-09-09 13:16:22][354519744898777][1 ms][DEBUG] START check_scloud [2025-09-09 13:16:22][354519744898777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:16:23][354519744898777][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 4278 5015 24367116 171524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:16:23][354519744898777][300 ms][DEBUG] targetPkg: running [2025-09-09 13:16:23][354519744898777][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 13:16:23][354519744898777][300 ms][DEBUG] START check_boot_completed [2025-09-09 13:16:23][354519744898777][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:16:23][354519744898777][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:16:23][354519744898777][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:16:23][354519744898777][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:16:23][354519744898777][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:16:23][354519744898777][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:16:23][354519744898777][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5609\nsuccessfulTxPacketsPerSecond: 0.8372753576084306\nretriedTxPackets: 1336\nretriedTxPacketsPerSecond: 0.2543621339569916\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4971\nsuccessfulRxPacketsPerSecond: 0.6924302535495882\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:16:23][354519744898777][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:16:23][354519744898777][972 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.630/323.630/323.630/0.000 ms\n [2025-09-09 13:16:23][354519744898777][972 ms][DEBUG] check_internet: online [2025-09-09 13:16:23][354519744898777][972 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:16:23][354519744898777][972 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519744898777\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X301QB0P\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6031\"}'\'' -e'"" [2025-09-09 13:16:23][354519744898777][972 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:16:23][354519744898777][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519744898777\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X301QB0P\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6031\"}'\'' -e'"" [2025-09-09 13:16:27][354519744898777][4502 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c978faf6-952c-40a2-a2db-95b236bfd548","id":"QR_c978faf6-952c-40a2-a2db-95b236bfd548","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:16:27][354519744898777][4658 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-09 13:16:27][354519744898777][4658 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-09 13:16:27][354519744898777][4658 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:19:03][353270790419800][1 ms][INFO] === Request start === [2025-09-09 13:19:03][353270790419800][1 ms][DEBUG] START check_scloud [2025-09-09 13:19:03][353270790419800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:19:03][353270790419800][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 4278 5015 24457308 182732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:19:03][353270790419800][310 ms][DEBUG] targetPkg: running [2025-09-09 13:19:03][353270790419800][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 13:19:03][353270790419800][310 ms][DEBUG] START check_boot_completed [2025-09-09 13:19:03][353270790419800][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:19:03][353270790419800][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:19:03][353270790419800][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:19:03][353270790419800][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:19:03][353270790419800][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:19:03][353270790419800][388 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:19:03][353270790419800][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353270790419800\",\"model\":\"SM-A135N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9173\"}'\'' -e'"" [2025-09-09 13:19:03][353270790419800][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:19:03][353270790419800][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353270790419800\",\"model\":\"SM-A135N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9173\"}'\'' -e'"" [2025-09-09 13:19:08][353270790419800][5308 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b626d42-fdec-45b7-b00b-65f31e488e7c","id":"QR_3b626d42-fdec-45b7-b00b-65f31e488e7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:19:08][353270790419800][5464 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-09 13:19:08][353270790419800][5465 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-09 13:19:08][353270790419800][5465 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:19:11][353270790419800][0 ms][INFO] === Request start === [2025-09-09 13:19:11][353270790419800][1 ms][DEBUG] START check_scloud [2025-09-09 13:19:11][353270790419800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:19:11][353270790419800][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 4278 5015 24636644 194512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:19:11][353270790419800][264 ms][DEBUG] targetPkg: running [2025-09-09 13:19:11][353270790419800][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 13:19:11][353270790419800][264 ms][DEBUG] START check_boot_completed [2025-09-09 13:19:11][353270790419800][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:19:11][353270790419800][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:19:11][353270790419800][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:19:11][353270790419800][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:19:11][353270790419800][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:19:11][353270790419800][342 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:19:11][353270790419800][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353270790419800\",\"model\":\"SM-A135N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3240\"}'\'' -e'"" [2025-09-09 13:19:11][353270790419800][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:19:11][353270790419800][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353270790419800\",\"model\":\"SM-A135N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3240\"}'\'' -e'"" [2025-09-09 13:19:16][353270790419800][5309 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c82a6a7-b70d-4c90-aca6-a4bb720185a0","id":"QR_2c82a6a7-b70d-4c90-aca6-a4bb720185a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:19:16][353270790419800][5466 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-09 13:19:16][353270790419800][5466 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-09 13:19:16][353270790419800][5466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:21:04][353269423308471][1 ms][INFO] === Request start === [2025-09-09 13:21:04][353269423308471][1 ms][DEBUG] START check_scloud [2025-09-09 13:21:04][353269423308471][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:21:05][353269423308471][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 4278 5015 24741184 206732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:21:05][353269423308471][319 ms][DEBUG] targetPkg: running [2025-09-09 13:21:05][353269423308471][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 13:21:05][353269423308471][319 ms][DEBUG] START check_boot_completed [2025-09-09 13:21:05][353269423308471][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:21:05][353269423308471][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:21:05][353269423308471][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:21:05][353269423308471][400 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 13:21:05][353269423308471][400 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 13:21:05][353269423308471][400 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:21:05][353269423308471][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353269423308471\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8519\"}'\'' -e'"" [2025-09-09 13:21:05][353269423308471][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:21:05][353269423308471][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353269423308471\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8519\"}'\'' -e'"" [2025-09-09 13:21:10][353269423308471][5709 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_729b574c-1a02-4e6b-bc16-3100654a0ad0","id":"QR_729b574c-1a02-4e6b-bc16-3100654a0ad0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:21:10][353269423308471][5865 ms][DEBUG] proc_open done in 5465 ms; code=255; res.len=3343 [2025-09-09 13:21:10][353269423308471][5865 ms][DEBUG] END runCmdUntilRes#1 in 5465 ms [2025-09-09 13:21:10][353269423308471][5865 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:21:14][353269423308471][0 ms][INFO] === Request start === [2025-09-09 13:21:14][353269423308471][1 ms][DEBUG] START check_scloud [2025-09-09 13:21:14][353269423308471][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:21:14][353269423308471][327 ms][DEBUG] SU: done in 327 ms; outu0_a118 4278 5015 24867208 216820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:21:14][353269423308471][327 ms][DEBUG] targetPkg: running [2025-09-09 13:21:14][353269423308471][327 ms][DEBUG] END check_scloud in 327 ms [2025-09-09 13:21:14][353269423308471][328 ms][DEBUG] START check_boot_completed [2025-09-09 13:21:14][353269423308471][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:21:14][353269423308471][374 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:21:14][353269423308471][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:21:14][353269423308471][437 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:21:14][353269423308471][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:21:14][353269423308471][437 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:21:14][353269423308471][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353269423308471\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1066\"}'\'' -e'"" [2025-09-09 13:21:14][353269423308471][437 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:21:14][353269423308471][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353269423308471\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1066\"}'\'' -e'"" [2025-09-09 13:21:18][353269423308471][4217 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c68ffa4-b9b8-42ba-aa31-8b190c40749b","id":"QR_6c68ffa4-b9b8-42ba-aa31-8b190c40749b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:21:18][353269423308471][4373 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-09 13:21:18][353269423308471][4373 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-09 13:21:18][353269423308471][4373 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:21:20][352773715684375][0 ms][INFO] === Request start === [2025-09-09 13:21:20][352773715684375][1 ms][DEBUG] START check_scloud [2025-09-09 13:21:20][352773715684375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:21:20][352773715684375][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 4278 5015 25048720 228704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:21:20][352773715684375][277 ms][DEBUG] targetPkg: running [2025-09-09 13:21:20][352773715684375][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 13:21:20][352773715684375][277 ms][DEBUG] START check_boot_completed [2025-09-09 13:21:20][352773715684375][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:21:20][352773715684375][323 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:21:20][352773715684375][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:21:21][352773715684375][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:21:21][352773715684375][370 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:21:21][352773715684375][370 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:21:21][352773715684375][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773715684375\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4394\"}'\'' -e'"" [2025-09-09 13:21:21][352773715684375][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:21:21][352773715684375][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773715684375\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4394\"}'\'' -e'"" [2025-09-09 13:21:24][352773715684375][3760 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_665bd48e-0d1a-464e-8a4d-18eb23f1dac7","id":"QR_665bd48e-0d1a-464e-8a4d-18eb23f1dac7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:21:24][352773715684375][3916 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-09 13:21:24][352773715684375][3916 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 13:21:24][352773715684375][3916 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:21:26][352773715684375][0 ms][INFO] === Request start === [2025-09-09 13:21:26][352773715684375][1 ms][DEBUG] START check_scloud [2025-09-09 13:21:26][352773715684375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:21:27][352773715684375][273 ms][DEBUG] SU: done in 273 ms; outu0_a118 4278 5015 25203444 240480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:21:27][352773715684375][273 ms][DEBUG] targetPkg: running [2025-09-09 13:21:27][352773715684375][273 ms][DEBUG] END check_scloud in 273 ms [2025-09-09 13:21:27][352773715684375][273 ms][DEBUG] START check_boot_completed [2025-09-09 13:21:27][352773715684375][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:21:27][352773715684375][305 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:21:27][352773715684375][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:21:27][352773715684375][353 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 13:21:27][352773715684375][353 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 13:21:27][352773715684375][353 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:21:27][352773715684375][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773715684375\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4392\"}'\'' -e'"" [2025-09-09 13:21:27][352773715684375][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:21:27][352773715684375][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773715684375\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4392\"}'\'' -e'"" [2025-09-09 13:21:30][352773715684375][4038 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 13:21:30][352773715684375][4038 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-09 13:21:30][352773715684375][4039 ms][WARN] Detected error: Process with pid 4278 either refused to load frida-agent, or terminated during injectionProcess with pid 4278 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:21:30][352773715684375][4039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:21:31][352773715684375][4304 ms][DEBUG] SU: done in 265 ms; outsystem 5433 5015 13049508 201072 ep_poll 0 S system_server\n [2025-09-09 13:21:31][352773715684375][4304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:21:31][352773715684375][4429 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 13:21:31][352773715684375][4429 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:21:31][352773715684375][4429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:21:31][352773715684375][4538 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 13:21:31][352773715684375][4538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:21:31][352773715684375][4694 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:21:33][352773715684375][6709 ms][DEBUG] START check_boot_completed [2025-09-09 13:21:33][352773715684375][6709 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:21:33][352773715684375][6756 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:21:33][352773715684375][6756 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:21:33][352773715684375][6803 ms][DEBUG] SU: done in 46 ms; out [2025-09-09 13:21:33][352773715684375][6803 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:21:36][352773715684375][9818 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:21:36][352773715684375][9818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773715684375\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4392\"}'\'' -e'"" [2025-09-09 13:21:41][352773715684375][14301 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ccc0107-3306-42bf-99bb-01488a95dd0b","id":"QR_6ccc0107-3306-42bf-99bb-01488a95dd0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:21:41][352773715684375][14458 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 13:21:41][352773715684375][14458 ms][DEBUG] END runCmdUntilRes#2 in 4640 ms [2025-09-09 13:21:41][352773715684375][14458 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:24:03][357450475867830][1 ms][INFO] === Request start === [2025-09-09 13:24:03][357450475867830][1 ms][DEBUG] START check_scloud [2025-09-09 13:24:03][357450475867830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:24:04][357450475867830][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 7554 5015 23754564 126636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:24:04][357450475867830][311 ms][DEBUG] targetPkg: running [2025-09-09 13:24:04][357450475867830][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 13:24:04][357450475867830][311 ms][DEBUG] START check_boot_completed [2025-09-09 13:24:04][357450475867830][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:24:04][357450475867830][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:24:04][357450475867830][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:24:04][357450475867830][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:24:04][357450475867830][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:24:04][357450475867830][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:24:04][357450475867830][514 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5817\nsuccessfulTxPacketsPerSecond: 0.11282438122728486\nretriedTxPackets: 1395\nretriedTxPacketsPerSecond: 0.03760812638916813\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5148\nsuccessfulRxPacketsPerSecond: 0.11282437916750437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:24:04][357450475867830][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:24:05][357450475867830][1936 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.949/300.949/300.949/0.000 ms\n [2025-09-09 13:24:05][357450475867830][1936 ms][DEBUG] check_internet: online [2025-09-09 13:24:05][357450475867830][1936 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:24:05][357450475867830][1936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475867830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7172\"}'\'' -e'"" [2025-09-09 13:24:05][357450475867830][1936 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:24:05][357450475867830][1936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475867830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7172\"}'\'' -e'"" [2025-09-09 13:24:10][357450475867830][6481 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef2299b1-591f-4bac-8262-cba304471500","id":"QR_ef2299b1-591f-4bac-8262-cba304471500","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:24:10][357450475867830][6638 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-09 13:24:10][357450475867830][6638 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-09 13:24:10][357450475867830][6638 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:24:12][357450475867830][0 ms][INFO] === Request start === [2025-09-09 13:24:12][357450475867830][1 ms][DEBUG] START check_scloud [2025-09-09 13:24:12][357450475867830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:24:13][357450475867830][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 7554 5015 23911564 137420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:24:13][357450475867830][270 ms][DEBUG] targetPkg: running [2025-09-09 13:24:13][357450475867830][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 13:24:13][357450475867830][270 ms][DEBUG] START check_boot_completed [2025-09-09 13:24:13][357450475867830][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:24:13][357450475867830][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:24:13][357450475867830][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:24:13][357450475867830][379 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:24:13][357450475867830][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:24:13][357450475867830][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:24:13][357450475867830][488 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5817\nsuccessfulTxPacketsPerSecond: 0.11282438122728486\nretriedTxPackets: 1395\nretriedTxPacketsPerSecond: 0.03760812638916813\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5148\nsuccessfulRxPacketsPerSecond: 0.11282437916750437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:24:13][357450475867830][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:24:13][357450475867830][910 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=280 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 280.956/280.956/280.956/0.000 ms\n [2025-09-09 13:24:13][357450475867830][910 ms][DEBUG] check_internet: online [2025-09-09 13:24:13][357450475867830][910 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:24:13][357450475867830][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475867830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-09-09 13:24:13][357450475867830][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:24:13][357450475867830][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475867830\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-09-09 13:24:18][357450475867830][5752 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fc1aaf6-c598-4473-aa8d-395b10d7ab40","id":"QR_7fc1aaf6-c598-4473-aa8d-395b10d7ab40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:24:18][357450475867830][5909 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 13:24:18][357450475867830][5909 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 13:24:18][357450475867830][5909 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:24:22][353725746636484][0 ms][INFO] === Request start === [2025-09-09 13:24:22][353725746636484][1 ms][DEBUG] START check_scloud [2025-09-09 13:24:22][353725746636484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:24:23][353725746636484][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7554 5015 24088788 148904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:24:23][353725746636484][314 ms][DEBUG] targetPkg: running [2025-09-09 13:24:23][353725746636484][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 13:24:23][353725746636484][314 ms][DEBUG] START check_boot_completed [2025-09-09 13:24:23][353725746636484][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:24:23][353725746636484][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:24:23][353725746636484][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:24:23][353725746636484][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:24:23][353725746636484][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:24:23][353725746636484][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:24:23][353725746636484][533 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5817\nsuccessfulTxPacketsPerSecond: 0.11282438122728486\nretriedTxPackets: 1395\nretriedTxPacketsPerSecond: 0.03760812638916813\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5148\nsuccessfulRxPacketsPerSecond: 0.11282437916750437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:24:23][353725746636484][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:24:23][353725746636484][987 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=311 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 311.193/311.193/311.193/0.000 ms\n [2025-09-09 13:24:23][353725746636484][987 ms][DEBUG] check_internet: online [2025-09-09 13:24:23][353725746636484][987 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:24:23][353725746636484][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725746636484\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4698\"}'\'' -e'"" [2025-09-09 13:24:23][353725746636484][987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:24:23][353725746636484][988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725746636484\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4698\"}'\'' -e'"" [2025-09-09 13:24:27][353725746636484][4703 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e3c215b-f0c7-4d15-9949-50ee9257ab2f","id":"QR_4e3c215b-f0c7-4d15-9949-50ee9257ab2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:24:27][353725746636484][4860 ms][DEBUG] proc_open done in 3872 ms; code=255; res.len=3343 [2025-09-09 13:24:27][353725746636484][4860 ms][DEBUG] END runCmdUntilRes#1 in 3872 ms [2025-09-09 13:24:27][353725746636484][4860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:24:30][353725746636484][0 ms][INFO] === Request start === [2025-09-09 13:24:30][353725746636484][1 ms][DEBUG] START check_scloud [2025-09-09 13:24:30][353725746636484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:24:30][353725746636484][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 7554 5015 24234936 160164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:24:30][353725746636484][262 ms][DEBUG] targetPkg: running [2025-09-09 13:24:30][353725746636484][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 13:24:30][353725746636484][262 ms][DEBUG] START check_boot_completed [2025-09-09 13:24:30][353725746636484][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:24:30][353725746636484][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:24:30][353725746636484][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:24:30][353725746636484][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:24:30][353725746636484][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:24:30][353725746636484][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:24:30][353725746636484][511 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5817\nsuccessfulTxPacketsPerSecond: 0.11282438122728486\nretriedTxPackets: 1395\nretriedTxPacketsPerSecond: 0.03760812638916813\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5148\nsuccessfulRxPacketsPerSecond: 0.11282437916750437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:24:30][353725746636484][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:24:31][353725746636484][871 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.916/252.916/252.916/0.000 ms\n [2025-09-09 13:24:31][353725746636484][871 ms][DEBUG] check_internet: online [2025-09-09 13:24:31][353725746636484][871 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:24:31][353725746636484][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725746636484\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4632\"}'\'' -e'"" [2025-09-09 13:24:31][353725746636484][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:24:31][353725746636484][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725746636484\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4632\"}'\'' -e'"" [2025-09-09 13:24:35][353725746636484][5510 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6d403db-c8d8-4e79-af07-00956b3be9e9","id":"QR_d6d403db-c8d8-4e79-af07-00956b3be9e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:24:35][353725746636484][5666 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 13:24:35][353725746636484][5666 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 13:24:35][353725746636484][5666 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:26:03][351771924379085][0 ms][INFO] === Request start === [2025-09-09 13:26:03][351771924379085][1 ms][DEBUG] START check_scloud [2025-09-09 13:26:03][351771924379085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:26:04][351771924379085][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 7554 5015 24313876 171160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:26:04][351771924379085][303 ms][DEBUG] targetPkg: running [2025-09-09 13:26:04][351771924379085][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 13:26:04][351771924379085][303 ms][DEBUG] START check_boot_completed [2025-09-09 13:26:04][351771924379085][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:26:04][351771924379085][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:26:04][351771924379085][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:26:04][351771924379085][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:26:04][351771924379085][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:26:04][351771924379085][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:26:04][351771924379085][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6053\nsuccessfulTxPacketsPerSecond: 0.951935332935349\nretriedTxPackets: 1457\nretriedTxPacketsPerSecond: 0.25008470611013406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5351\nsuccessfulRxPacketsPerSecond: 0.8188257312960842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:26:04][351771924379085][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:26:04][351771924379085][974 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=364 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 364.669/364.669/364.669/0.000 ms\n [2025-09-09 13:26:04][351771924379085][975 ms][DEBUG] check_internet: online [2025-09-09 13:26:04][351771924379085][975 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:26:04][351771924379085][975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924379085\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6226\"}'\'' -e'"" [2025-09-09 13:26:04][351771924379085][975 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:26:04][351771924379085][975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924379085\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6226\"}'\'' -e'"" [2025-09-09 13:26:09][351771924379085][5364 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a835b19-1bf2-46c8-9097-ae6dc866648d","id":"QR_7a835b19-1bf2-46c8-9097-ae6dc866648d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:26:09][351771924379085][5520 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-09 13:26:09][351771924379085][5520 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-09 13:26:09][351771924379085][5520 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:26:11][351771924379085][1 ms][INFO] === Request start === [2025-09-09 13:26:11][351771924379085][1 ms][DEBUG] START check_scloud [2025-09-09 13:26:11][351771924379085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:26:11][351771924379085][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 7554 5015 24495260 182948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:26:11][351771924379085][267 ms][DEBUG] targetPkg: running [2025-09-09 13:26:11][351771924379085][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-09 13:26:11][351771924379085][267 ms][DEBUG] START check_boot_completed [2025-09-09 13:26:11][351771924379085][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:26:11][351771924379085][298 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 13:26:11][351771924379085][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:26:11][351771924379085][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:26:11][351771924379085][345 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 13:26:11][351771924379085][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:26:12][351771924379085][470 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6053\nsuccessfulTxPacketsPerSecond: 0.951935332935349\nretriedTxPackets: 1457\nretriedTxPacketsPerSecond: 0.25008470611013406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5351\nsuccessfulRxPacketsPerSecond: 0.8188257312960842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:26:12][351771924379085][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:26:12][351771924379085][923 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.787/340.787/340.787/0.000 ms\n [2025-09-09 13:26:12][351771924379085][923 ms][DEBUG] check_internet: online [2025-09-09 13:26:12][351771924379085][923 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:26:12][351771924379085][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924379085\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6941\"}'\'' -e'"" [2025-09-09 13:26:12][351771924379085][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:26:12][351771924379085][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924379085\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6941\"}'\'' -e'"" [2025-09-09 13:26:17][351771924379085][5874 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7e04544-54a1-422a-bb5c-1584090e37d1","id":"QR_b7e04544-54a1-422a-bb5c-1584090e37d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:26:17][351771924379085][6031 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 13:26:17][351771924379085][6031 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 13:26:17][351771924379085][6031 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:28:03][350386303883895][0 ms][INFO] === Request start === [2025-09-09 13:28:03][350386303883895][1 ms][DEBUG] START check_scloud [2025-09-09 13:28:03][350386303883895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:28:04][350386303883895][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 7554 5015 24611164 194556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:28:04][350386303883895][320 ms][DEBUG] targetPkg: running [2025-09-09 13:28:04][350386303883895][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 13:28:04][350386303883895][320 ms][DEBUG] START check_boot_completed [2025-09-09 13:28:04][350386303883895][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:28:04][350386303883895][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:28:04][350386303883895][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:28:04][350386303883895][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:28:04][350386303883895][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:28:04][350386303883895][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:28:04][350386303883895][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6053\nsuccessfulTxPacketsPerSecond: 0.951935332935349\nretriedTxPackets: 1457\nretriedTxPacketsPerSecond: 0.25008470611013406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5351\nsuccessfulRxPacketsPerSecond: 0.8188257312960842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:28:04][350386303883895][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:28:04][350386303883895][945 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=331 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 331.375/331.375/331.375/0.000 ms\n [2025-09-09 13:28:04][350386303883895][945 ms][DEBUG] check_internet: online [2025-09-09 13:28:04][350386303883895][945 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:28:04][350386303883895][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386303883895\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4891\"}'\'' -e'"" [2025-09-09 13:28:04][350386303883895][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:28:04][350386303883895][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386303883895\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4891\"}'\'' -e'"" [2025-09-09 13:28:09][350386303883895][5459 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a79ac641-5d64-4921-b34c-31814fef15c4","id":"QR_a79ac641-5d64-4921-b34c-31814fef15c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:28:09][350386303883895][5615 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-09 13:28:09][350386303883895][5615 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-09 13:28:09][350386303883895][5615 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:28:11][350386303883895][0 ms][INFO] === Request start === [2025-09-09 13:28:11][350386303883895][1 ms][DEBUG] START check_scloud [2025-09-09 13:28:11][350386303883895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:28:12][350386303883895][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 7554 5015 24741404 206416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:28:12][350386303883895][278 ms][DEBUG] targetPkg: running [2025-09-09 13:28:12][350386303883895][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 13:28:12][350386303883895][278 ms][DEBUG] START check_boot_completed [2025-09-09 13:28:12][350386303883895][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:28:12][350386303883895][325 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:28:12][350386303883895][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:28:12][350386303883895][373 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 13:28:12][350386303883895][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:28:12][350386303883895][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:28:12][350386303883895][512 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6053\nsuccessfulTxPacketsPerSecond: 0.951935332935349\nretriedTxPackets: 1457\nretriedTxPacketsPerSecond: 0.25008470611013406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5351\nsuccessfulRxPacketsPerSecond: 0.8188257312960842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:28:12][350386303883895][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:28:12][350386303883895][919 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.776/304.776/304.776/0.000 ms\n [2025-09-09 13:28:12][350386303883895][919 ms][DEBUG] check_internet: online [2025-09-09 13:28:12][350386303883895][919 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:28:12][350386303883895][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386303883895\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5470\"}'\'' -e'"" [2025-09-09 13:28:12][350386303883895][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:28:12][350386303883895][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386303883895\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5470\"}'\'' -e'"" [2025-09-09 13:28:17][350386303883895][5855 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd365e25-d7e0-4432-9911-83ce8a01485d","id":"QR_fd365e25-d7e0-4432-9911-83ce8a01485d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:28:17][350386303883895][6011 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 13:28:17][350386303883895][6011 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 13:28:17][350386303883895][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:28:23][357120480861199][1 ms][INFO] === Request start === [2025-09-09 13:28:23][357120480861199][1 ms][DEBUG] START check_scloud [2025-09-09 13:28:23][357120480861199][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:28:23][357120480861199][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 7554 5015 24885148 217172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:28:23][357120480861199][296 ms][DEBUG] targetPkg: running [2025-09-09 13:28:23][357120480861199][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 13:28:23][357120480861199][296 ms][DEBUG] START check_boot_completed [2025-09-09 13:28:23][357120480861199][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:28:23][357120480861199][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:28:23][357120480861199][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:28:23][357120480861199][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:28:23][357120480861199][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:28:23][357120480861199][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:28:23][357120480861199][484 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6053\nsuccessfulTxPacketsPerSecond: 0.951935332935349\nretriedTxPackets: 1457\nretriedTxPacketsPerSecond: 0.25008470611013406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5351\nsuccessfulRxPacketsPerSecond: 0.8188257312960842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:28:23][357120480861199][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:28:24][357120480861199][1281 ms][DEBUG] SU: done in 797 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=408 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 408.285/408.285/408.285/0.000 ms\n [2025-09-09 13:28:24][357120480861199][1281 ms][DEBUG] check_internet: online [2025-09-09 13:28:24][357120480861199][1281 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:28:24][357120480861199][1281 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357120480861199\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2347\"}'\'' -e'"" [2025-09-09 13:28:24][357120480861199][1281 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:28:24][357120480861199][1281 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357120480861199\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2347\"}'\'' -e'"" [2025-09-09 13:28:29][357120480861199][5920 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1c7daa1-0fed-4f0b-808d-e96aaeac08bd","id":"QR_a1c7daa1-0fed-4f0b-808d-e96aaeac08bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:28:29][357120480861199][6076 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 13:28:29][357120480861199][6076 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 13:28:29][357120480861199][6076 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:28:32][357120480861199][0 ms][INFO] === Request start === [2025-09-09 13:28:32][357120480861199][1 ms][DEBUG] START check_scloud [2025-09-09 13:28:32][357120480861199][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:28:32][357120480861199][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 7554 5015 25048196 229296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:28:32][357120480861199][307 ms][DEBUG] targetPkg: running [2025-09-09 13:28:32][357120480861199][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 13:28:32][357120480861199][308 ms][DEBUG] START check_boot_completed [2025-09-09 13:28:32][357120480861199][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:28:33][357120480861199][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:28:33][357120480861199][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:28:33][357120480861199][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:28:33][357120480861199][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:28:33][357120480861199][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:28:33][357120480861199][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6053\nsuccessfulTxPacketsPerSecond: 0.951935332935349\nretriedTxPackets: 1457\nretriedTxPacketsPerSecond: 0.25008470611013406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5351\nsuccessfulRxPacketsPerSecond: 0.8188257312960842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:28:33][357120480861199][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:28:33][357120480861199][948 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=339 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 339.944/339.944/339.944/0.000 ms\n [2025-09-09 13:28:33][357120480861199][948 ms][DEBUG] check_internet: online [2025-09-09 13:28:33][357120480861199][948 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:28:33][357120480861199][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357120480861199\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4520\"}'\'' -e'"" [2025-09-09 13:28:33][357120480861199][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:28:33][357120480861199][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357120480861199\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4520\"}'\'' -e'"" [2025-09-09 13:28:36][357120480861199][4259 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb4bd214-e400-4ba2-b17b-d64b6557ec18","id":"QR_cb4bd214-e400-4ba2-b17b-d64b6557ec18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:28:37][357120480861199][4416 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 13:28:37][357120480861199][4416 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 13:28:37][357120480861199][4416 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:29:03][350013884378729][1 ms][INFO] === Request start === [2025-09-09 13:29:03][350013884378729][1 ms][DEBUG] START check_scloud [2025-09-09 13:29:03][350013884378729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:29:03][350013884378729][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 7554 5015 25120928 240452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:29:03][350013884378729][257 ms][DEBUG] targetPkg: running [2025-09-09 13:29:03][350013884378729][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 13:29:03][350013884378729][257 ms][DEBUG] START check_boot_completed [2025-09-09 13:29:03][350013884378729][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:29:03][350013884378729][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:29:03][350013884378729][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:29:03][350013884378729][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:29:03][350013884378729][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:29:03][350013884378729][335 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:29:03][350013884378729][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7283\"}'\'' -e'"" [2025-09-09 13:29:03][350013884378729][335 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:29:03][350013884378729][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7283\"}'\'' -e'"" [2025-09-09 13:29:07][350013884378729][4006 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 13:29:07][350013884378729][4006 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 13:29:07][350013884378729][4006 ms][WARN] Detected error: Process with pid 7554 either refused to load frida-agent, or terminated during injectionProcess with pid 7554 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:29:07][350013884378729][4006 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:29:07][350013884378729][4256 ms][DEBUG] SU: done in 250 ms; outsystem 5433 5015 13032024 199244 ep_poll 0 S system_server\n [2025-09-09 13:29:07][350013884378729][4256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:29:07][350013884378729][4397 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 13:29:07][350013884378729][4397 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:29:07][350013884378729][4397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:29:07][350013884378729][4537 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 13:29:07][350013884378729][4537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:29:08][350013884378729][4787 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:29:10][350013884378729][6802 ms][DEBUG] START check_boot_completed [2025-09-09 13:29:10][350013884378729][6802 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:29:10][350013884378729][6849 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:29:10][350013884378729][6849 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:29:10][350013884378729][6943 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 13:29:10][350013884378729][6943 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 13:29:13][350013884378729][9958 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:29:13][350013884378729][9958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7283\"}'\'' -e'"" [2025-09-09 13:29:16][350013884378729][13144 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-09 13:29:16][350013884378729][13301 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=93 [2025-09-09 13:29:16][350013884378729][13301 ms][DEBUG] END runCmdUntilRes#2 in 3343 ms [2025-09-09 13:29:16][350013884378729][13301 ms][INFO] SUCCESS response from frida (len=93) [2025-09-09 13:29:16][][0 ms][INFO] === Request start === [2025-09-09 13:29:16][][1 ms][DEBUG] START check_scloud [2025-09-09 13:29:16][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:29:17][][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 9513 5015 23781924 122876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:29:17][][286 ms][DEBUG] targetPkg: running [2025-09-09 13:29:17][][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-09 13:29:17][][286 ms][DEBUG] START check_boot_completed [2025-09-09 13:29:17][][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:29:17][][332 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:29:17][][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:29:17][][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:29:17][][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:29:17][][395 ms][DEBUG] rawBody.length=1131 [2025-09-09 13:29:17][][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2473\"}'\'' -e'"" [2025-09-09 13:29:17][][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:29:17][][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2473\"}'\'' -e'"" [2025-09-09 13:29:20][][3456 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-09 13:29:20][][3613 ms][DEBUG] proc_open done in 3218 ms; code=255; res.len=95 [2025-09-09 13:29:20][][3613 ms][DEBUG] END runCmdUntilRes#1 in 3218 ms [2025-09-09 13:29:20][][3613 ms][INFO] SUCCESS response from frida (len=95) [2025-09-09 13:29:22][350013884378729][0 ms][INFO] === Request start === [2025-09-09 13:29:22][350013884378729][1 ms][DEBUG] START check_scloud [2025-09-09 13:29:22][350013884378729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:29:22][350013884378729][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 9513 5015 23955052 134444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:29:22][350013884378729][251 ms][DEBUG] targetPkg: running [2025-09-09 13:29:22][350013884378729][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 13:29:22][350013884378729][251 ms][DEBUG] START check_boot_completed [2025-09-09 13:29:22][350013884378729][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:29:22][350013884378729][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:29:22][350013884378729][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:29:22][350013884378729][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:29:22][350013884378729][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:29:22][350013884378729][344 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:29:22][350013884378729][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9556\"}'\'' -e'"" [2025-09-09 13:29:22][350013884378729][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:29:22][350013884378729][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884378729\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9556\"}'\'' -e'"" [2025-09-09 13:29:26][350013884378729][4109 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 13:29:26][350013884378729][4265 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=115 [2025-09-09 13:29:26][350013884378729][4265 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-09 13:29:26][350013884378729][4265 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 13:29:26][][0 ms][INFO] === Request start === [2025-09-09 13:29:26][][1 ms][DEBUG] START check_scloud [2025-09-09 13:29:26][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:29:26][][252 ms][DEBUG] SU: done in 252 ms; outu0_a118 9513 5015 24112896 147636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:29:26][][253 ms][DEBUG] targetPkg: running [2025-09-09 13:29:26][][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-09 13:29:26][][253 ms][DEBUG] START check_boot_completed [2025-09-09 13:29:26][][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:29:26][][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:29:26][][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:29:26][][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:29:26][][346 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:29:26][][346 ms][DEBUG] rawBody.length=1141 [2025-09-09 13:29:26][][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3373\"}'\'' -e'"" [2025-09-09 13:29:26][][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:29:26][][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58TC09K6DY\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3373\"}'\'' -e'"" [2025-09-09 13:29:30][][4001 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 13:29:30][][4158 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=115 [2025-09-09 13:29:30][][4158 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-09 13:29:30][][4158 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 13:29:32][352432792016924][0 ms][INFO] === Request start === [2025-09-09 13:29:32][352432792016924][1 ms][DEBUG] START check_scloud [2025-09-09 13:29:32][352432792016924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:29:32][352432792016924][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 9513 5015 24263204 159144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:29:32][352432792016924][318 ms][DEBUG] targetPkg: running [2025-09-09 13:29:32][352432792016924][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 13:29:32][352432792016924][318 ms][DEBUG] START check_boot_completed [2025-09-09 13:29:32][352432792016924][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:29:32][352432792016924][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:29:32][352432792016924][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:29:32][352432792016924][458 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 13:29:32][352432792016924][458 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 13:29:32][352432792016924][458 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:29:32][352432792016924][458 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792016924\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2495\"}'\'' -e'"" [2025-09-09 13:29:32][352432792016924][458 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:29:32][352432792016924][458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792016924\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2495\"}'\'' -e'"" [2025-09-09 13:29:36][352432792016924][3801 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8109d631-83ee-4252-9b82-af4562a82e18","id":"QR_8109d631-83ee-4252-9b82-af4562a82e18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:29:36][352432792016924][3957 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 13:29:36][352432792016924][3957 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 13:29:36][352432792016924][3957 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:29:38][352432792016924][0 ms][INFO] === Request start === [2025-09-09 13:29:38][352432792016924][1 ms][DEBUG] START check_scloud [2025-09-09 13:29:38][352432792016924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:29:38][352432792016924][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 9513 5015 24387208 171000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:29:38][352432792016924][258 ms][DEBUG] targetPkg: running [2025-09-09 13:29:38][352432792016924][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 13:29:38][352432792016924][259 ms][DEBUG] START check_boot_completed [2025-09-09 13:29:38][352432792016924][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:29:38][352432792016924][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:29:38][352432792016924][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:29:39][352432792016924][368 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:29:39][352432792016924][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:29:39][352432792016924][368 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:29:39][352432792016924][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792016924\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7488\"}'\'' -e'"" [2025-09-09 13:29:39][352432792016924][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:29:39][352432792016924][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792016924\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7488\"}'\'' -e'"" [2025-09-09 13:29:43][352432792016924][5351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_875e1291-6223-494a-a4b8-2b062fc6d049","id":"QR_875e1291-6223-494a-a4b8-2b062fc6d049","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:29:44][352432792016924][5507 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-09 13:29:44][352432792016924][5507 ms][DEBUG] END runCmdUntilRes#1 in 5140 ms [2025-09-09 13:29:44][352432792016924][5507 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:30:04][352192669448523][0 ms][INFO] === Request start === [2025-09-09 13:30:04][352192669448523][1 ms][DEBUG] START check_scloud [2025-09-09 13:30:04][352192669448523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:30:04][352192669448523][261 ms][DEBUG] SU: done in 261 ms; outu0_a118 9513 5015 24416528 183276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:30:04][352192669448523][261 ms][DEBUG] targetPkg: running [2025-09-09 13:30:04][352192669448523][261 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 13:30:04][352192669448523][261 ms][DEBUG] START check_boot_completed [2025-09-09 13:30:04][352192669448523][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:30:04][352192669448523][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:30:04][352192669448523][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:30:04][352192669448523][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:30:04][352192669448523][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:30:04][352192669448523][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:30:04][352192669448523][511 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6535\nsuccessfulTxPacketsPerSecond: 1.6560159417302274\nretriedTxPackets: 1536\nretriedTxPacketsPerSecond: 0.27142169999312854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5869\nsuccessfulRxPacketsPerSecond: 1.7797017797017798\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:30:04][352192669448523][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:30:05][352192669448523][980 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=331 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 331.957/331.957/331.957/0.000 ms\n [2025-09-09 13:30:05][352192669448523][980 ms][DEBUG] check_internet: online [2025-09-09 13:30:05][352192669448523][980 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:30:05][352192669448523][980 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669448523\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9035\"}'\'' -e'"" [2025-09-09 13:30:05][352192669448523][980 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:30:05][352192669448523][980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669448523\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9035\"}'\'' -e'"" [2025-09-09 13:30:08][352192669448523][4307 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4fb5ff0-d11c-4bd0-a166-85b4c19f45c8","id":"QR_f4fb5ff0-d11c-4bd0-a166-85b4c19f45c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:30:08][352192669448523][4463 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 13:30:08][352192669448523][4463 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 13:30:08][352192669448523][4463 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:30:11][352192669448523][0 ms][INFO] === Request start === [2025-09-09 13:30:11][352192669448523][1 ms][DEBUG] START check_scloud [2025-09-09 13:30:11][352192669448523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:30:11][352192669448523][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 9513 5015 24569368 194436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:30:11][352192669448523][314 ms][DEBUG] targetPkg: running [2025-09-09 13:30:11][352192669448523][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 13:30:11][352192669448523][314 ms][DEBUG] START check_boot_completed [2025-09-09 13:30:11][352192669448523][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:30:11][352192669448523][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:30:11][352192669448523][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:30:11][352192669448523][407 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:30:11][352192669448523][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:30:11][352192669448523][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:30:11][352192669448523][548 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6535\nsuccessfulTxPacketsPerSecond: 1.6560159417302274\nretriedTxPackets: 1536\nretriedTxPacketsPerSecond: 0.27142169999312854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5869\nsuccessfulRxPacketsPerSecond: 1.7797017797017798\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:30:11][352192669448523][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:30:12][352192669448523][954 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.705/318.705/318.705/0.000 ms\n [2025-09-09 13:30:12][352192669448523][954 ms][DEBUG] check_internet: online [2025-09-09 13:30:12][352192669448523][954 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:30:12][352192669448523][954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669448523\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3286\"}'\'' -e'"" [2025-09-09 13:30:12][352192669448523][954 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:30:12][352192669448523][954 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669448523\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3286\"}'\'' -e'"" [2025-09-09 13:30:16][352192669448523][5500 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e95d8bbc-c60d-4940-8732-8e3d43458b8b","id":"QR_e95d8bbc-c60d-4940-8732-8e3d43458b8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:30:16][352192669448523][5656 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 13:30:16][352192669448523][5656 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 13:30:16][352192669448523][5656 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:33:03][352677531611720][1 ms][INFO] === Request start === [2025-09-09 13:33:03][352677531611720][1 ms][DEBUG] START check_scloud [2025-09-09 13:33:03][352677531611720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:33:04][352677531611720][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 9513 5015 24638988 205436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:33:04][352677531611720][297 ms][DEBUG] targetPkg: running [2025-09-09 13:33:04][352677531611720][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 13:33:04][352677531611720][298 ms][DEBUG] START check_boot_completed [2025-09-09 13:33:04][352677531611720][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:33:04][352677531611720][342 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 13:33:04][352677531611720][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:33:04][352677531611720][390 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 13:33:04][352677531611720][390 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 13:33:04][352677531611720][390 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:33:04][352677531611720][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531611720\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6984\"}'\'' -e'"" [2025-09-09 13:33:04][352677531611720][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:33:04][352677531611720][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531611720\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6984\"}'\'' -e'"" [2025-09-09 13:33:08][352677531611720][4825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_336d1080-e130-45a6-9222-6afe4a950621","id":"QR_336d1080-e130-45a6-9222-6afe4a950621","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:33:08][352677531611720][4982 ms][DEBUG] proc_open done in 4591 ms; code=255; res.len=3343 [2025-09-09 13:33:08][352677531611720][4982 ms][DEBUG] END runCmdUntilRes#1 in 4591 ms [2025-09-09 13:33:08][352677531611720][4982 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:33:11][352677531611720][0 ms][INFO] === Request start === [2025-09-09 13:33:11][352677531611720][1 ms][DEBUG] START check_scloud [2025-09-09 13:33:11][352677531611720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:33:11][352677531611720][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 9513 5015 24788756 216200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:33:11][352677531611720][308 ms][DEBUG] targetPkg: running [2025-09-09 13:33:11][352677531611720][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 13:33:11][352677531611720][308 ms][DEBUG] START check_boot_completed [2025-09-09 13:33:11][352677531611720][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:33:11][352677531611720][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:33:11][352677531611720][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:33:11][352677531611720][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:33:11][352677531611720][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:33:11][352677531611720][402 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:33:11][352677531611720][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531611720\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9513\"}'\'' -e'"" [2025-09-09 13:33:11][352677531611720][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:33:11][352677531611720][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531611720\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9513\"}'\'' -e'"" [2025-09-09 13:33:17][352677531611720][5963 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b4bfce9-5080-42ad-9d46-a91416aa6630","id":"QR_8b4bfce9-5080-42ad-9d46-a91416aa6630","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:33:17][352677531611720][6119 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-09 13:33:17][352677531611720][6119 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-09 13:33:17][352677531611720][6119 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:34:03][351877474462732][0 ms][INFO] === Request start === [2025-09-09 13:34:03][351877474462732][1 ms][DEBUG] START check_scloud [2025-09-09 13:34:03][351877474462732][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:34:04][351877474462732][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 9513 5015 24931156 228648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:34:04][351877474462732][320 ms][DEBUG] targetPkg: running [2025-09-09 13:34:04][351877474462732][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 13:34:04][351877474462732][320 ms][DEBUG] START check_boot_completed [2025-09-09 13:34:04][351877474462732][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:34:04][351877474462732][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:34:04][351877474462732][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:34:04][351877474462732][460 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 13:34:04][351877474462732][460 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 13:34:04][351877474462732][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:34:04][351877474462732][585 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6535\nsuccessfulTxPacketsPerSecond: 1.6560159417302274\nretriedTxPackets: 1536\nretriedTxPacketsPerSecond: 0.27142169999312854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5869\nsuccessfulRxPacketsPerSecond: 1.7797017797017798\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:34:04][351877474462732][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:34:05][351877474462732][1944 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.088/300.088/300.088/0.000 ms\n [2025-09-09 13:34:05][351877474462732][1944 ms][DEBUG] check_internet: online [2025-09-09 13:34:05][351877474462732][1944 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:34:05][351877474462732][1944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474462732\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7657\"}'\'' -e'"" [2025-09-09 13:34:05][351877474462732][1945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:34:05][351877474462732][1945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474462732\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7657\"}'\'' -e'"" [2025-09-09 13:34:09][351877474462732][5537 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e3c1e81-49b4-4647-b34b-f6931b877283","id":"QR_0e3c1e81-49b4-4647-b34b-f6931b877283","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:34:09][351877474462732][5693 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-09-09 13:34:09][351877474462732][5693 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-09 13:34:09][351877474462732][5693 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:34:11][351877474462732][0 ms][INFO] === Request start === [2025-09-09 13:34:11][351877474462732][1 ms][DEBUG] START check_scloud [2025-09-09 13:34:11][351877474462732][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:34:12][351877474462732][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 9513 5015 25051228 240224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:34:12][351877474462732][296 ms][DEBUG] targetPkg: running [2025-09-09 13:34:12][351877474462732][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 13:34:12][351877474462732][297 ms][DEBUG] START check_boot_completed [2025-09-09 13:34:12][351877474462732][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:34:12][351877474462732][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:34:12][351877474462732][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:34:12][351877474462732][406 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:34:12][351877474462732][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:34:12][351877474462732][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:34:12][351877474462732][562 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6535\nsuccessfulTxPacketsPerSecond: 1.6560159417302274\nretriedTxPackets: 1536\nretriedTxPacketsPerSecond: 0.27142169999312854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5869\nsuccessfulRxPacketsPerSecond: 1.7797017797017798\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:34:12][351877474462732][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:34:12][351877474462732][984 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.791/310.791/310.791/0.000 ms\n [2025-09-09 13:34:12][351877474462732][984 ms][DEBUG] check_internet: online [2025-09-09 13:34:12][351877474462732][984 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:34:12][351877474462732][984 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474462732\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5341\"}'\'' -e'"" [2025-09-09 13:34:12][351877474462732][984 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:34:12][351877474462732][984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474462732\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5341\"}'\'' -e'"" [2025-09-09 13:34:16][351877474462732][4655 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 13:34:16][351877474462732][4655 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-09 13:34:16][351877474462732][4655 ms][WARN] Detected error: Process with pid 9513 either refused to load frida-agent, or terminated during injectionProcess with pid 9513 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:34:16][351877474462732][4655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:34:16][351877474462732][4937 ms][DEBUG] SU: done in 282 ms; outsystem 5433 5015 12951112 184848 ep_poll 0 S system_server\n [2025-09-09 13:34:16][351877474462732][4937 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:34:16][351877474462732][5092 ms][DEBUG] SU: done in 155 ms; out [2025-09-09 13:34:16][351877474462732][5092 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:34:16][351877474462732][5092 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:34:17][351877474462732][5217 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 13:34:17][351877474462732][5217 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:34:17][351877474462732][5389 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:34:19][351877474462732][7404 ms][DEBUG] START check_boot_completed [2025-09-09 13:34:19][351877474462732][7404 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:34:19][351877474462732][7451 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:34:19][351877474462732][7451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:34:19][351877474462732][7498 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:34:19][351877474462732][7498 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:34:22][351877474462732][10512 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:34:22][351877474462732][10513 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474462732\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5341\"}'\'' -e'"" [2025-09-09 13:34:27][351877474462732][15339 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1fa50f10-3f27-4441-a9f8-1cc809bb87ce","id":"QR_1fa50f10-3f27-4441-a9f8-1cc809bb87ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:34:27][351877474462732][15496 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-09 13:34:27][351877474462732][15496 ms][DEBUG] END runCmdUntilRes#2 in 4983 ms [2025-09-09 13:34:27][351877474462732][15496 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:36:03][355082591584502][1 ms][INFO] === Request start === [2025-09-09 13:36:03][355082591584502][1 ms][DEBUG] START check_scloud [2025-09-09 13:36:03][355082591584502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:36:04][355082591584502][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 11190 5015 23733144 126860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:36:04][355082591584502][307 ms][DEBUG] targetPkg: running [2025-09-09 13:36:04][355082591584502][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 13:36:04][355082591584502][307 ms][DEBUG] START check_boot_completed [2025-09-09 13:36:04][355082591584502][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:36:04][355082591584502][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:36:04][355082591584502][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:36:04][355082591584502][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:36:04][355082591584502][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:36:04][355082591584502][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:36:04][355082591584502][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6775\nsuccessfulTxPacketsPerSecond: 0.7974693638852708\nretriedTxPackets: 1606\nretriedTxPacketsPerSecond: 0.23259523113320396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6068\nsuccessfulRxPacketsPerSecond: 0.661235014221537\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:36:04][355082591584502][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:36:04][355082591584502][947 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.971/299.971/299.971/0.000 ms\n [2025-09-09 13:36:04][355082591584502][947 ms][DEBUG] check_internet: online [2025-09-09 13:36:04][355082591584502][947 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:36:04][355082591584502][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355082591584502\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2088\"}'\'' -e'"" [2025-09-09 13:36:04][355082591584502][947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:36:04][355082591584502][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355082591584502\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2088\"}'\'' -e'"" [2025-09-09 13:36:09][355082591584502][5243 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a580b932-0494-4026-817e-ecf2e6e93e01","id":"QR_a580b932-0494-4026-817e-ecf2e6e93e01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:36:09][355082591584502][5399 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-09 13:36:09][355082591584502][5399 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 13:36:09][355082591584502][5399 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:36:11][355082591584502][0 ms][INFO] === Request start === [2025-09-09 13:36:11][355082591584502][1 ms][DEBUG] START check_scloud [2025-09-09 13:36:11][355082591584502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:36:11][355082591584502][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 11190 5015 23873568 137400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:36:11][355082591584502][319 ms][DEBUG] targetPkg: running [2025-09-09 13:36:11][355082591584502][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 13:36:11][355082591584502][319 ms][DEBUG] START check_boot_completed [2025-09-09 13:36:11][355082591584502][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:36:11][355082591584502][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:36:11][355082591584502][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:36:11][355082591584502][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:36:11][355082591584502][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:36:11][355082591584502][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:36:12][355082591584502][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6775\nsuccessfulTxPacketsPerSecond: 0.7974693638852708\nretriedTxPackets: 1606\nretriedTxPacketsPerSecond: 0.23259523113320396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6068\nsuccessfulRxPacketsPerSecond: 0.661235014221537\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:36:12][355082591584502][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:36:12][355082591584502][991 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.617/336.617/336.617/0.000 ms\n [2025-09-09 13:36:12][355082591584502][991 ms][DEBUG] check_internet: online [2025-09-09 13:36:12][355082591584502][991 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:36:12][355082591584502][991 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355082591584502\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8977\"}'\'' -e'"" [2025-09-09 13:36:12][355082591584502][991 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:36:12][355082591584502][991 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355082591584502\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8977\"}'\'' -e'"" [2025-09-09 13:36:17][355082591584502][6037 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48236a2c-d268-4677-ab24-34ca85e049f5","id":"QR_48236a2c-d268-4677-ab24-34ca85e049f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:36:17][355082591584502][6193 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 13:36:17][355082591584502][6193 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 13:36:17][355082591584502][6193 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:36:21][350361082845738][0 ms][INFO] === Request start === [2025-09-09 13:36:21][350361082845738][1 ms][DEBUG] START check_scloud [2025-09-09 13:36:21][350361082845738][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:36:22][350361082845738][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 11190 5015 24014940 149296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:36:22][350361082845738][316 ms][DEBUG] targetPkg: running [2025-09-09 13:36:22][350361082845738][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 13:36:22][350361082845738][316 ms][DEBUG] START check_boot_completed [2025-09-09 13:36:22][350361082845738][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:36:22][350361082845738][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:36:22][350361082845738][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:36:22][350361082845738][411 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 13:36:22][350361082845738][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 13:36:22][350361082845738][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:36:22][350361082845738][551 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6775\nsuccessfulTxPacketsPerSecond: 0.7974693638852708\nretriedTxPackets: 1606\nretriedTxPacketsPerSecond: 0.23259523113320396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6068\nsuccessfulRxPacketsPerSecond: 0.661235014221537\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:36:22][350361082845738][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:36:22][350361082845738][987 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.858/288.858/288.858/0.000 ms\n [2025-09-09 13:36:22][350361082845738][987 ms][DEBUG] check_internet: online [2025-09-09 13:36:22][350361082845738][987 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:36:22][350361082845738][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082845738\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7683\"}'\'' -e'"" [2025-09-09 13:36:22][350361082845738][988 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:36:22][350361082845738][988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082845738\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7683\"}'\'' -e'"" [2025-09-09 13:36:26][350361082845738][4299 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b40d353-b441-4443-8df8-092c26ddfb48","id":"QR_2b40d353-b441-4443-8df8-092c26ddfb48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:36:26][350361082845738][4455 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 13:36:26][350361082845738][4455 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 13:36:26][350361082845738][4455 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:36:28][350361082845738][0 ms][INFO] === Request start === [2025-09-09 13:36:28][350361082845738][1 ms][DEBUG] START check_scloud [2025-09-09 13:36:28][350361082845738][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:36:29][350361082845738][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 11190 5015 24146944 160228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:36:29][350361082845738][297 ms][DEBUG] targetPkg: running [2025-09-09 13:36:29][350361082845738][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 13:36:29][350361082845738][297 ms][DEBUG] START check_boot_completed [2025-09-09 13:36:29][350361082845738][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:36:29][350361082845738][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:36:29][350361082845738][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:36:29][350361082845738][422 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 13:36:29][350361082845738][422 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 13:36:29][350361082845738][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:36:29][350361082845738][578 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6775\nsuccessfulTxPacketsPerSecond: 0.7974693638852708\nretriedTxPackets: 1606\nretriedTxPacketsPerSecond: 0.23259523113320396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6068\nsuccessfulRxPacketsPerSecond: 0.661235014221537\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:36:29][350361082845738][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:36:29][350361082845738][984 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.619/254.619/254.619/0.000 ms\n [2025-09-09 13:36:29][350361082845738][985 ms][DEBUG] check_internet: online [2025-09-09 13:36:29][350361082845738][985 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:36:29][350361082845738][985 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082845738\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2808\"}'\'' -e'"" [2025-09-09 13:36:29][350361082845738][985 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:36:29][350361082845738][985 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082845738\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2808\"}'\'' -e'"" [2025-09-09 13:36:34][350361082845738][6077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0271fe92-e34c-4041-9545-b158f872e9be","id":"QR_0271fe92-e34c-4041-9545-b158f872e9be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:36:34][350361082845738][6233 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-09 13:36:34][350361082845738][6233 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-09 13:36:34][350361082845738][6233 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:37:03][355680653951541][0 ms][INFO] === Request start === [2025-09-09 13:37:03][355680653951541][1 ms][DEBUG] START check_scloud [2025-09-09 13:37:03][355680653951541][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:37:03][355680653951541][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 11190 5015 24232860 172048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:37:03][355680653951541][305 ms][DEBUG] targetPkg: running [2025-09-09 13:37:03][355680653951541][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 13:37:03][355680653951541][306 ms][DEBUG] START check_boot_completed [2025-09-09 13:37:03][355680653951541][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:37:03][355680653951541][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:37:03][355680653951541][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:37:03][355680653951541][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:37:03][355680653951541][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:37:03][355680653951541][383 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:37:03][355680653951541][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680653951541\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7471\"}'\'' -e'"" [2025-09-09 13:37:03][355680653951541][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:37:03][355680653951541][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680653951541\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7471\"}'\'' -e'"" [2025-09-09 13:37:07][355680653951541][3758 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed2a67ad-0a40-4f72-b887-940cc96efedf","id":"QR_ed2a67ad-0a40-4f72-b887-940cc96efedf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:37:07][355680653951541][3914 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 13:37:07][355680653951541][3914 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 13:37:07][355680653951541][3914 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:37:09][351081870049686][0 ms][INFO] === Request start === [2025-09-09 13:37:09][351081870049686][1 ms][DEBUG] START check_scloud [2025-09-09 13:37:09][351081870049686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:37:09][351081870049686][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11190 5015 24379556 182844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:37:09][351081870049686][313 ms][DEBUG] targetPkg: running [2025-09-09 13:37:09][351081870049686][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 13:37:09][351081870049686][313 ms][DEBUG] START check_boot_completed [2025-09-09 13:37:09][351081870049686][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:37:09][351081870049686][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:37:09][351081870049686][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:37:09][351081870049686][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:37:09][351081870049686][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:37:09][351081870049686][422 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:37:09][351081870049686][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351081870049686\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6062\"}'\'' -e'"" [2025-09-09 13:37:09][351081870049686][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:37:09][351081870049686][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351081870049686\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6062\"}'\'' -e'"" [2025-09-09 13:37:14][351081870049686][5202 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8794a20c-0ff2-416b-895c-bf7e29ba9fbb","id":"QR_8794a20c-0ff2-416b-895c-bf7e29ba9fbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:37:14][351081870049686][5358 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-09 13:37:14][351081870049686][5358 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-09 13:37:14][351081870049686][5358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:37:18][352693795929724][0 ms][INFO] === Request start === [2025-09-09 13:37:18][352693795929724][1 ms][DEBUG] START check_scloud [2025-09-09 13:37:18][352693795929724][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:37:18][352693795929724][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 11190 5015 24523948 194512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:37:18][352693795929724][292 ms][DEBUG] targetPkg: running [2025-09-09 13:37:18][352693795929724][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 13:37:18][352693795929724][292 ms][DEBUG] START check_boot_completed [2025-09-09 13:37:18][352693795929724][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:37:18][352693795929724][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:37:18][352693795929724][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:37:18][352693795929724][385 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:37:18][352693795929724][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:37:18][352693795929724][386 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:37:18][352693795929724][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693795929724\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7554\"}'\'' -e'"" [2025-09-09 13:37:18][352693795929724][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:37:18][352693795929724][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693795929724\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7554\"}'\'' -e'"" [2025-09-09 13:37:23][352693795929724][5400 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0cd14f6-3c84-4468-8892-d3d37ce4bad5","id":"QR_d0cd14f6-3c84-4468-8892-d3d37ce4bad5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:37:23][352693795929724][5556 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-09 13:37:23][352693795929724][5556 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-09 13:37:23][352693795929724][5556 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:37:29][352177396347569][0 ms][INFO] === Request start === [2025-09-09 13:37:29][352177396347569][1 ms][DEBUG] START check_scloud [2025-09-09 13:37:29][352177396347569][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:37:29][352177396347569][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11190 5015 24686352 205476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:37:29][352177396347569][313 ms][DEBUG] targetPkg: running [2025-09-09 13:37:29][352177396347569][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 13:37:29][352177396347569][313 ms][DEBUG] START check_boot_completed [2025-09-09 13:37:29][352177396347569][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:37:29][352177396347569][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:37:29][352177396347569][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:37:29][352177396347569][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:37:29][352177396347569][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:37:29][352177396347569][391 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:37:29][352177396347569][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396347569\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6697\"}'\'' -e'"" [2025-09-09 13:37:29][352177396347569][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:37:29][352177396347569][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396347569\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6697\"}'\'' -e'"" [2025-09-09 13:37:34][352177396347569][5030 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79523dc6-3d6a-44aa-8ac1-f8e96008116c","id":"QR_79523dc6-3d6a-44aa-8ac1-f8e96008116c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:37:34][352177396347569][5187 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-09 13:37:34][352177396347569][5187 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-09 13:37:34][352177396347569][5187 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:38:03][350042735203844][0 ms][INFO] === Request start === [2025-09-09 13:38:03][350042735203844][1 ms][DEBUG] START check_scloud [2025-09-09 13:38:03][350042735203844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:38:03][350042735203844][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 11190 5015 24798124 217648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:38:03][350042735203844][312 ms][DEBUG] targetPkg: running [2025-09-09 13:38:03][350042735203844][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 13:38:03][350042735203844][312 ms][DEBUG] START check_boot_completed [2025-09-09 13:38:03][350042735203844][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:38:03][350042735203844][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:38:03][350042735203844][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:38:03][350042735203844][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:38:03][350042735203844][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:38:03][350042735203844][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:38:03][350042735203844][562 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6775\nsuccessfulTxPacketsPerSecond: 0.7974693638852708\nretriedTxPackets: 1606\nretriedTxPacketsPerSecond: 0.23259523113320396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6068\nsuccessfulRxPacketsPerSecond: 0.661235014221537\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:38:03][350042735203844][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:38:03][350042735203844][968 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.995/294.995/294.995/0.000 ms\n [2025-09-09 13:38:03][350042735203844][968 ms][DEBUG] check_internet: online [2025-09-09 13:38:03][350042735203844][968 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:38:03][350042735203844][968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042735203844\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9559\"}'\'' -e'"" [2025-09-09 13:38:03][350042735203844][968 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:38:03][350042735203844][968 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042735203844\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9559\"}'\'' -e'"" [2025-09-09 13:38:07][350042735203844][4357 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e05c1c6-fdb4-428c-9dea-c793b5ad6e31","id":"QR_6e05c1c6-fdb4-428c-9dea-c793b5ad6e31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:38:07][350042735203844][4513 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-09 13:38:07][350042735203844][4514 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-09-09 13:38:07][350042735203844][4514 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:38:09][350042735203844][1 ms][INFO] === Request start === [2025-09-09 13:38:09][350042735203844][1 ms][DEBUG] START check_scloud [2025-09-09 13:38:09][350042735203844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:38:10][350042735203844][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 11190 5015 24979444 228736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:38:10][350042735203844][289 ms][DEBUG] targetPkg: running [2025-09-09 13:38:10][350042735203844][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 13:38:10][350042735203844][289 ms][DEBUG] START check_boot_completed [2025-09-09 13:38:10][350042735203844][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:38:10][350042735203844][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:38:10][350042735203844][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:38:10][350042735203844][398 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:38:10][350042735203844][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:38:10][350042735203844][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:38:10][350042735203844][523 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6775\nsuccessfulTxPacketsPerSecond: 0.7974693638852708\nretriedTxPackets: 1606\nretriedTxPacketsPerSecond: 0.23259523113320396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6068\nsuccessfulRxPacketsPerSecond: 0.661235014221537\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:38:10][350042735203844][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:38:10][350042735203844][851 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.968/223.968/223.968/0.000 ms\n [2025-09-09 13:38:10][350042735203844][851 ms][DEBUG] check_internet: online [2025-09-09 13:38:10][350042735203844][851 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:38:10][350042735203844][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042735203844\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-09-09 13:38:10][350042735203844][851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:38:10][350042735203844][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042735203844\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-09-09 13:38:15][350042735203844][5646 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e021b73f-c2d3-4dab-97ad-28c0dacb3e73","id":"QR_e021b73f-c2d3-4dab-97ad-28c0dacb3e73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:38:15][350042735203844][5803 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-09 13:38:15][350042735203844][5803 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-09 13:38:15][350042735203844][5803 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:38:19][350110412421078][0 ms][INFO] === Request start === [2025-09-09 13:38:19][350110412421078][1 ms][DEBUG] START check_scloud [2025-09-09 13:38:19][350110412421078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:38:20][350110412421078][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 11190 5015 25140476 240580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:38:20][350110412421078][322 ms][DEBUG] targetPkg: running [2025-09-09 13:38:20][350110412421078][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 13:38:20][350110412421078][323 ms][DEBUG] START check_boot_completed [2025-09-09 13:38:20][350110412421078][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:38:20][350110412421078][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:38:20][350110412421078][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:38:20][350110412421078][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:38:20][350110412421078][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:38:20][350110412421078][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:38:20][350110412421078][509 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30384 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6775\nsuccessfulTxPacketsPerSecond: 0.7974693638852708\nretriedTxPackets: 1606\nretriedTxPacketsPerSecond: 0.23259523113320396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6068\nsuccessfulRxPacketsPerSecond: 0.661235014221537\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:38:20][350110412421078][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:38:20][350110412421078][900 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.926/300.926/300.926/0.000 ms\n [2025-09-09 13:38:20][350110412421078][900 ms][DEBUG] check_internet: online [2025-09-09 13:38:20][350110412421078][900 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:38:20][350110412421078][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110412421078\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3969\"}'\'' -e'"" [2025-09-09 13:38:20][350110412421078][900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:38:20][350110412421078][900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110412421078\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3969\"}'\'' -e'"" [2025-09-09 13:38:28][350110412421078][8695 ms][DEBUG] proc_open done in 7795 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 13:38:28][350110412421078][8695 ms][DEBUG] END runCmdUntilRes#1 in 7795 ms [2025-09-09 13:38:28][350110412421078][8695 ms][WARN] Detected error: Process with pid 11190 either refused to load frida-agent, or terminated during injectionProcess with pid 11190 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:38:28][350110412421078][8695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:38:28][350110412421078][9086 ms][DEBUG] SU: done in 391 ms; out [2025-09-09 13:38:28][350110412421078][9086 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:38:29][350110412421078][9352 ms][DEBUG] SU: done in 266 ms; out [2025-09-09 13:38:29][350110412421078][9352 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:38:29][350110412421078][9352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:38:29][350110412421078][9820 ms][DEBUG] SU: done in 468 ms; out [2025-09-09 13:38:29][350110412421078][9820 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:38:29][350110412421078][9992 ms][DEBUG] SU: done in 172 ms; out [2025-09-09 13:38:31][350110412421078][12007 ms][DEBUG] START check_boot_completed [2025-09-09 13:38:31][350110412421078][12007 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:38:31][350110412421078][12054 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:38:31][350110412421078][12054 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:38:32][350110412421078][12116 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:38:32][350110412421078][12116 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:38:35][350110412421078][15131 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:38:35][350110412421078][15131 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110412421078\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3969\"}'\'' -e'"" [2025-09-09 13:38:36][350110412421078][16725 ms][DEBUG] proc_open done in 1594 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 13:38:36][350110412421078][16725 ms][DEBUG] END runCmdUntilRes#2 in 1594 ms [2025-09-09 13:38:36][350110412421078][16725 ms][WARN] Detected error 2; Reboot the device [2025-09-09 13:38:36][350110412421078][16725 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:38:36][350110412421078][16990 ms][DEBUG] SU: done in 266 ms; outsystem 13088 12746 7031600 111428 wait_on_page_bit_common 0 R system_server\n [2025-09-09 13:38:36][350110412421078][16991 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 13:38:37][350110412421078][17646 ms][DEBUG] SU: done in 655 ms; out [2025-09-09 13:39:03][350110412421078][0 ms][INFO] === Request start === [2025-09-09 13:39:03][350110412421078][1 ms][DEBUG] START check_scloud [2025-09-09 13:39:03][350110412421078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:39:03][350110412421078][46 ms][DEBUG] SU: done in 45 ms; out [2025-09-09 13:39:03][350110412421078][46 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 13:39:03][350110412421078][77 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 13:39:03][350110412421078][77 ms][WARN] check_devices: no device [2025-09-09 13:39:03][350110412421078][77 ms][WARN] check_devices: no device [2025-09-09 13:39:03][350110412421078][77 ms][DEBUG] END check_scloud in 76 ms [2025-09-09 13:39:07][350212144024525][0 ms][INFO] === Request start === [2025-09-09 13:39:07][350212144024525][1 ms][DEBUG] START check_scloud [2025-09-09 13:39:07][350212144024525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:39:07][350212144024525][42 ms][DEBUG] SU: done in 41 ms; out [2025-09-09 13:39:07][350212144024525][42 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 13:39:07][350212144024525][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 13:39:07][350212144024525][74 ms][WARN] check_devices: no device [2025-09-09 13:39:07][350212144024525][74 ms][WARN] check_devices: no device [2025-09-09 13:39:07][350212144024525][74 ms][DEBUG] END check_scloud in 73 ms [2025-09-09 13:39:10][353029495451165][0 ms][INFO] === Request start === [2025-09-09 13:39:10][353029495451165][1 ms][DEBUG] START check_scloud [2025-09-09 13:39:10][353029495451165][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:39:10][353029495451165][41 ms][DEBUG] SU: done in 40 ms; out [2025-09-09 13:39:10][353029495451165][41 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 13:39:10][353029495451165][72 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 13:39:10][353029495451165][72 ms][WARN] check_devices: no device [2025-09-09 13:39:10][353029495451165][72 ms][WARN] check_devices: no device [2025-09-09 13:39:10][353029495451165][72 ms][DEBUG] END check_scloud in 71 ms [2025-09-09 13:40:03][350110412421078][0 ms][INFO] === Request start === [2025-09-09 13:40:03][350110412421078][1 ms][DEBUG] START check_scloud [2025-09-09 13:40:03][350110412421078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:40:04][350110412421078][363 ms][DEBUG] SU: done in 362 ms; out [2025-09-09 13:40:04][350110412421078][363 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 13:40:04][350110412421078][409 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 13:40:04][350110412421078][409 ms][DEBUG] check_devices: device found [2025-09-09 13:40:04][350110412421078][409 ms][WARN] targetPkg: not running, restarting [2025-09-09 13:40:04][350110412421078][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:40:04][350110412421078][550 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 13:40:04][350110412421078][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:40:04][350110412421078][816 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:40:06][350110412421078][2831 ms][DEBUG] END check_scloud in 2830 ms [2025-09-09 13:40:06][350110412421078][2831 ms][DEBUG] START check_boot_completed [2025-09-09 13:40:06][350110412421078][2831 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:40:06][350110412421078][2878 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:40:06][350110412421078][2878 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:40:06][350110412421078][2940 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:40:06][350110412421078][2940 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 13:40:06][350110412421078][2940 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:40:06][350110412421078][3128 ms][DEBUG] SU: done in 187 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 189\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 13\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 177\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:40:06][350110412421078][3128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:40:07][350110412421078][3862 ms][DEBUG] SU: done in 734 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.337/215.337/215.337/0.000 ms\n [2025-09-09 13:40:07][350110412421078][3862 ms][DEBUG] check_internet: online [2025-09-09 13:40:07][350110412421078][3862 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:40:07][350110412421078][3862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110412421078\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9620\"}'\'' -e'"" [2025-09-09 13:40:07][350110412421078][3862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:40:07][350110412421078][3862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110412421078\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9620\"}'\'' -e'"" [2025-09-09 13:40:13][350110412421078][9517 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 13:40:13][350110412421078][9673 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=115 [2025-09-09 13:40:13][350110412421078][9673 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-09 13:40:13][350110412421078][9673 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 13:40:13][][1 ms][INFO] === Request start === [2025-09-09 13:40:13][][1 ms][DEBUG] START check_scloud [2025-09-09 13:40:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:40:13][][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 10124 4971 23476772 120292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:40:13][][325 ms][DEBUG] targetPkg: running [2025-09-09 13:40:13][][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 13:40:13][][326 ms][DEBUG] START check_boot_completed [2025-09-09 13:40:13][][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:40:13][][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:40:13][][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:40:14][][435 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:40:14][][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:40:14][][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:40:14][][559 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 189\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 13\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 177\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:40:14][][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:40:14][][919 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.233/222.233/222.233/0.000 ms\n [2025-09-09 13:40:14][][919 ms][DEBUG] check_internet: online [2025-09-09 13:40:14][][919 ms][DEBUG] rawBody.length=1131 [2025-09-09 13:40:14][][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8R40XFX5B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4297\"}'\'' -e'"" [2025-09-09 13:40:14][][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:40:14][][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8R40XFX5B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4297\"}'\'' -e'"" [2025-09-09 13:40:17][][4293 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 13:40:18][][4449 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=115 [2025-09-09 13:40:18][][4449 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 13:40:18][][4449 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 13:40:19][350110412421078][0 ms][INFO] === Request start === [2025-09-09 13:40:19][350110412421078][1 ms][DEBUG] START check_scloud [2025-09-09 13:40:19][350110412421078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:40:20][350110412421078][346 ms][DEBUG] SU: done in 345 ms; outu0_a118 10124 4971 23610056 110684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:40:20][350110412421078][346 ms][DEBUG] targetPkg: running [2025-09-09 13:40:20][350110412421078][346 ms][DEBUG] END check_scloud in 345 ms [2025-09-09 13:40:20][350110412421078][346 ms][DEBUG] START check_boot_completed [2025-09-09 13:40:20][350110412421078][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:40:20][350110412421078][392 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:40:20][350110412421078][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:40:20][350110412421078][455 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:40:20][350110412421078][455 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:40:20][350110412421078][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:40:20][350110412421078][611 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 189\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 13\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 177\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:40:20][350110412421078][612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:40:20][350110412421078][1033 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.779/221.779/221.779/0.000 ms\n [2025-09-09 13:40:20][350110412421078][1033 ms][DEBUG] check_internet: online [2025-09-09 13:40:20][350110412421078][1033 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:40:20][350110412421078][1033 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110412421078\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5426\"}'\'' -e'"" [2025-09-09 13:40:20][350110412421078][1033 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:40:20][350110412421078][1033 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110412421078\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5426\"}'\'' -e'"" [2025-09-09 13:40:27][350110412421078][7391 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbd7219f-00a4-4f02-9888-9391b0b94271","id":"QR_cbd7219f-00a4-4f02-9888-9391b0b94271","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:40:27][350110412421078][7547 ms][DEBUG] proc_open done in 6513 ms; code=255; res.len=3343 [2025-09-09 13:40:27][350110412421078][7547 ms][DEBUG] END runCmdUntilRes#1 in 6514 ms [2025-09-09 13:40:27][350110412421078][7547 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:40:31][350212144024525][0 ms][INFO] === Request start === [2025-09-09 13:40:31][350212144024525][1 ms][DEBUG] START check_scloud [2025-09-09 13:40:31][350212144024525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:40:31][350212144024525][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 10124 4971 23743480 95156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:40:31][350212144024525][318 ms][DEBUG] targetPkg: running [2025-09-09 13:40:31][350212144024525][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 13:40:31][350212144024525][318 ms][DEBUG] START check_boot_completed [2025-09-09 13:40:31][350212144024525][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:40:32][350212144024525][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:40:32][350212144024525][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:40:32][350212144024525][427 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:40:32][350212144024525][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:40:32][350212144024525][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:40:32][350212144024525][599 ms][DEBUG] SU: done in 171 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 596\nsuccessfulTxPacketsPerSecond: 15.733322399506807\nretriedTxPackets: 80\nretriedTxPacketsPerSecond: 2.5900063900908012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 641\nsuccessfulRxPacketsPerSecond: 17.936760671673607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:40:32][350212144024525][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:40:32][350212144024525][1130 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=389 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 389.982/389.982/389.982/0.000 ms\n [2025-09-09 13:40:32][350212144024525][1130 ms][DEBUG] check_internet: online [2025-09-09 13:40:32][350212144024525][1130 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:40:32][350212144024525][1131 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350212144024525\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3945\"}'\'' -e'"" [2025-09-09 13:40:32][350212144024525][1131 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:40:32][350212144024525][1131 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350212144024525\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3945\"}'\'' -e'"" [2025-09-09 13:40:36][350212144024525][5192 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 13:40:37][350212144024525][5348 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=115 [2025-09-09 13:40:37][350212144024525][5348 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-09 13:40:37][350212144024525][5348 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 13:40:37][][1 ms][INFO] === Request start === [2025-09-09 13:40:37][][1 ms][DEBUG] START check_scloud [2025-09-09 13:40:37][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:40:37][][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 10124 4971 23797612 95264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:40:37][][315 ms][DEBUG] targetPkg: running [2025-09-09 13:40:37][][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 13:40:37][][315 ms][DEBUG] START check_boot_completed [2025-09-09 13:40:37][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:40:37][][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:40:37][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:40:37][][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:40:37][][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:40:37][][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:40:37][][502 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 596\nsuccessfulTxPacketsPerSecond: 15.733322399506807\nretriedTxPackets: 80\nretriedTxPacketsPerSecond: 2.5900063900908012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 641\nsuccessfulRxPacketsPerSecond: 17.936760671673607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:40:37][][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:40:38][][862 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.335/244.335/244.335/0.000 ms\n [2025-09-09 13:40:38][][862 ms][DEBUG] check_internet: online [2025-09-09 13:40:38][][862 ms][DEBUG] rawBody.length=1131 [2025-09-09 13:40:38][][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCRB129AFE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1882\"}'\'' -e'"" [2025-09-09 13:40:38][][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:40:38][][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCRB129AFE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1882\"}'\'' -e'"" [2025-09-09 13:40:41][][4704 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 13:40:42][][4861 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=115 [2025-09-09 13:40:42][][4861 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-09-09 13:40:42][][4861 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 13:40:43][350212144024525][0 ms][INFO] === Request start === [2025-09-09 13:40:43][350212144024525][1 ms][DEBUG] START check_scloud [2025-09-09 13:40:43][350212144024525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:40:44][350212144024525][345 ms][DEBUG] SU: done in 344 ms; outu0_a118 10124 4971 23907216 106240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:40:44][350212144024525][345 ms][DEBUG] targetPkg: running [2025-09-09 13:40:44][350212144024525][345 ms][DEBUG] END check_scloud in 345 ms [2025-09-09 13:40:44][350212144024525][345 ms][DEBUG] START check_boot_completed [2025-09-09 13:40:44][350212144024525][345 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:40:44][350212144024525][376 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:40:44][350212144024525][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:40:44][350212144024525][439 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:40:44][350212144024525][439 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:40:44][350212144024525][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:40:44][350212144024525][564 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 704\nsuccessfulTxPacketsPerSecond: 11.167111137031943\nretriedTxPackets: 96\nretriedTxPacketsPerSecond: 1.6641737848107985\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 790\nsuccessfulRxPacketsPerSecond: 15.26412054119092\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:40:44][350212144024525][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:40:44][350212144024525][923 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.389/216.389/216.389/0.000 ms\n [2025-09-09 13:40:44][350212144024525][923 ms][DEBUG] check_internet: online [2025-09-09 13:40:44][350212144024525][923 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:40:44][350212144024525][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350212144024525\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1511\"}'\'' -e'"" [2025-09-09 13:40:44][350212144024525][924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:40:44][350212144024525][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350212144024525\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1511\"}'\'' -e'"" [2025-09-09 13:40:49][350212144024525][5984 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccc69c6b-b1d1-4a1d-be7b-0f67da036aa5","id":"QR_ccc69c6b-b1d1-4a1d-be7b-0f67da036aa5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:40:49][350212144024525][6141 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 13:40:49][350212144024525][6141 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-09 13:40:49][350212144024525][6141 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:41:03][353029495451165][0 ms][INFO] === Request start === [2025-09-09 13:41:03][353029495451165][1 ms][DEBUG] START check_scloud [2025-09-09 13:41:03][353029495451165][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:41:03][353029495451165][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 10124 4971 24026576 78796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:41:03][353029495451165][341 ms][DEBUG] targetPkg: running [2025-09-09 13:41:03][353029495451165][341 ms][DEBUG] END check_scloud in 340 ms [2025-09-09 13:41:03][353029495451165][341 ms][DEBUG] START check_boot_completed [2025-09-09 13:41:03][353029495451165][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:41:03][353029495451165][387 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:41:03][353029495451165][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:41:03][353029495451165][434 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:41:03][353029495451165][434 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:41:03][353029495451165][434 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:41:03][353029495451165][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495451165\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2554\"}'\'' -e'"" [2025-09-09 13:41:03][353029495451165][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:41:03][353029495451165][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495451165\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2554\"}'\'' -e'"" [2025-09-09 13:41:08][353029495451165][5168 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d59d56a3-5f31-444d-ad8e-75793deaf71d","id":"QR_d59d56a3-5f31-444d-ad8e-75793deaf71d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:41:08][353029495451165][5324 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 13:41:08][353029495451165][5324 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-09 13:41:08][353029495451165][5324 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:41:11][353029495451165][0 ms][INFO] === Request start === [2025-09-09 13:41:11][353029495451165][1 ms][DEBUG] START check_scloud [2025-09-09 13:41:11][353029495451165][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:41:11][353029495451165][347 ms][DEBUG] SU: done in 347 ms; outu0_a118 10124 4971 24144608 87052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:41:11][353029495451165][348 ms][DEBUG] targetPkg: running [2025-09-09 13:41:11][353029495451165][348 ms][DEBUG] END check_scloud in 347 ms [2025-09-09 13:41:11][353029495451165][348 ms][DEBUG] START check_boot_completed [2025-09-09 13:41:11][353029495451165][348 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:41:11][353029495451165][394 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:41:11][353029495451165][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:41:11][353029495451165][457 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:41:11][353029495451165][457 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:41:11][353029495451165][457 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:41:11][353029495451165][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495451165\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2758\"}'\'' -e'"" [2025-09-09 13:41:11][353029495451165][457 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:41:11][353029495451165][457 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495451165\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2758\"}'\'' -e'"" [2025-09-09 13:41:16][353029495451165][5299 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb4e1c83-eeba-4351-869d-9d9a409fd64e","id":"QR_cb4e1c83-eeba-4351-869d-9d9a409fd64e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:41:16][353029495451165][5455 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 13:41:16][353029495451165][5455 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 13:41:16][353029495451165][5455 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:41:22][352467926842860][0 ms][INFO] === Request start === [2025-09-09 13:41:22][352467926842860][1 ms][DEBUG] START check_scloud [2025-09-09 13:41:22][352467926842860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:41:22][352467926842860][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 10124 4971 24318952 103984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:41:22][352467926842860][272 ms][DEBUG] targetPkg: running [2025-09-09 13:41:22][352467926842860][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 13:41:22][352467926842860][273 ms][DEBUG] START check_boot_completed [2025-09-09 13:41:22][352467926842860][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:41:22][352467926842860][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:41:22][352467926842860][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:41:22][352467926842860][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:41:22][352467926842860][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:41:22][352467926842860][366 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:41:22][352467926842860][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467926842860\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3934\"}'\'' -e'"" [2025-09-09 13:41:22][352467926842860][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:41:22][352467926842860][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467926842860\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3934\"}'\'' -e'"" [2025-09-09 13:41:27][352467926842860][5380 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdf3d223-ed25-4145-b95b-b3167e48d786","id":"QR_cdf3d223-ed25-4145-b95b-b3167e48d786","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:41:27][352467926842860][5536 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-09 13:41:27][352467926842860][5536 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-09-09 13:41:27][352467926842860][5536 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:41:31][352467926842860][0 ms][INFO] === Request start === [2025-09-09 13:41:31][352467926842860][1 ms][DEBUG] START check_scloud [2025-09-09 13:41:31][352467926842860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:41:31][352467926842860][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 10124 4971 24459532 115776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:41:31][352467926842860][310 ms][DEBUG] targetPkg: running [2025-09-09 13:41:31][352467926842860][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 13:41:31][352467926842860][310 ms][DEBUG] START check_boot_completed [2025-09-09 13:41:31][352467926842860][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:41:31][352467926842860][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:41:31][352467926842860][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:41:31][352467926842860][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:41:31][352467926842860][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:41:31][352467926842860][419 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:41:31][352467926842860][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467926842860\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-09-09 13:41:31][352467926842860][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:41:31][352467926842860][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467926842860\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-09-09 13:41:35][352467926842860][4793 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38661b2c-3260-4d99-b55f-0ed460fdcd59","id":"QR_38661b2c-3260-4d99-b55f-0ed460fdcd59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:41:35][352467926842860][4949 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-09 13:41:35][352467926842860][4949 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-09 13:41:35][352467926842860][4949 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:42:04][351663701951014][0 ms][INFO] === Request start === [2025-09-09 13:42:04][351663701951014][1 ms][DEBUG] START check_scloud [2025-09-09 13:42:04][351663701951014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:42:04][351663701951014][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 10124 4971 24538536 127248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:42:04][351663701951014][319 ms][DEBUG] targetPkg: running [2025-09-09 13:42:04][351663701951014][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 13:42:04][351663701951014][319 ms][DEBUG] START check_boot_completed [2025-09-09 13:42:04][351663701951014][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:42:04][351663701951014][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:42:04][351663701951014][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:42:04][351663701951014][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:42:04][351663701951014][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:42:04][351663701951014][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:42:04][351663701951014][522 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 774\nsuccessfulTxPacketsPerSecond: 7.106857615645462\nretriedTxPackets: 113\nretriedTxPacketsPerSecond: 1.6892862869305267\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 853\nsuccessfulRxPacketsPerSecond: 6.578604734005432\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:42:04][351663701951014][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:42:05][351663701951014][975 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.499/340.499/340.499/0.000 ms\n [2025-09-09 13:42:05][351663701951014][975 ms][DEBUG] check_internet: online [2025-09-09 13:42:05][351663701951014][975 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:42:05][351663701951014][975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701951014\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8640\"}'\'' -e'"" [2025-09-09 13:42:05][351663701951014][975 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:42:05][351663701951014][975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701951014\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8640\"}'\'' -e'"" [2025-09-09 13:42:10][351663701951014][5926 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2229e5a5-0b9e-46bc-af80-89880fe3511f","id":"QR_2229e5a5-0b9e-46bc-af80-89880fe3511f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:42:10][351663701951014][6083 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 13:42:10][351663701951014][6083 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 13:42:10][351663701951014][6083 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:42:13][351663701951014][0 ms][INFO] === Request start === [2025-09-09 13:42:13][351663701951014][1 ms][DEBUG] START check_scloud [2025-09-09 13:42:13][351663701951014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:42:14][351663701951014][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 10124 4971 24668720 137788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:42:14][351663701951014][252 ms][DEBUG] targetPkg: running [2025-09-09 13:42:14][351663701951014][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-09 13:42:14][351663701951014][252 ms][DEBUG] START check_boot_completed [2025-09-09 13:42:14][351663701951014][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:42:14][351663701951014][297 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 13:42:14][351663701951014][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:42:14][351663701951014][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:42:14][351663701951014][344 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-09 13:42:14][351663701951014][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:42:14][351663701951014][453 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30967 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 774\nsuccessfulTxPacketsPerSecond: 7.106857615645462\nretriedTxPackets: 113\nretriedTxPacketsPerSecond: 1.6892862869305267\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 853\nsuccessfulRxPacketsPerSecond: 6.578604734005432\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:42:14][351663701951014][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:42:14][351663701951014][844 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.191/244.191/244.191/0.000 ms\n [2025-09-09 13:42:14][351663701951014][844 ms][DEBUG] check_internet: online [2025-09-09 13:42:14][351663701951014][844 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:42:14][351663701951014][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701951014\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4991\"}'\'' -e'"" [2025-09-09 13:42:14][351663701951014][844 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:42:14][351663701951014][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701951014\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4991\"}'\'' -e'"" [2025-09-09 13:42:23][351663701951014][9857 ms][DEBUG] proc_open done in 9013 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 13:42:23][351663701951014][9857 ms][DEBUG] END runCmdUntilRes#1 in 9013 ms [2025-09-09 13:42:23][351663701951014][9857 ms][WARN] Detected error: Process with pid 10124 either refused to load frida-agent, or terminated during injectionProcess with pid 10124 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:42:23][351663701951014][9857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:42:24][351663701951014][10248 ms][DEBUG] SU: done in 391 ms; out [2025-09-09 13:42:24][351663701951014][10248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:42:24][351663701951014][10607 ms][DEBUG] SU: done in 359 ms; out [2025-09-09 13:42:24][351663701951014][10607 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:42:24][351663701951014][10607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:42:24][351663701951014][11060 ms][DEBUG] SU: done in 453 ms; out [2025-09-09 13:42:24][351663701951014][11060 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:42:25][351663701951014][11310 ms][DEBUG] SU: done in 250 ms; out [2025-09-09 13:42:27][351663701951014][13325 ms][DEBUG] START check_boot_completed [2025-09-09 13:42:27][351663701951014][13325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:42:27][351663701951014][13372 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:42:27][351663701951014][13372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:42:27][351663701951014][13419 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:42:27][351663701951014][13419 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:42:30][351663701951014][16434 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:42:30][351663701951014][16434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701951014\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4991\"}'\'' -e'"" [2025-09-09 13:42:31][351663701951014][17949 ms][DEBUG] proc_open done in 1515 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 13:42:31][351663701951014][17949 ms][DEBUG] END runCmdUntilRes#2 in 1516 ms [2025-09-09 13:42:31][351663701951014][17949 ms][WARN] Detected error 2; Reboot the device [2025-09-09 13:42:31][351663701951014][17949 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:42:32][351663701951014][18215 ms][DEBUG] SU: done in 265 ms; outsystem 18752 18413 7681236 153684 0 0 R system_server\n [2025-09-09 13:42:32][351663701951014][18215 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 13:42:32][351663701951014][18870 ms][DEBUG] SU: done in 656 ms; out [2025-09-09 13:43:05][355908101563109][1 ms][INFO] === Request start === [2025-09-09 13:43:05][355908101563109][1 ms][DEBUG] START check_scloud [2025-09-09 13:43:05][355908101563109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:43:05][355908101563109][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-09 13:43:05][355908101563109][44 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 13:43:05][355908101563109][90 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\n\n [2025-09-09 13:43:05][355908101563109][90 ms][WARN] check_devices: no device [2025-09-09 13:43:05][355908101563109][90 ms][WARN] check_devices: no device [2025-09-09 13:43:05][355908101563109][90 ms][DEBUG] END check_scloud in 89 ms [2025-09-09 13:44:04][355908101563109][0 ms][INFO] === Request start === [2025-09-09 13:44:04][355908101563109][1 ms][DEBUG] START check_scloud [2025-09-09 13:44:04][355908101563109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:44:04][355908101563109][352 ms][DEBUG] SU: done in 351 ms; out [2025-09-09 13:44:04][355908101563109][352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 13:44:05][355908101563109][399 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 13:44:05][355908101563109][399 ms][DEBUG] check_devices: device found [2025-09-09 13:44:05][355908101563109][399 ms][WARN] targetPkg: not running, restarting [2025-09-09 13:44:05][355908101563109][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:44:05][355908101563109][539 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 13:44:05][355908101563109][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:44:05][355908101563109][758 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:44:07][355908101563109][2773 ms][DEBUG] END check_scloud in 2772 ms [2025-09-09 13:44:07][355908101563109][2773 ms][DEBUG] START check_boot_completed [2025-09-09 13:44:07][355908101563109][2773 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:44:07][355908101563109][2820 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:44:07][355908101563109][2820 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:44:07][355908101563109][2898 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 13:44:07][355908101563109][2898 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 13:44:07][355908101563109][2898 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:44:07][355908101563109][3117 ms][DEBUG] SU: done in 219 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 130\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 11\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 139\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:44:07][355908101563109][3117 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:44:08][355908101563109][4117 ms][DEBUG] SU: done in 999 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.898/292.898/292.898/0.000 ms\n [2025-09-09 13:44:08][355908101563109][4117 ms][DEBUG] check_internet: online [2025-09-09 13:44:08][355908101563109][4117 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:44:08][355908101563109][4117 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908101563109\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9469\"}'\'' -e'"" [2025-09-09 13:44:08][355908101563109][4117 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:44:08][355908101563109][4117 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908101563109\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9469\"}'\'' -e'"" [2025-09-09 13:44:14][355908101563109][9584 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb81da57-e95e-4c44-a587-808dfa10e1b7","id":"QR_eb81da57-e95e-4c44-a587-808dfa10e1b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:44:14][355908101563109][9740 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-09 13:44:14][355908101563109][9740 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-09-09 13:44:14][355908101563109][9740 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:47:03][357674436655980][1 ms][INFO] === Request start === [2025-09-09 13:47:03][357674436655980][1 ms][DEBUG] START check_scloud [2025-09-09 13:47:03][357674436655980][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:47:03][357674436655980][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 10434 5018 23688428 70512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:47:03][357674436655980][295 ms][DEBUG] targetPkg: running [2025-09-09 13:47:03][357674436655980][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 13:47:03][357674436655980][295 ms][DEBUG] START check_boot_completed [2025-09-09 13:47:03][357674436655980][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:47:03][357674436655980][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:47:03][357674436655980][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:47:03][357674436655980][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:47:03][357674436655980][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:47:03][357674436655980][373 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:47:03][357674436655980][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436655980\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5489\"}'\'' -e'"" [2025-09-09 13:47:03][357674436655980][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:47:03][357674436655980][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436655980\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5489\"}'\'' -e'"" [2025-09-09 13:47:09][357674436655980][5606 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ab4a80d-9514-4759-a074-7e8b6936a2ba","id":"QR_9ab4a80d-9514-4759-a074-7e8b6936a2ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:47:09][357674436655980][5762 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-09 13:47:09][357674436655980][5762 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-09 13:47:09][357674436655980][5762 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:47:11][357674436655980][0 ms][INFO] === Request start === [2025-09-09 13:47:11][357674436655980][1 ms][DEBUG] START check_scloud [2025-09-09 13:47:11][357674436655980][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:47:11][357674436655980][278 ms][DEBUG] SU: done in 278 ms; outu0_a118 10434 5018 23867636 90552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:47:11][357674436655980][278 ms][DEBUG] targetPkg: running [2025-09-09 13:47:11][357674436655980][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 13:47:11][357674436655980][278 ms][DEBUG] START check_boot_completed [2025-09-09 13:47:11][357674436655980][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:47:11][357674436655980][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:47:11][357674436655980][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:47:11][357674436655980][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:47:11][357674436655980][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:47:11][357674436655980][356 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:47:11][357674436655980][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436655980\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6765\"}'\'' -e'"" [2025-09-09 13:47:11][357674436655980][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:47:11][357674436655980][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436655980\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6765\"}'\'' -e'"" [2025-09-09 13:47:16][357674436655980][5105 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8c4f99d-11de-4ad4-bba3-890a0f2dbf37","id":"QR_c8c4f99d-11de-4ad4-bba3-890a0f2dbf37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:47:16][357674436655980][5261 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 13:47:16][357674436655980][5261 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 13:47:16][357674436655980][5262 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:48:04][355796462643325][0 ms][INFO] === Request start === [2025-09-09 13:48:04][355796462643325][1 ms][DEBUG] START check_scloud [2025-09-09 13:48:04][355796462643325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:48:04][355796462643325][270 ms][DEBUG] SU: done in 270 ms; outu0_a118 10434 5018 23975220 102472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:48:04][355796462643325][270 ms][DEBUG] targetPkg: running [2025-09-09 13:48:04][355796462643325][270 ms][DEBUG] END check_scloud in 270 ms [2025-09-09 13:48:04][355796462643325][271 ms][DEBUG] START check_boot_completed [2025-09-09 13:48:04][355796462643325][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:48:04][355796462643325][302 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:48:04][355796462643325][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:48:04][355796462643325][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:48:04][355796462643325][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:48:04][355796462643325][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:48:04][355796462643325][458 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 655\nsuccessfulTxPacketsPerSecond: 6.777023614671373\nretriedTxPackets: 89\nretriedTxPacketsPerSecond: 1.107127303385164\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 713\nsuccessfulRxPacketsPerSecond: 6.279063351043384\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:48:04][355796462643325][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:48:05][355796462643325][911 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=311 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 311.373/311.373/311.373/0.000 ms\n [2025-09-09 13:48:05][355796462643325][911 ms][DEBUG] check_internet: online [2025-09-09 13:48:05][355796462643325][911 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:48:05][355796462643325][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355796462643325\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7845\"}'\'' -e'"" [2025-09-09 13:48:05][355796462643325][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:48:05][355796462643325][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355796462643325\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7845\"}'\'' -e'"" [2025-09-09 13:48:09][355796462643325][5051 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18b0be67-f4f5-44d0-ab5f-58ce6f4bd097","id":"QR_18b0be67-f4f5-44d0-ab5f-58ce6f4bd097","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:48:09][355796462643325][5207 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-09 13:48:09][355796462643325][5207 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-09 13:48:09][355796462643325][5207 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:48:13][355796462643325][0 ms][INFO] === Request start === [2025-09-09 13:48:13][355796462643325][1 ms][DEBUG] START check_scloud [2025-09-09 13:48:13][355796462643325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:48:13][355796462643325][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 10434 5018 24134140 109692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:48:13][355796462643325][322 ms][DEBUG] targetPkg: running [2025-09-09 13:48:13][355796462643325][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 13:48:13][355796462643325][322 ms][DEBUG] START check_boot_completed [2025-09-09 13:48:13][355796462643325][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:48:13][355796462643325][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:48:13][355796462643325][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:48:13][355796462643325][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:48:13][355796462643325][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:48:13][355796462643325][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:48:13][355796462643325][525 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 655\nsuccessfulTxPacketsPerSecond: 6.777023614671373\nretriedTxPackets: 89\nretriedTxPacketsPerSecond: 1.107127303385164\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 713\nsuccessfulRxPacketsPerSecond: 6.279063351043384\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:48:13][355796462643325][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:48:13][355796462643325][853 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.68.78) 56(84) bytes of data.\n64 bytes from lax31s11-in-f14.1e100.net (142.250.68.78): icmp_seq=1 ttl=109 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.100/223.100/223.100/0.000 ms\n [2025-09-09 13:48:13][355796462643325][853 ms][DEBUG] check_internet: online [2025-09-09 13:48:13][355796462643325][853 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:48:13][355796462643325][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355796462643325\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8516\"}'\'' -e'"" [2025-09-09 13:48:13][355796462643325][854 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:48:13][355796462643325][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355796462643325\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8516\"}'\'' -e'"" [2025-09-09 13:48:17][355796462643325][4571 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1697b109-0d47-4f6f-9d8a-eee16c6966f5","id":"QR_1697b109-0d47-4f6f-9d8a-eee16c6966f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:48:17][355796462643325][4727 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 13:48:17][355796462643325][4727 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-09-09 13:48:17][355796462643325][4727 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:50:04][357674436788872][1 ms][INFO] === Request start === [2025-09-09 13:50:04][357674436788872][1 ms][DEBUG] START check_scloud [2025-09-09 13:50:04][357674436788872][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:50:04][357674436788872][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10434 5018 24235580 118512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:50:04][357674436788872][304 ms][DEBUG] targetPkg: running [2025-09-09 13:50:04][357674436788872][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 13:50:04][357674436788872][304 ms][DEBUG] START check_boot_completed [2025-09-09 13:50:04][357674436788872][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:50:04][357674436788872][349 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 13:50:04][357674436788872][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:50:04][357674436788872][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:50:04][357674436788872][396 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 13:50:04][357674436788872][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:50:04][357674436788872][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:50:04][357674436788872][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:50:06][357674436788872][2661 ms][DEBUG] SU: done in 2156 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.696/291.696/291.696/0.000 ms\n [2025-09-09 13:50:06][357674436788872][2661 ms][DEBUG] check_internet: online [2025-09-09 13:50:06][357674436788872][2661 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:50:06][357674436788872][2661 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436788872\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4620\"}'\'' -e'"" [2025-09-09 13:50:06][357674436788872][2661 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:50:06][357674436788872][2661 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436788872\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4620\"}'\'' -e'"" [2025-09-09 13:50:10][357674436788872][6238 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0152bade-5f17-4aca-a9e8-f8551fddba7b","id":"QR_0152bade-5f17-4aca-a9e8-f8551fddba7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:50:10][357674436788872][6394 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 13:50:10][357674436788872][6394 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 13:50:10][357674436788872][6394 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:50:12][357674436788872][0 ms][INFO] === Request start === [2025-09-09 13:50:12][357674436788872][1 ms][DEBUG] START check_scloud [2025-09-09 13:50:12][357674436788872][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:50:13][357674436788872][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10434 5018 24393860 130156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:50:13][357674436788872][303 ms][DEBUG] targetPkg: running [2025-09-09 13:50:13][357674436788872][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 13:50:13][357674436788872][303 ms][DEBUG] START check_boot_completed [2025-09-09 13:50:13][357674436788872][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:50:13][357674436788872][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:50:13][357674436788872][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:50:13][357674436788872][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:50:13][357674436788872][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:50:13][357674436788872][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:50:13][357674436788872][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:50:13][357674436788872][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:50:13][357674436788872][897 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.173/299.173/299.173/0.000 ms\n [2025-09-09 13:50:13][357674436788872][897 ms][DEBUG] check_internet: online [2025-09-09 13:50:13][357674436788872][897 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:50:13][357674436788872][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436788872\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9696\"}'\'' -e'"" [2025-09-09 13:50:13][357674436788872][897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:50:13][357674436788872][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436788872\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9696\"}'\'' -e'"" [2025-09-09 13:50:18][357674436788872][5739 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_227d984d-7568-4064-8449-24ac55d30080","id":"QR_227d984d-7568-4064-8449-24ac55d30080","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:50:18][357674436788872][5895 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 13:50:18][357674436788872][5895 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 13:50:18][357674436788872][5896 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:50:22][353818875307876][0 ms][INFO] === Request start === [2025-09-09 13:50:22][353818875307876][1 ms][DEBUG] START check_scloud [2025-09-09 13:50:22][353818875307876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:50:23][353818875307876][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 10434 5018 24545676 140848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:50:23][353818875307876][322 ms][DEBUG] targetPkg: running [2025-09-09 13:50:23][353818875307876][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 13:50:23][353818875307876][322 ms][DEBUG] START check_boot_completed [2025-09-09 13:50:23][353818875307876][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:50:23][353818875307876][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:50:23][353818875307876][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:50:23][353818875307876][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:50:23][353818875307876][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:50:23][353818875307876][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:50:23][353818875307876][527 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:50:23][353818875307876][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:50:23][353818875307876][916 ms][DEBUG] SU: done in 388 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.444/297.444/297.444/0.000 ms\n [2025-09-09 13:50:23][353818875307876][916 ms][DEBUG] check_internet: online [2025-09-09 13:50:23][353818875307876][916 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:50:23][353818875307876][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875307876\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5928\"}'\'' -e'"" [2025-09-09 13:50:23][353818875307876][916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:50:23][353818875307876][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875307876\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5928\"}'\'' -e'"" [2025-09-09 13:50:27][353818875307876][4243 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d196abae-1501-4f96-8913-462c264c2d33","id":"QR_d196abae-1501-4f96-8913-462c264c2d33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:50:27][353818875307876][4399 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 13:50:27][353818875307876][4399 ms][DEBUG] END runCmdUntilRes#1 in 3484 ms [2025-09-09 13:50:27][353818875307876][4399 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:50:29][353818875307876][0 ms][INFO] === Request start === [2025-09-09 13:50:29][353818875307876][1 ms][DEBUG] START check_scloud [2025-09-09 13:50:29][353818875307876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:50:29][353818875307876][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 10434 5018 24702576 152844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:50:29][353818875307876][314 ms][DEBUG] targetPkg: running [2025-09-09 13:50:29][353818875307876][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 13:50:29][353818875307876][315 ms][DEBUG] START check_boot_completed [2025-09-09 13:50:29][353818875307876][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:50:29][353818875307876][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:50:29][353818875307876][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:50:29][353818875307876][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:50:29][353818875307876][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:50:29][353818875307876][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:50:30][353818875307876][517 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:50:30][353818875307876][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:50:30][353818875307876][861 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.743/222.743/222.743/0.000 ms\n [2025-09-09 13:50:30][353818875307876][861 ms][DEBUG] check_internet: online [2025-09-09 13:50:30][353818875307876][861 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:50:30][353818875307876][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875307876\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-09-09 13:50:30][353818875307876][861 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:50:30][353818875307876][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875307876\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-09-09 13:50:34][353818875307876][5391 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1050018-90e4-4f79-8af5-8b45b91781eb","id":"QR_e1050018-90e4-4f79-8af5-8b45b91781eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:50:35][353818875307876][5547 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 13:50:35][353818875307876][5547 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 13:50:35][353818875307876][5547 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:51:04][354136764510727][0 ms][INFO] === Request start === [2025-09-09 13:51:04][354136764510727][1 ms][DEBUG] START check_scloud [2025-09-09 13:51:04][354136764510727][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:51:04][354136764510727][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 10434 5018 24789644 164108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:51:04][354136764510727][260 ms][DEBUG] targetPkg: running [2025-09-09 13:51:04][354136764510727][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 13:51:04][354136764510727][260 ms][DEBUG] START check_boot_completed [2025-09-09 13:51:04][354136764510727][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:51:04][354136764510727][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:51:04][354136764510727][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:51:04][354136764510727][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:51:04][354136764510727][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:51:04][354136764510727][353 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:51:04][354136764510727][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136764510727\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6386\"}'\'' -e'"" [2025-09-09 13:51:04][354136764510727][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:51:04][354136764510727][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136764510727\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6386\"}'\'' -e'"" [2025-09-09 13:51:09][354136764510727][4805 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2904132c-b20e-4eb5-a4b8-31744573a5d2","id":"QR_2904132c-b20e-4eb5-a4b8-31744573a5d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:51:09][354136764510727][4962 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-09 13:51:09][354136764510727][4962 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-09 13:51:09][354136764510727][4962 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:51:13][354136764510727][0 ms][INFO] === Request start === [2025-09-09 13:51:13][354136764510727][1 ms][DEBUG] START check_scloud [2025-09-09 13:51:13][354136764510727][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:51:13][354136764510727][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 10434 5018 24942356 175020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:51:13][354136764510727][273 ms][DEBUG] targetPkg: running [2025-09-09 13:51:13][354136764510727][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 13:51:13][354136764510727][273 ms][DEBUG] START check_boot_completed [2025-09-09 13:51:13][354136764510727][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:51:13][354136764510727][320 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:51:13][354136764510727][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:51:13][354136764510727][382 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:51:13][354136764510727][382 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:51:13][354136764510727][382 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:51:13][354136764510727][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136764510727\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2289\"}'\'' -e'"" [2025-09-09 13:51:13][354136764510727][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:51:13][354136764510727][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136764510727\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2289\"}'\'' -e'"" [2025-09-09 13:51:18][354136764510727][4897 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b0b47dd-7f86-43c8-a1f7-321757a842fc","id":"QR_8b0b47dd-7f86-43c8-a1f7-321757a842fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:51:18][354136764510727][5053 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-09 13:51:18][354136764510727][5053 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-09 13:51:18][354136764510727][5053 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:52:03][350013885895150][0 ms][INFO] === Request start === [2025-09-09 13:52:03][350013885895150][1 ms][DEBUG] START check_scloud [2025-09-09 13:52:03][350013885895150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:52:04][350013885895150][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 10434 5018 25072596 187308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:52:04][350013885895150][254 ms][DEBUG] targetPkg: running [2025-09-09 13:52:04][350013885895150][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 13:52:04][350013885895150][254 ms][DEBUG] START check_boot_completed [2025-09-09 13:52:04][350013885895150][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:52:04][350013885895150][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:52:04][350013885895150][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:52:04][350013885895150][363 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:52:04][350013885895150][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:52:04][350013885895150][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:52:04][350013885895150][504 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:52:04][350013885895150][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:52:04][350013885895150][941 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.435/294.435/294.435/0.000 ms\n [2025-09-09 13:52:04][350013885895150][941 ms][DEBUG] check_internet: online [2025-09-09 13:52:04][350013885895150][941 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:52:04][350013885895150][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885895150\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-09-09 13:52:04][350013885895150][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:52:04][350013885895150][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885895150\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-09-09 13:52:09][350013885895150][5175 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 13:52:09][350013885895150][5175 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 13:52:09][350013885895150][5175 ms][WARN] Detected error: Process with pid 10434 either refused to load frida-agent, or terminated during injectionProcess with pid 10434 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 13:52:09][350013885895150][5175 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 13:52:09][350013885895150][5440 ms][DEBUG] SU: done in 265 ms; outsystem 5446 5018 13043932 570944 ep_poll 0 S system_server\n [2025-09-09 13:52:09][350013885895150][5440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 13:52:09][350013885895150][5582 ms][DEBUG] SU: done in 142 ms; out [2025-09-09 13:52:09][350013885895150][5582 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 13:52:09][350013885895150][5582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 13:52:09][350013885895150][5737 ms][DEBUG] SU: done in 154 ms; out [2025-09-09 13:52:09][350013885895150][5737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 13:52:09][350013885895150][5909 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 13:52:11][350013885895150][7924 ms][DEBUG] START check_boot_completed [2025-09-09 13:52:11][350013885895150][7924 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:52:11][350013885895150][7971 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:52:11][350013885895150][7971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:52:12][350013885895150][8033 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:52:12][350013885895150][8033 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:52:15][350013885895150][11048 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 13:52:15][350013885895150][11048 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885895150\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-09-09 13:52:18][350013885895150][14485 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7af62d19-20f3-4c5f-8a8e-7f90e023f796","id":"QR_7af62d19-20f3-4c5f-8a8e-7f90e023f796","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:52:18][350013885895150][14641 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-09-09 13:52:18][350013885895150][14641 ms][DEBUG] END runCmdUntilRes#2 in 3593 ms [2025-09-09 13:52:18][350013885895150][14641 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:52:20][350013885895150][1 ms][INFO] === Request start === [2025-09-09 13:52:20][350013885895150][1 ms][DEBUG] START check_scloud [2025-09-09 13:52:20][350013885895150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:52:21][350013885895150][254 ms][DEBUG] SU: done in 252 ms; outu0_a118 17676 5018 23817604 123844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:52:21][350013885895150][254 ms][DEBUG] targetPkg: running [2025-09-09 13:52:21][350013885895150][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 13:52:21][350013885895150][254 ms][DEBUG] START check_boot_completed [2025-09-09 13:52:21][350013885895150][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:52:21][350013885895150][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:52:21][350013885895150][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:52:21][350013885895150][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:52:21][350013885895150][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:52:21][350013885895150][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:52:21][350013885895150][457 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:52:21][350013885895150][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:52:21][350013885895150][785 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.891/221.891/221.891/0.000 ms\n [2025-09-09 13:52:21][350013885895150][785 ms][DEBUG] check_internet: online [2025-09-09 13:52:21][350013885895150][785 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:52:21][350013885895150][785 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885895150\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4561\"}'\'' -e'"" [2025-09-09 13:52:21][350013885895150][785 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:52:21][350013885895150][785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885895150\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4561\"}'\'' -e'"" [2025-09-09 13:52:27][350013885895150][6642 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08c82af9-8387-4b4b-b2d2-99c9d53edc02","id":"QR_08c82af9-8387-4b4b-b2d2-99c9d53edc02","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:52:27][350013885895150][6799 ms][DEBUG] proc_open done in 6013 ms; code=255; res.len=3343 [2025-09-09 13:52:27][350013885895150][6799 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-09-09 13:52:27][350013885895150][6799 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:52:31][359316101325501][0 ms][INFO] === Request start === [2025-09-09 13:52:31][359316101325501][1 ms][DEBUG] START check_scloud [2025-09-09 13:52:31][359316101325501][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:52:32][359316101325501][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 17676 5018 24010264 137204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:52:32][359316101325501][317 ms][DEBUG] targetPkg: running [2025-09-09 13:52:32][359316101325501][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 13:52:32][359316101325501][317 ms][DEBUG] START check_boot_completed [2025-09-09 13:52:32][359316101325501][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:52:32][359316101325501][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:52:32][359316101325501][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:52:32][359316101325501][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:52:32][359316101325501][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:52:32][359316101325501][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:52:32][359316101325501][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:52:32][359316101325501][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:52:32][359316101325501][926 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.084/313.084/313.084/0.000 ms\n [2025-09-09 13:52:32][359316101325501][926 ms][DEBUG] check_internet: online [2025-09-09 13:52:32][359316101325501][926 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:52:32][359316101325501][926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359316101325501\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4802\"}'\'' -e'"" [2025-09-09 13:52:32][359316101325501][927 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:52:32][359316101325501][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359316101325501\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4802\"}'\'' -e'"" [2025-09-09 13:52:36][359316101325501][4503 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e669cb2-794e-4937-923b-4538179b4ef1","id":"QR_7e669cb2-794e-4937-923b-4538179b4ef1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:52:36][359316101325501][4659 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 13:52:36][359316101325501][4659 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 13:52:36][359316101325501][4660 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:52:38][359316101325501][0 ms][INFO] === Request start === [2025-09-09 13:52:38][359316101325501][1 ms][DEBUG] START check_scloud [2025-09-09 13:52:38][359316101325501][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:52:39][359316101325501][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 17676 5018 24155772 149044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:52:39][359316101325501][317 ms][DEBUG] targetPkg: running [2025-09-09 13:52:39][359316101325501][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 13:52:39][359316101325501][318 ms][DEBUG] START check_boot_completed [2025-09-09 13:52:39][359316101325501][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:52:39][359316101325501][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:52:39][359316101325501][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:52:39][359316101325501][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:52:39][359316101325501][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:52:39][359316101325501][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:52:39][359316101325501][583 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1021\nsuccessfulTxPacketsPerSecond: 1.501686319883804\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.2502810533139673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1038\nsuccessfulRxPacketsPerSecond: 1.333464628312121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:52:39][359316101325501][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:52:39][359316101325501][1020 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.844/320.844/320.844/0.000 ms\n [2025-09-09 13:52:39][359316101325501][1021 ms][DEBUG] check_internet: online [2025-09-09 13:52:39][359316101325501][1021 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:52:39][359316101325501][1021 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359316101325501\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7507\"}'\'' -e'"" [2025-09-09 13:52:39][359316101325501][1021 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:52:39][359316101325501][1021 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359316101325501\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7507\"}'\'' -e'"" [2025-09-09 13:52:44][359316101325501][5660 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_244ca3d1-727c-407a-ad75-ef61ced09cb5","id":"QR_244ca3d1-727c-407a-ad75-ef61ced09cb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:52:44][359316101325501][5816 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 13:52:44][359316101325501][5816 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 13:52:44][359316101325501][5816 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:54:03][351240642550716][0 ms][INFO] === Request start === [2025-09-09 13:54:03][351240642550716][1 ms][DEBUG] START check_scloud [2025-09-09 13:54:03][351240642550716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:54:03][351240642550716][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 17676 5018 24169000 160604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:54:03][351240642550716][288 ms][DEBUG] targetPkg: running [2025-09-09 13:54:03][351240642550716][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 13:54:03][351240642550716][288 ms][DEBUG] START check_boot_completed [2025-09-09 13:54:03][351240642550716][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:54:03][351240642550716][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:54:03][351240642550716][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:54:03][351240642550716][381 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 13:54:03][351240642550716][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 13:54:03][351240642550716][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:54:04][351240642550716][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1334\nsuccessfulTxPacketsPerSecond: 1.0392801407842747\nretriedTxPackets: 249\nretriedTxPacketsPerSecond: 0.328717999800777\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1300\nsuccessfulRxPacketsPerSecond: 0.8699405651293289\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:54:04][351240642550716][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:54:04][351240642550716][943 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.614/288.614/288.614/0.000 ms\n [2025-09-09 13:54:04][351240642550716][943 ms][DEBUG] check_internet: online [2025-09-09 13:54:04][351240642550716][944 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:54:04][351240642550716][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642550716\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4549\"}'\'' -e'"" [2025-09-09 13:54:04][351240642550716][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:54:04][351240642550716][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642550716\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4549\"}'\'' -e'"" [2025-09-09 13:54:09][351240642550716][5599 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_985f9de4-d1aa-41df-893d-d3403cf5b5a6","id":"QR_985f9de4-d1aa-41df-893d-d3403cf5b5a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:54:09][351240642550716][5755 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 13:54:09][351240642550716][5755 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 13:54:09][351240642550716][5755 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:54:11][351240642550716][0 ms][INFO] === Request start === [2025-09-09 13:54:11][351240642550716][1 ms][DEBUG] START check_scloud [2025-09-09 13:54:11][351240642550716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:54:11][351240642550716][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 17676 5018 24291008 171820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:54:11][351240642550716][262 ms][DEBUG] targetPkg: running [2025-09-09 13:54:11][351240642550716][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 13:54:11][351240642550716][262 ms][DEBUG] START check_boot_completed [2025-09-09 13:54:11][351240642550716][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:54:11][351240642550716][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:54:11][351240642550716][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:54:11][351240642550716][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 13:54:11][351240642550716][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 13:54:11][351240642550716][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:54:12][351240642550716][464 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1334\nsuccessfulTxPacketsPerSecond: 1.0392801407842747\nretriedTxPackets: 249\nretriedTxPacketsPerSecond: 0.328717999800777\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1300\nsuccessfulRxPacketsPerSecond: 0.8699405651293289\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:54:12][351240642550716][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:54:12][351240642550716][886 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=325 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 325.981/325.981/325.981/0.000 ms\n [2025-09-09 13:54:12][351240642550716][887 ms][DEBUG] check_internet: online [2025-09-09 13:54:12][351240642550716][887 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:54:12][351240642550716][887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642550716\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9565\"}'\'' -e'"" [2025-09-09 13:54:12][351240642550716][887 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:54:12][351240642550716][887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642550716\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9565\"}'\'' -e'"" [2025-09-09 13:54:17][351240642550716][5932 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9fcbb2d-91ef-42c3-8c11-88ccd10ba621","id":"QR_d9fcbb2d-91ef-42c3-8c11-88ccd10ba621","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:54:17][351240642550716][6088 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 13:54:17][351240642550716][6088 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 13:54:17][351240642550716][6088 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:56:05][350211810600527][1 ms][INFO] === Request start === [2025-09-09 13:56:05][350211810600527][1 ms][DEBUG] START check_scloud [2025-09-09 13:56:05][350211810600527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:56:05][350211810600527][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 17676 5018 24420188 183816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:56:05][350211810600527][302 ms][DEBUG] targetPkg: running [2025-09-09 13:56:05][350211810600527][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 13:56:05][350211810600527][302 ms][DEBUG] START check_boot_completed [2025-09-09 13:56:05][350211810600527][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:56:05][350211810600527][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 13:56:05][350211810600527][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:56:05][350211810600527][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:56:05][350211810600527][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 13:56:05][350211810600527][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:56:05][350211810600527][490 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1334\nsuccessfulTxPacketsPerSecond: 1.0392801407842747\nretriedTxPackets: 249\nretriedTxPacketsPerSecond: 0.328717999800777\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1300\nsuccessfulRxPacketsPerSecond: 0.8699405651293289\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:56:05][350211810600527][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:56:06][350211810600527][1849 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.286/305.286/305.286/0.000 ms\n [2025-09-09 13:56:06][350211810600527][1849 ms][DEBUG] check_internet: online [2025-09-09 13:56:06][350211810600527][1849 ms][DEBUG] rawBody.length=1160 [2025-09-09 13:56:06][350211810600527][1849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350211810600527\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2154\"}'\'' -e'"" [2025-09-09 13:56:06][350211810600527][1849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:56:06][350211810600527][1849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350211810600527\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2154\"}'\'' -e'"" [2025-09-09 13:56:11][350211810600527][6894 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f412f3d9-c107-4e8a-9404-a7977bc210c3","id":"QR_f412f3d9-c107-4e8a-9404-a7977bc210c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:56:12][350211810600527][7050 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 13:56:12][350211810600527][7051 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 13:56:12][350211810600527][7051 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:56:15][350211810600527][0 ms][INFO] === Request start === [2025-09-09 13:56:15][350211810600527][1 ms][DEBUG] START check_scloud [2025-09-09 13:56:15][350211810600527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:56:15][350211810600527][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 17676 5018 24599524 194652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:56:15][350211810600527][262 ms][DEBUG] targetPkg: running [2025-09-09 13:56:15][350211810600527][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 13:56:15][350211810600527][263 ms][DEBUG] START check_boot_completed [2025-09-09 13:56:15][350211810600527][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:56:15][350211810600527][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 13:56:15][350211810600527][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:56:16][350211810600527][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:56:16][350211810600527][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:56:16][350211810600527][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 13:56:16][350211810600527][465 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1334\nsuccessfulTxPacketsPerSecond: 1.0392801407842747\nretriedTxPackets: 249\nretriedTxPacketsPerSecond: 0.328717999800777\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1300\nsuccessfulRxPacketsPerSecond: 0.8699405651293289\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 13:56:16][350211810600527][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 13:56:16][350211810600527][856 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.727/256.727/256.727/0.000 ms\n [2025-09-09 13:56:16][350211810600527][856 ms][DEBUG] check_internet: online [2025-09-09 13:56:16][350211810600527][857 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:56:16][350211810600527][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350211810600527\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4760\"}'\'' -e'"" [2025-09-09 13:56:16][350211810600527][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:56:16][350211810600527][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350211810600527\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4760\"}'\'' -e'"" [2025-09-09 13:56:20][350211810600527][4683 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7debdecf-a9ce-439d-9e6c-c3abda4f967d","id":"QR_7debdecf-a9ce-439d-9e6c-c3abda4f967d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:56:20][350211810600527][4839 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-09-09 13:56:20][350211810600527][4839 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-09-09 13:56:20][350211810600527][4839 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 13:57:03][357967975599860][0 ms][INFO] === Request start === [2025-09-09 13:57:03][357967975599860][1 ms][DEBUG] START check_scloud [2025-09-09 13:57:03][357967975599860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 13:57:03][357967975599860][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 17676 5018 24743588 207112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 13:57:03][357967975599860][323 ms][DEBUG] targetPkg: running [2025-09-09 13:57:03][357967975599860][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 13:57:03][357967975599860][323 ms][DEBUG] START check_boot_completed [2025-09-09 13:57:03][357967975599860][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 13:57:03][357967975599860][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 13:57:03][357967975599860][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 13:57:03][357967975599860][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 13:57:03][357967975599860][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 13:57:03][357967975599860][417 ms][DEBUG] rawBody.length=1150 [2025-09-09 13:57:03][357967975599860][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975599860\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1283\"}'\'' -e'"" [2025-09-09 13:57:03][357967975599860][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 13:57:03][357967975599860][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975599860\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1283\"}'\'' -e'"" [2025-09-09 13:57:07][357967975599860][3603 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82ffbdcc-8003-4c80-871f-bf7a8dd9dfbe","id":"QR_82ffbdcc-8003-4c80-871f-bf7a8dd9dfbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 13:57:07][357967975599860][3760 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=3343 [2025-09-09 13:57:07][357967975599860][3760 ms][DEBUG] END runCmdUntilRes#1 in 3343 ms [2025-09-09 13:57:07][357967975599860][3760 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:00:06][353244117163649][1 ms][INFO] === Request start === [2025-09-09 14:00:06][353244117163649][1 ms][DEBUG] START check_scloud [2025-09-09 14:00:06][353244117163649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:00:06][353244117163649][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 17676 5018 24857480 217936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:00:06][353244117163649][298 ms][DEBUG] targetPkg: running [2025-09-09 14:00:06][353244117163649][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 14:00:06][353244117163649][298 ms][DEBUG] START check_boot_completed [2025-09-09 14:00:06][353244117163649][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:00:06][353244117163649][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:00:06][353244117163649][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:00:06][353244117163649][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:00:06][353244117163649][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:00:06][353244117163649][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:00:06][353244117163649][501 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1483\nsuccessfulTxPacketsPerSecond: 0.4946271540348629\nretriedTxPackets: 296\nretriedTxPacketsPerSecond: 0.15602333046737288\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1424\nsuccessfulRxPacketsPerSecond: 0.4116360208075369\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:00:06][353244117163649][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:00:07][353244117163649][954 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.221/336.221/336.221/0.000 ms\n [2025-09-09 14:00:07][353244117163649][954 ms][DEBUG] check_internet: online [2025-09-09 14:00:07][353244117163649][955 ms][DEBUG] rawBody.length=1170 [2025-09-09 14:00:07][353244117163649][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353244117163649\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW70JR8GN\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9002\"}'\'' -e'"" [2025-09-09 14:00:07][353244117163649][955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:00:07][353244117163649][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353244117163649\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW70JR8GN\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9002\"}'\'' -e'"" [2025-09-09 14:00:12][353244117163649][6219 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4816fb08-299b-4791-b677-39dce1b39a84","id":"QR_4816fb08-299b-4791-b677-39dce1b39a84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:00:12][353244117163649][6375 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-09 14:00:12][353244117163649][6375 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-09 14:00:12][353244117163649][6375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:01:05][350012622002518][0 ms][INFO] === Request start === [2025-09-09 14:01:05][350012622002518][1 ms][DEBUG] START check_scloud [2025-09-09 14:01:05][350012622002518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:01:05][350012622002518][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 17676 5018 24997004 229704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:01:05][350012622002518][297 ms][DEBUG] targetPkg: running [2025-09-09 14:01:05][350012622002518][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 14:01:05][350012622002518][297 ms][DEBUG] START check_boot_completed [2025-09-09 14:01:05][350012622002518][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:01:05][350012622002518][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:01:05][350012622002518][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:01:05][350012622002518][390 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:01:05][350012622002518][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:01:05][350012622002518][391 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:01:05][350012622002518][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012622002518\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1273\"}'\'' -e'"" [2025-09-09 14:01:05][350012622002518][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:01:05][350012622002518][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012622002518\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1273\"}'\'' -e'"" [2025-09-09 14:01:10][350012622002518][5311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90596f87-5f1b-4e9e-9fa8-b921c21588e9","id":"QR_90596f87-5f1b-4e9e-9fa8-b921c21588e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:01:10][350012622002518][5467 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-09-09 14:01:10][350012622002518][5467 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-09 14:01:10][350012622002518][5467 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:01:14][350012622002518][0 ms][INFO] === Request start === [2025-09-09 14:01:14][350012622002518][1 ms][DEBUG] START check_scloud [2025-09-09 14:01:14][350012622002518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:01:14][350012622002518][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17676 5018 25164180 238708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:01:14][350012622002518][310 ms][DEBUG] targetPkg: running [2025-09-09 14:01:14][350012622002518][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 14:01:14][350012622002518][310 ms][DEBUG] START check_boot_completed [2025-09-09 14:01:14][350012622002518][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:01:14][350012622002518][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:01:14][350012622002518][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:01:14][350012622002518][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:01:14][350012622002518][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:01:14][350012622002518][404 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:01:14][350012622002518][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012622002518\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7333\"}'\'' -e'"" [2025-09-09 14:01:14][350012622002518][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:01:14][350012622002518][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012622002518\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7333\"}'\'' -e'"" [2025-09-09 14:01:18][350012622002518][4215 ms][DEBUG] proc_open done in 3812 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:01:18][350012622002518][4215 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-09-09 14:01:18][350012622002518][4215 ms][WARN] Detected error: Process with pid 17676 either refused to load frida-agent, or terminated during injectionProcess with pid 17676 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:01:18][350012622002518][4215 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:01:18][350012622002518][4481 ms][DEBUG] SU: done in 266 ms; outsystem 5446 5018 12801732 262664 ep_poll 0 S system_server\n [2025-09-09 14:01:18][350012622002518][4481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:01:18][350012622002518][4621 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:01:18][350012622002518][4621 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:01:18][350012622002518][4622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:01:18][350012622002518][4762 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:01:18][350012622002518][4762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:01:18][350012622002518][4918 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:01:20][350012622002518][6933 ms][DEBUG] START check_boot_completed [2025-09-09 14:01:20][350012622002518][6933 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:01:21][350012622002518][6980 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:01:21][350012622002518][6980 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:01:21][350012622002518][7027 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:01:21][350012622002518][7027 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:01:24][350012622002518][10042 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:01:24][350012622002518][10042 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012622002518\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7333\"}'\'' -e'"" [2025-09-09 14:01:29][350012622002518][15525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3dce1be5-4a6d-4a83-b401-9972b0d5bda7","id":"QR_3dce1be5-4a6d-4a83-b401-9972b0d5bda7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:01:29][350012622002518][15681 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-09-09 14:01:29][350012622002518][15681 ms][DEBUG] END runCmdUntilRes#2 in 5640 ms [2025-09-09 14:01:29][350012622002518][15682 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:02:05][353026641159320][0 ms][INFO] === Request start === [2025-09-09 14:02:05][353026641159320][1 ms][DEBUG] START check_scloud [2025-09-09 14:02:05][353026641159320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:02:05][353026641159320][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 19387 5018 23745560 127000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:02:05][353026641159320][325 ms][DEBUG] targetPkg: running [2025-09-09 14:02:05][353026641159320][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-09 14:02:05][353026641159320][325 ms][DEBUG] START check_boot_completed [2025-09-09 14:02:05][353026641159320][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:02:05][353026641159320][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:02:05][353026641159320][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:02:05][353026641159320][420 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:02:05][353026641159320][420 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:02:05][353026641159320][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:02:05][353026641159320][528 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1523\nsuccessfulTxPacketsPerSecond: 0.3054391068960514\nretriedTxPackets: 312\nretriedTxPacketsPerSecond: 0.12217564275842058\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1455\nsuccessfulRxPacketsPerSecond: 0.23671530784443987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:02:05][353026641159320][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:02:07][353026641159320][1934 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.864/299.864/299.864/0.000 ms\n [2025-09-09 14:02:07][353026641159320][1934 ms][DEBUG] check_internet: online [2025-09-09 14:02:07][353026641159320][1934 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:02:07][353026641159320][1934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026641159320\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4736\"}'\'' -e'"" [2025-09-09 14:02:07][353026641159320][1934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:02:07][353026641159320][1934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026641159320\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4736\"}'\'' -e'"" [2025-09-09 14:02:11][353026641159320][6464 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d753218-346e-493a-9e17-decd7e043bf8","id":"QR_8d753218-346e-493a-9e17-decd7e043bf8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:02:11][353026641159320][6620 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 14:02:11][353026641159320][6620 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 14:02:11][353026641159320][6620 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:02:15][353026641159320][1 ms][INFO] === Request start === [2025-09-09 14:02:15][353026641159320][1 ms][DEBUG] START check_scloud [2025-09-09 14:02:15][353026641159320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:02:15][353026641159320][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 19387 5018 23922720 137528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:02:15][353026641159320][249 ms][DEBUG] targetPkg: running [2025-09-09 14:02:15][353026641159320][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-09 14:02:15][353026641159320][249 ms][DEBUG] START check_boot_completed [2025-09-09 14:02:15][353026641159320][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:02:15][353026641159320][280 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:02:15][353026641159320][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:02:15][353026641159320][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:02:15][353026641159320][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:02:15][353026641159320][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:02:15][353026641159320][437 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1523\nsuccessfulTxPacketsPerSecond: 0.3054391068960514\nretriedTxPackets: 312\nretriedTxPacketsPerSecond: 0.12217564275842058\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1455\nsuccessfulRxPacketsPerSecond: 0.23671530784443987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:02:15][353026641159320][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:02:16][353026641159320][874 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.565/321.565/321.565/0.000 ms\n [2025-09-09 14:02:16][353026641159320][874 ms][DEBUG] check_internet: online [2025-09-09 14:02:16][353026641159320][874 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:02:16][353026641159320][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026641159320\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4367\"}'\'' -e'"" [2025-09-09 14:02:16][353026641159320][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:02:16][353026641159320][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026641159320\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4367\"}'\'' -e'"" [2025-09-09 14:02:19][353026641159320][4061 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8558e3a-fc4e-4f37-bfb6-b5fd0f06d220","id":"QR_d8558e3a-fc4e-4f37-bfb6-b5fd0f06d220","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:02:19][353026641159320][4217 ms][DEBUG] proc_open done in 3342 ms; code=255; res.len=3343 [2025-09-09 14:02:19][353026641159320][4217 ms][DEBUG] END runCmdUntilRes#1 in 3342 ms [2025-09-09 14:02:19][353026641159320][4217 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:03:03][351626711480605][0 ms][INFO] === Request start === [2025-09-09 14:03:03][351626711480605][1 ms][DEBUG] START check_scloud [2025-09-09 14:03:03][351626711480605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:03:03][351626711480605][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19387 5018 24037472 149256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:03:03][351626711480605][315 ms][DEBUG] targetPkg: running [2025-09-09 14:03:03][351626711480605][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 14:03:03][351626711480605][315 ms][DEBUG] START check_boot_completed [2025-09-09 14:03:03][351626711480605][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:03:03][351626711480605][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:03:03][351626711480605][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:03:03][351626711480605][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:03:03][351626711480605][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:03:03][351626711480605][424 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:03:03][351626711480605][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351626711480605\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3511\"}'\'' -e'"" [2025-09-09 14:03:03][351626711480605][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:03:03][351626711480605][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351626711480605\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3511\"}'\'' -e'"" [2025-09-09 14:03:08][351626711480605][4735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be7572d5-9df0-4f61-996b-3211b7a7879b","id":"QR_be7572d5-9df0-4f61-996b-3211b7a7879b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:03:08][351626711480605][4892 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-09-09 14:03:08][351626711480605][4892 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-09 14:03:08][351626711480605][4892 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:03:10][351626711480605][0 ms][INFO] === Request start === [2025-09-09 14:03:10][351626711480605][1 ms][DEBUG] START check_scloud [2025-09-09 14:03:10][351626711480605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:03:10][351626711480605][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19387 5018 24210728 160352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:03:10][351626711480605][311 ms][DEBUG] targetPkg: running [2025-09-09 14:03:10][351626711480605][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 14:03:10][351626711480605][311 ms][DEBUG] START check_boot_completed [2025-09-09 14:03:10][351626711480605][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:03:10][351626711480605][356 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 14:03:10][351626711480605][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:03:10][351626711480605][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:03:10][351626711480605][403 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 14:03:10][351626711480605][403 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:03:10][351626711480605][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351626711480605\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1494\"}'\'' -e'"" [2025-09-09 14:03:10][351626711480605][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:03:10][351626711480605][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351626711480605\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1494\"}'\'' -e'"" [2025-09-09 14:03:15][351626711480605][5402 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae1ae9cf-2712-451b-804a-4bb8cec92327","id":"QR_ae1ae9cf-2712-451b-804a-4bb8cec92327","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:03:16][351626711480605][5558 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-09 14:03:16][351626711480605][5558 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-09 14:03:16][351626711480605][5558 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:03:20][350026552614589][0 ms][INFO] === Request start === [2025-09-09 14:03:20][350026552614589][1 ms][DEBUG] START check_scloud [2025-09-09 14:03:20][350026552614589][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:03:20][350026552614589][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19387 5018 24339812 172232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:03:20][350026552614589][304 ms][DEBUG] targetPkg: running [2025-09-09 14:03:20][350026552614589][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 14:03:20][350026552614589][304 ms][DEBUG] START check_boot_completed [2025-09-09 14:03:20][350026552614589][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:03:20][350026552614589][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:03:20][350026552614589][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:03:20][350026552614589][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:03:20][350026552614589][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:03:20][350026552614589][397 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:03:20][350026552614589][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026552614589\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2882\"}'\'' -e'"" [2025-09-09 14:03:20][350026552614589][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:03:20][350026552614589][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026552614589\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2882\"}'\'' -e'"" [2025-09-09 14:03:23][350026552614589][3630 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae76edbf-5d36-4756-bed4-3f59b178a74a","id":"QR_ae76edbf-5d36-4756-bed4-3f59b178a74a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:03:24][350026552614589][3786 ms][DEBUG] proc_open done in 3390 ms; code=255; res.len=3343 [2025-09-09 14:03:24][350026552614589][3786 ms][DEBUG] END runCmdUntilRes#1 in 3390 ms [2025-09-09 14:03:24][350026552614589][3787 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:03:26][350026552614589][0 ms][INFO] === Request start === [2025-09-09 14:03:26][350026552614589][1 ms][DEBUG] START check_scloud [2025-09-09 14:03:26][350026552614589][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:03:26][350026552614589][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 19387 5018 24470088 183132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:03:26][350026552614589][302 ms][DEBUG] targetPkg: running [2025-09-09 14:03:26][350026552614589][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 14:03:26][350026552614589][303 ms][DEBUG] START check_boot_completed [2025-09-09 14:03:26][350026552614589][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:03:26][350026552614589][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:03:26][350026552614589][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:03:26][350026552614589][443 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 14:03:26][350026552614589][443 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 14:03:26][350026552614589][443 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:03:26][350026552614589][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026552614589\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8500\"}'\'' -e'"" [2025-09-09 14:03:26][350026552614589][443 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:03:26][350026552614589][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026552614589\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8500\"}'\'' -e'"" [2025-09-09 14:03:31][350026552614589][4676 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5805a000-a435-455c-964d-b59a06585d5b","id":"QR_5805a000-a435-455c-964d-b59a06585d5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:03:31][350026552614589][4832 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 14:03:31][350026552614589][4832 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 14:03:31][350026552614589][4833 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:04:03][351267960375764][0 ms][INFO] === Request start === [2025-09-09 14:04:03][351267960375764][1 ms][DEBUG] START check_scloud [2025-09-09 14:04:03][351267960375764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:04:03][351267960375764][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 19387 5018 24547044 195412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:04:03][351267960375764][290 ms][DEBUG] targetPkg: running [2025-09-09 14:04:03][351267960375764][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-09 14:04:03][351267960375764][290 ms][DEBUG] START check_boot_completed [2025-09-09 14:04:03][351267960375764][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:04:03][351267960375764][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:04:03][351267960375764][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:04:03][351267960375764][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:04:03][351267960375764][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:04:03][351267960375764][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:04:04][351267960375764][494 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1523\nsuccessfulTxPacketsPerSecond: 0.3054391068960514\nretriedTxPackets: 312\nretriedTxPacketsPerSecond: 0.12217564275842058\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1455\nsuccessfulRxPacketsPerSecond: 0.23671530784443987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:04:04][351267960375764][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:04:04][351267960375764][931 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.201/330.201/330.201/0.000 ms\n [2025-09-09 14:04:04][351267960375764][931 ms][DEBUG] check_internet: online [2025-09-09 14:04:04][351267960375764][931 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:04:04][351267960375764][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960375764\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1224\"}'\'' -e'"" [2025-09-09 14:04:04][351267960375764][931 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:04:04][351267960375764][931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960375764\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1224\"}'\'' -e'"" [2025-09-09 14:04:09][351267960375764][5492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ec24ede-5c7b-4c88-80f0-351496329591","id":"QR_8ec24ede-5c7b-4c88-80f0-351496329591","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:04:09][351267960375764][5648 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-09 14:04:09][351267960375764][5648 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-09 14:04:09][351267960375764][5648 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:04:11][351267960375764][0 ms][INFO] === Request start === [2025-09-09 14:04:11][351267960375764][1 ms][DEBUG] START check_scloud [2025-09-09 14:04:11][351267960375764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:04:11][351267960375764][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19387 5018 24681324 206032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:04:11][351267960375764][311 ms][DEBUG] targetPkg: running [2025-09-09 14:04:11][351267960375764][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 14:04:11][351267960375764][311 ms][DEBUG] START check_boot_completed [2025-09-09 14:04:11][351267960375764][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:04:11][351267960375764][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:04:11][351267960375764][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:04:11][351267960375764][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:04:11][351267960375764][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:04:11][351267960375764][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:04:12][351267960375764][561 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1523\nsuccessfulTxPacketsPerSecond: 0.3054391068960514\nretriedTxPackets: 312\nretriedTxPacketsPerSecond: 0.12217564275842058\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1455\nsuccessfulRxPacketsPerSecond: 0.23671530784443987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:04:12][351267960375764][561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:04:12][351267960375764][873 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.650/214.650/214.650/0.000 ms\n [2025-09-09 14:04:12][351267960375764][873 ms][DEBUG] check_internet: online [2025-09-09 14:04:12][351267960375764][873 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:04:12][351267960375764][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960375764\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-09-09 14:04:12][351267960375764][873 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:04:12][351267960375764][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960375764\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-09-09 14:04:16][351267960375764][5450 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1352a9c9-9ce2-413b-aca3-00d3a7277c2d","id":"QR_1352a9c9-9ce2-413b-aca3-00d3a7277c2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:04:17][351267960375764][5606 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 14:04:17][351267960375764][5606 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 14:04:17][351267960375764][5606 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:04:21][355382702749444][1 ms][INFO] === Request start === [2025-09-09 14:04:21][355382702749444][1 ms][DEBUG] START check_scloud [2025-09-09 14:04:21][355382702749444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:04:21][355382702749444][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19387 5018 24836212 217904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:04:21][355382702749444][310 ms][DEBUG] targetPkg: running [2025-09-09 14:04:21][355382702749444][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 14:04:21][355382702749444][310 ms][DEBUG] START check_boot_completed [2025-09-09 14:04:21][355382702749444][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:04:21][355382702749444][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:04:21][355382702749444][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:04:21][355382702749444][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:04:21][355382702749444][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:04:21][355382702749444][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:04:21][355382702749444][575 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1523\nsuccessfulTxPacketsPerSecond: 0.3054391068960514\nretriedTxPackets: 312\nretriedTxPacketsPerSecond: 0.12217564275842058\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1455\nsuccessfulRxPacketsPerSecond: 0.23671530784443987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:04:21][355382702749444][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:04:22][355382702749444][1028 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.058/335.058/335.058/0.000 ms\n [2025-09-09 14:04:22][355382702749444][1028 ms][DEBUG] check_internet: online [2025-09-09 14:04:22][355382702749444][1028 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:04:22][355382702749444][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382702749444\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-09-09 14:04:22][355382702749444][1028 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:04:22][355382702749444][1029 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382702749444\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-09-09 14:04:25][355382702749444][4340 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88a9f199-a2f9-4401-8d44-903462820798","id":"QR_88a9f199-a2f9-4401-8d44-903462820798","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:04:25][355382702749444][4496 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-09 14:04:25][355382702749444][4496 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 14:04:25][355382702749444][4496 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:04:28][355382702749444][0 ms][INFO] === Request start === [2025-09-09 14:04:28][355382702749444][1 ms][DEBUG] START check_scloud [2025-09-09 14:04:28][355382702749444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:04:28][355382702749444][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 19387 5018 24995032 228936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:04:28][355382702749444][295 ms][DEBUG] targetPkg: running [2025-09-09 14:04:28][355382702749444][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 14:04:28][355382702749444][296 ms][DEBUG] START check_boot_completed [2025-09-09 14:04:28][355382702749444][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:04:28][355382702749444][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:04:28][355382702749444][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:04:28][355382702749444][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:04:28][355382702749444][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:04:28][355382702749444][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:04:28][355382702749444][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1523\nsuccessfulTxPacketsPerSecond: 0.3054391068960514\nretriedTxPackets: 312\nretriedTxPacketsPerSecond: 0.12217564275842058\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1455\nsuccessfulRxPacketsPerSecond: 0.23671530784443987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:04:28][355382702749444][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:04:28][355382702749444][858 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.643/250.643/250.643/0.000 ms\n [2025-09-09 14:04:28][355382702749444][858 ms][DEBUG] check_internet: online [2025-09-09 14:04:28][355382702749444][858 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:04:28][355382702749444][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382702749444\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1529\"}'\'' -e'"" [2025-09-09 14:04:28][355382702749444][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:04:28][355382702749444][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382702749444\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1529\"}'\'' -e'"" [2025-09-09 14:04:33][355382702749444][5388 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_268c7647-f08a-4c6c-8778-ede2271d5033","id":"QR_268c7647-f08a-4c6c-8778-ede2271d5033","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:04:33][355382702749444][5544 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 14:04:33][355382702749444][5544 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 14:04:33][355382702749444][5544 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:06:03][350814495553091][0 ms][INFO] === Request start === [2025-09-09 14:06:03][350814495553091][1 ms][DEBUG] START check_scloud [2025-09-09 14:06:03][350814495553091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:06:03][350814495553091][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 19387 5018 25098100 241216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:06:03][350814495553091][301 ms][DEBUG] targetPkg: running [2025-09-09 14:06:03][350814495553091][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 14:06:03][350814495553091][301 ms][DEBUG] START check_boot_completed [2025-09-09 14:06:03][350814495553091][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:06:03][350814495553091][330 ms][DEBUG] ADB: done in 29 ms; out [2025-09-09 14:06:03][350814495553091][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:06:03][350814495553091][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:06:03][350814495553091][377 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-09 14:06:03][350814495553091][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:06:03][350814495553091][502 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1836\nsuccessfulTxPacketsPerSecond: 1.0410430386483072\nretriedTxPackets: 402\nretriedTxPacketsPerSecond: 0.29934144881261227\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1716\nsuccessfulRxPacketsPerSecond: 0.8680902015565756\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:06:03][350814495553091][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:06:04][350814495553091][971 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.563/323.563/323.563/0.000 ms\n [2025-09-09 14:06:04][350814495553091][971 ms][DEBUG] check_internet: online [2025-09-09 14:06:04][350814495553091][971 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:06:04][350814495553091][971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495553091\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3006\"}'\'' -e'"" [2025-09-09 14:06:04][350814495553091][971 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:06:04][350814495553091][971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495553091\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3006\"}'\'' -e'"" [2025-09-09 14:06:07][350814495553091][4548 ms][DEBUG] proc_open done in 3577 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:06:07][350814495553091][4548 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 14:06:07][350814495553091][4548 ms][WARN] Detected error: Process with pid 19387 either refused to load frida-agent, or terminated during injectionProcess with pid 19387 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:06:07][350814495553091][4548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:06:08][350814495553091][4860 ms][DEBUG] SU: done in 312 ms; outsystem 5446 5018 12801068 233372 ep_poll 0 S system_server\n [2025-09-09 14:06:08][350814495553091][4860 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:06:08][350814495553091][5001 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 14:06:08][350814495553091][5001 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:06:08][350814495553091][5001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:06:08][350814495553091][5110 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 14:06:08][350814495553091][5111 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:06:08][350814495553091][5267 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:06:10][350814495553091][7282 ms][DEBUG] START check_boot_completed [2025-09-09 14:06:10][350814495553091][7282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:06:10][350814495553091][7329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:06:10][350814495553091][7329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:06:10][350814495553091][7375 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:06:10][350814495553091][7375 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:06:13][350814495553091][10390 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:06:13][350814495553091][10390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495553091\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3006\"}'\'' -e'"" [2025-09-09 14:06:17][350814495553091][14608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1844f7ac-ebb9-48c2-b678-9256bc68cd08","id":"QR_1844f7ac-ebb9-48c2-b678-9256bc68cd08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:06:18][350814495553091][14764 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-09-09 14:06:18][350814495553091][14764 ms][DEBUG] END runCmdUntilRes#2 in 4374 ms [2025-09-09 14:06:18][350814495553091][14765 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:06:20][350814495553091][0 ms][INFO] === Request start === [2025-09-09 14:06:20][350814495553091][1 ms][DEBUG] START check_scloud [2025-09-09 14:06:20][350814495553091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:06:20][350814495553091][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 20798 5018 23760672 124264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:06:20][350814495553091][275 ms][DEBUG] targetPkg: running [2025-09-09 14:06:20][350814495553091][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 14:06:20][350814495553091][275 ms][DEBUG] START check_boot_completed [2025-09-09 14:06:20][350814495553091][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:06:20][350814495553091][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:06:20][350814495553091][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:06:20][350814495553091][384 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:06:20][350814495553091][384 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:06:20][350814495553091][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:06:20][350814495553091][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1836\nsuccessfulTxPacketsPerSecond: 1.0410430386483072\nretriedTxPackets: 402\nretriedTxPacketsPerSecond: 0.29934144881261227\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1716\nsuccessfulRxPacketsPerSecond: 0.8680902015565756\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:06:20][350814495553091][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:06:21][350814495553091][931 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=331 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 331.119/331.119/331.119/0.000 ms\n [2025-09-09 14:06:21][350814495553091][931 ms][DEBUG] check_internet: online [2025-09-09 14:06:21][350814495553091][931 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:06:21][350814495553091][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495553091\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7195\"}'\'' -e'"" [2025-09-09 14:06:21][350814495553091][931 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:06:21][350814495553091][931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495553091\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7195\"}'\'' -e'"" [2025-09-09 14:06:26][350814495553091][6179 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77e62baf-1fd1-4c4c-be89-ceddab93413c","id":"QR_77e62baf-1fd1-4c4c-be89-ceddab93413c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:06:26][350814495553091][6336 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-09-09 14:06:26][350814495553091][6336 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-09 14:06:26][350814495553091][6336 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:06:30][357715240043242][1 ms][INFO] === Request start === [2025-09-09 14:06:30][357715240043242][1 ms][DEBUG] START check_scloud [2025-09-09 14:06:30][357715240043242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:06:31][357715240043242][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 20798 5018 23910516 137744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:06:31][357715240043242][305 ms][DEBUG] targetPkg: running [2025-09-09 14:06:31][357715240043242][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 14:06:31][357715240043242][305 ms][DEBUG] START check_boot_completed [2025-09-09 14:06:31][357715240043242][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:06:31][357715240043242][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:06:31][357715240043242][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:06:31][357715240043242][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:06:31][357715240043242][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:06:31][357715240043242][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:06:31][357715240043242][507 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1836\nsuccessfulTxPacketsPerSecond: 1.0410430386483072\nretriedTxPackets: 402\nretriedTxPacketsPerSecond: 0.29934144881261227\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1716\nsuccessfulRxPacketsPerSecond: 0.8680902015565756\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:06:31][357715240043242][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:06:31][357715240043242][960 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.569/318.569/318.569/0.000 ms\n [2025-09-09 14:06:31][357715240043242][960 ms][DEBUG] check_internet: online [2025-09-09 14:06:31][357715240043242][960 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:06:31][357715240043242][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357715240043242\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8675\"}'\'' -e'"" [2025-09-09 14:06:31][357715240043242][960 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:06:31][357715240043242][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357715240043242\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8675\"}'\'' -e'"" [2025-09-09 14:06:35][357715240043242][4146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4edb61a7-7990-4ca2-a03d-73718e6890cc","id":"QR_4edb61a7-7990-4ca2-a03d-73718e6890cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:06:35][357715240043242][4303 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=3343 [2025-09-09 14:06:35][357715240043242][4303 ms][DEBUG] END runCmdUntilRes#1 in 3343 ms [2025-09-09 14:06:35][357715240043242][4303 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:06:37][357715240043242][0 ms][INFO] === Request start === [2025-09-09 14:06:37][357715240043242][1 ms][DEBUG] START check_scloud [2025-09-09 14:06:37][357715240043242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:06:37][357715240043242][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 20798 5018 24026456 149576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:06:37][357715240043242][248 ms][DEBUG] targetPkg: running [2025-09-09 14:06:37][357715240043242][248 ms][DEBUG] END check_scloud in 248 ms [2025-09-09 14:06:37][357715240043242][248 ms][DEBUG] START check_boot_completed [2025-09-09 14:06:37][357715240043242][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:06:37][357715240043242][295 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:06:37][357715240043242][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:06:37][357715240043242][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:06:37][357715240043242][342 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:06:37][357715240043242][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:06:38][357715240043242][467 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1836\nsuccessfulTxPacketsPerSecond: 1.0410430386483072\nretriedTxPackets: 402\nretriedTxPacketsPerSecond: 0.29934144881261227\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1716\nsuccessfulRxPacketsPerSecond: 0.8680902015565756\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:06:38][357715240043242][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:06:38][357715240043242][857 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.704/277.704/277.704/0.000 ms\n [2025-09-09 14:06:38][357715240043242][858 ms][DEBUG] check_internet: online [2025-09-09 14:06:38][357715240043242][858 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:06:38][357715240043242][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357715240043242\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6724\"}'\'' -e'"" [2025-09-09 14:06:38][357715240043242][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:06:38][357715240043242][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357715240043242\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6724\"}'\'' -e'"" [2025-09-09 14:06:42][357715240043242][5434 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8361615-2527-4cf4-bda1-2d132a21f848","id":"QR_f8361615-2527-4cf4-bda1-2d132a21f848","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:06:43][357715240043242][5590 ms][DEBUG] proc_open done in 4732 ms; code=255; res.len=3343 [2025-09-09 14:06:43][357715240043242][5591 ms][DEBUG] END runCmdUntilRes#1 in 4732 ms [2025-09-09 14:06:43][357715240043242][5591 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:09:03][350320365579976][1 ms][INFO] === Request start === [2025-09-09 14:09:03][350320365579976][1 ms][DEBUG] START check_scloud [2025-09-09 14:09:03][350320365579976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:09:04][350320365579976][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 20798 5018 24026168 161008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:09:04][350320365579976][313 ms][DEBUG] targetPkg: running [2025-09-09 14:09:04][350320365579976][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 14:09:04][350320365579976][314 ms][DEBUG] START check_boot_completed [2025-09-09 14:09:04][350320365579976][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:09:04][350320365579976][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:09:04][350320365579976][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:09:04][350320365579976][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:09:04][350320365579976][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:09:04][350320365579976][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:09:04][350320365579976][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365579976\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8929\"}'\'' -e'"" [2025-09-09 14:09:04][350320365579976][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:09:04][350320365579976][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365579976\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8929\"}'\'' -e'"" [2025-09-09 14:09:08][350320365579976][4828 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6dcba59-ee68-4d92-a26a-92055804d91a","id":"QR_b6dcba59-ee68-4d92-a26a-92055804d91a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:09:08][350320365579976][4984 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3343 [2025-09-09 14:09:08][350320365579976][4984 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-09 14:09:08][350320365579976][4984 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:09:10][350320365579976][0 ms][INFO] === Request start === [2025-09-09 14:09:10][350320365579976][1 ms][DEBUG] START check_scloud [2025-09-09 14:09:10][350320365579976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:09:11][350320365579976][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 20798 5018 24197440 171900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:09:11][350320365579976][304 ms][DEBUG] targetPkg: running [2025-09-09 14:09:11][350320365579976][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 14:09:11][350320365579976][304 ms][DEBUG] START check_boot_completed [2025-09-09 14:09:11][350320365579976][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:09:11][350320365579976][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:09:11][350320365579976][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:09:11][350320365579976][429 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 14:09:11][350320365579976][429 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 14:09:11][350320365579976][429 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:09:11][350320365579976][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365579976\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6361\"}'\'' -e'"" [2025-09-09 14:09:11][350320365579976][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:09:11][350320365579976][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365579976\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6361\"}'\'' -e'"" [2025-09-09 14:09:16][350320365579976][5225 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9820de16-3ce3-44ec-b9d8-384c6de4fb62","id":"QR_9820de16-3ce3-44ec-b9d8-384c6de4fb62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:09:16][350320365579976][5381 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-09 14:09:16][350320365579976][5381 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-09 14:09:16][350320365579976][5381 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:09:21][358558828155486][0 ms][INFO] === Request start === [2025-09-09 14:09:21][358558828155486][1 ms][DEBUG] START check_scloud [2025-09-09 14:09:21][358558828155486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:09:21][358558828155486][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 20798 5018 24366664 183776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:09:21][358558828155486][306 ms][DEBUG] targetPkg: running [2025-09-09 14:09:21][358558828155486][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 14:09:21][358558828155486][306 ms][DEBUG] START check_boot_completed [2025-09-09 14:09:21][358558828155486][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:09:22][358558828155486][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:09:22][358558828155486][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:09:22][358558828155486][430 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 14:09:22][358558828155486][430 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-09 14:09:22][358558828155486][430 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:09:22][358558828155486][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828155486\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1049\"}'\'' -e'"" [2025-09-09 14:09:22][358558828155486][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:09:22][358558828155486][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828155486\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1049\"}'\'' -e'"" [2025-09-09 14:09:26][358558828155486][4866 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74e00bb4-b00c-4ca6-9c15-d268a9c31457","id":"QR_74e00bb4-b00c-4ca6-9c15-d268a9c31457","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:09:26][358558828155486][5022 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 14:09:26][358558828155486][5023 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-09-09 14:09:26][358558828155486][5023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:09:30][358558828155486][0 ms][INFO] === Request start === [2025-09-09 14:09:30][358558828155486][1 ms][DEBUG] START check_scloud [2025-09-09 14:09:30][358558828155486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:09:30][358558828155486][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 20798 5018 24509228 195680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:09:30][358558828155486][312 ms][DEBUG] targetPkg: running [2025-09-09 14:09:30][358558828155486][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 14:09:30][358558828155486][312 ms][DEBUG] START check_boot_completed [2025-09-09 14:09:30][358558828155486][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:09:30][358558828155486][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:09:30][358558828155486][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:09:30][358558828155486][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:09:30][358558828155486][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:09:30][358558828155486][421 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:09:30][358558828155486][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828155486\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8528\"}'\'' -e'"" [2025-09-09 14:09:30][358558828155486][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:09:30][358558828155486][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828155486\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8528\"}'\'' -e'"" [2025-09-09 14:09:34][358558828155486][4358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29461a9e-2afb-4634-aa7d-6d8c6017cf84","id":"QR_29461a9e-2afb-4634-aa7d-6d8c6017cf84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:09:34][358558828155486][4514 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-09 14:09:34][358558828155486][4514 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-09 14:09:34][358558828155486][4514 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:11:03][350828940749450][0 ms][INFO] === Request start === [2025-09-09 14:11:03][350828940749450][1 ms][DEBUG] START check_scloud [2025-09-09 14:11:03][350828940749450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:11:03][350828940749450][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 20798 5018 24631240 207180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:11:03][350828940749450][311 ms][DEBUG] targetPkg: running [2025-09-09 14:11:03][350828940749450][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 14:11:03][350828940749450][311 ms][DEBUG] START check_boot_completed [2025-09-09 14:11:03][350828940749450][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:11:03][350828940749450][356 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 14:11:03][350828940749450][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:11:04][350828940749450][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:11:04][350828940749450][419 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-09 14:11:04][350828940749450][419 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:11:04][350828940749450][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828940749450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2304\"}'\'' -e'"" [2025-09-09 14:11:04][350828940749450][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:11:04][350828940749450][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828940749450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2304\"}'\'' -e'"" [2025-09-09 14:11:08][350828940749450][4824 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68a23272-4e85-466d-bb15-69b6d1108313","id":"QR_68a23272-4e85-466d-bb15-69b6d1108313","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:11:08][350828940749450][4980 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 14:11:08][350828940749450][4980 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 14:11:08][350828940749450][4980 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:11:10][350828940749450][1 ms][INFO] === Request start === [2025-09-09 14:11:10][350828940749450][1 ms][DEBUG] START check_scloud [2025-09-09 14:11:10][350828940749450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:11:11][350828940749450][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 20798 5018 24794256 217812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:11:11][350828940749450][301 ms][DEBUG] targetPkg: running [2025-09-09 14:11:11][350828940749450][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 14:11:11][350828940749450][301 ms][DEBUG] START check_boot_completed [2025-09-09 14:11:11][350828940749450][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:11:11][350828940749450][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:11:11][350828940749450][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:11:11][350828940749450][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:11:11][350828940749450][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:11:11][350828940749450][394 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:11:11][350828940749450][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828940749450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9038\"}'\'' -e'"" [2025-09-09 14:11:11][350828940749450][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:11:11][350828940749450][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828940749450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9038\"}'\'' -e'"" [2025-09-09 14:11:16][350828940749450][5550 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8693f22f-5e10-4afc-a444-d2ade002ef76","id":"QR_8693f22f-5e10-4afc-a444-d2ade002ef76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:11:16][350828940749450][5706 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 14:11:16][350828940749450][5706 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 14:11:16][350828940749450][5706 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:11:20][355490896647447][0 ms][INFO] === Request start === [2025-09-09 14:11:20][355490896647447][1 ms][DEBUG] START check_scloud [2025-09-09 14:11:20][355490896647447][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:11:21][355490896647447][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20798 5018 24932632 230188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:11:21][355490896647447][299 ms][DEBUG] targetPkg: running [2025-09-09 14:11:21][355490896647447][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 14:11:21][355490896647447][299 ms][DEBUG] START check_boot_completed [2025-09-09 14:11:21][355490896647447][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:11:21][355490896647447][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:11:21][355490896647447][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:11:21][355490896647447][394 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:11:21][355490896647447][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:11:21][355490896647447][394 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:11:21][355490896647447][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490896647447\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7490\"}'\'' -e'"" [2025-09-09 14:11:21][355490896647447][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:11:21][355490896647447][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490896647447\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7490\"}'\'' -e'"" [2025-09-09 14:11:24][355490896647447][3595 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6270fe5a-8559-4163-b0b0-0a4baead47c3","id":"QR_6270fe5a-8559-4163-b0b0-0a4baead47c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:11:24][355490896647447][3751 ms][DEBUG] proc_open done in 3357 ms; code=255; res.len=3343 [2025-09-09 14:11:24][355490896647447][3751 ms][DEBUG] END runCmdUntilRes#1 in 3357 ms [2025-09-09 14:11:24][355490896647447][3751 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:11:26][355490896647447][0 ms][INFO] === Request start === [2025-09-09 14:11:26][355490896647447][1 ms][DEBUG] START check_scloud [2025-09-09 14:11:26][355490896647447][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:11:27][355490896647447][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 20798 5018 25102716 241944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:11:27][355490896647447][314 ms][DEBUG] targetPkg: running [2025-09-09 14:11:27][355490896647447][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 14:11:27][355490896647447][314 ms][DEBUG] START check_boot_completed [2025-09-09 14:11:27][355490896647447][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:11:27][355490896647447][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:11:27][355490896647447][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:11:27][355490896647447][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:11:27][355490896647447][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:11:27][355490896647447][407 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:11:27][355490896647447][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490896647447\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2519\"}'\'' -e'"" [2025-09-09 14:11:27][355490896647447][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:11:27][355490896647447][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490896647447\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2519\"}'\'' -e'"" [2025-09-09 14:11:30][355490896647447][4001 ms][DEBUG] proc_open done in 3593 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:11:30][355490896647447][4001 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-09 14:11:30][355490896647447][4001 ms][WARN] Detected error: Process with pid 20798 either refused to load frida-agent, or terminated during injectionProcess with pid 20798 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:11:30][355490896647447][4001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:11:31][355490896647447][4297 ms][DEBUG] SU: done in 296 ms; outsystem 5446 5018 12818504 226636 ep_poll 0 S system_server\n [2025-09-09 14:11:31][355490896647447][4298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:11:31][355490896647447][4438 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:11:31][355490896647447][4438 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:11:31][355490896647447][4438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:11:31][355490896647447][4563 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:11:31][355490896647447][4563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:11:31][355490896647447][4719 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:11:33][355490896647447][6734 ms][DEBUG] START check_boot_completed [2025-09-09 14:11:33][355490896647447][6734 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:11:33][355490896647447][6781 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:11:33][355490896647447][6781 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:11:33][355490896647447][6843 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:11:33][355490896647447][6843 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:11:36][355490896647447][9858 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:11:36][355490896647447][9858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490896647447\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2519\"}'\'' -e'"" [2025-09-09 14:11:42][355490896647447][15779 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad2f9e86-fa89-4adf-87d4-360275920b25","id":"QR_ad2f9e86-fa89-4adf-87d4-360275920b25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:11:42][355490896647447][15935 ms][DEBUG] proc_open done in 6077 ms; code=255; res.len=3343 [2025-09-09 14:11:42][355490896647447][15935 ms][DEBUG] END runCmdUntilRes#2 in 6077 ms [2025-09-09 14:11:42][355490896647447][15935 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:12:03][353029497620437][0 ms][INFO] === Request start === [2025-09-09 14:12:03][353029497620437][1 ms][DEBUG] START check_scloud [2025-09-09 14:12:03][353029497620437][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:12:03][353029497620437][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22048 5018 23653944 126984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:12:03][353029497620437][314 ms][DEBUG] targetPkg: running [2025-09-09 14:12:03][353029497620437][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 14:12:03][353029497620437][314 ms][DEBUG] START check_boot_completed [2025-09-09 14:12:03][353029497620437][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:12:03][353029497620437][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:12:03][353029497620437][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:12:03][353029497620437][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:12:03][353029497620437][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:12:03][353029497620437][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:12:03][353029497620437][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2043\nsuccessfulTxPacketsPerSecond: 0.687808184585122\nretriedTxPackets: 473\nretriedTxPacketsPerSecond: 0.2359148845678438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1893\nsuccessfulRxPacketsPerSecond: 0.5881258389930754\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:12:03][353029497620437][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:12:05][353029497620437][1954 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.941/299.941/299.941/0.000 ms\n [2025-09-09 14:12:05][353029497620437][1954 ms][DEBUG] check_internet: online [2025-09-09 14:12:05][353029497620437][1954 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:12:05][353029497620437][1954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029497620437\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1949\"}'\'' -e'"" [2025-09-09 14:12:05][353029497620437][1954 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:12:05][353029497620437][1955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029497620437\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1949\"}'\'' -e'"" [2025-09-09 14:12:08][353029497620437][5531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4401020-9663-4463-94fb-16266976d34e","id":"QR_b4401020-9663-4463-94fb-16266976d34e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:12:08][353029497620437][5687 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 14:12:08][353029497620437][5687 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 14:12:08][353029497620437][5688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:12:11][353029497620437][0 ms][INFO] === Request start === [2025-09-09 14:12:11][353029497620437][1 ms][DEBUG] START check_scloud [2025-09-09 14:12:11][353029497620437][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:12:11][353029497620437][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 22048 5018 23817016 137760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:12:11][353029497620437][317 ms][DEBUG] targetPkg: running [2025-09-09 14:12:11][353029497620437][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 14:12:11][353029497620437][317 ms][DEBUG] START check_boot_completed [2025-09-09 14:12:11][353029497620437][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:12:11][353029497620437][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:12:11][353029497620437][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:12:11][353029497620437][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:12:11][353029497620437][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:12:11][353029497620437][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:12:11][353029497620437][520 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2043\nsuccessfulTxPacketsPerSecond: 0.687808184585122\nretriedTxPackets: 473\nretriedTxPacketsPerSecond: 0.2359148845678438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1893\nsuccessfulRxPacketsPerSecond: 0.5881258389930754\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:12:11][353029497620437][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:12:12][353029497620437][879 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.757/259.757/259.757/0.000 ms\n [2025-09-09 14:12:12][353029497620437][879 ms][DEBUG] check_internet: online [2025-09-09 14:12:12][353029497620437][879 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:12:12][353029497620437][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029497620437\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2522\"}'\'' -e'"" [2025-09-09 14:12:12][353029497620437][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:12:12][353029497620437][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029497620437\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2522\"}'\'' -e'"" [2025-09-09 14:12:17][353029497620437][5831 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16a0ffca-1f5d-4671-a6dc-772ee1e0d068","id":"QR_16a0ffca-1f5d-4671-a6dc-772ee1e0d068","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:12:17][353029497620437][5987 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 14:12:17][353029497620437][5987 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 14:12:17][353029497620437][5987 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:12:25][352288966894995][0 ms][INFO] === Request start === [2025-09-09 14:12:25][352288966894995][1 ms][DEBUG] START check_scloud [2025-09-09 14:12:25][352288966894995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:12:25][352288966894995][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22048 5018 23967772 149704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:12:25][352288966894995][305 ms][DEBUG] targetPkg: running [2025-09-09 14:12:25][352288966894995][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 14:12:25][352288966894995][305 ms][DEBUG] START check_boot_completed [2025-09-09 14:12:25][352288966894995][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:12:26][352288966894995][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:12:26][352288966894995][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:12:26][352288966894995][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:12:26][352288966894995][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:12:26][352288966894995][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:12:26][352288966894995][539 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2043\nsuccessfulTxPacketsPerSecond: 0.687808184585122\nretriedTxPackets: 473\nretriedTxPacketsPerSecond: 0.2359148845678438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1893\nsuccessfulRxPacketsPerSecond: 0.5881258389930754\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:12:26][352288966894995][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:12:26][352288966894995][992 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.752/316.752/316.752/0.000 ms\n [2025-09-09 14:12:26][352288966894995][992 ms][DEBUG] check_internet: online [2025-09-09 14:12:26][352288966894995][992 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:12:26][352288966894995][992 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3986\"}'\'' -e'"" [2025-09-09 14:12:26][352288966894995][993 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:12:26][352288966894995][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3986\"}'\'' -e'"" [2025-09-09 14:12:30][352288966894995][4398 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e7a5d5b-1292-456a-ab64-3ae9210107e8","id":"QR_7e7a5d5b-1292-456a-ab64-3ae9210107e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:12:30][352288966894995][4554 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-09 14:12:30][352288966894995][4554 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-09 14:12:30][352288966894995][4554 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:12:32][350048582179433][0 ms][INFO] === Request start === [2025-09-09 14:12:32][350048582179433][1 ms][DEBUG] START check_scloud [2025-09-09 14:12:32][350048582179433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:12:32][350048582179433][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 22048 5018 24114472 160352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:12:32][350048582179433][308 ms][DEBUG] targetPkg: running [2025-09-09 14:12:32][350048582179433][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 14:12:32][350048582179433][308 ms][DEBUG] START check_boot_completed [2025-09-09 14:12:32][350048582179433][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:12:32][350048582179433][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:12:32][350048582179433][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:12:32][350048582179433][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:12:32][350048582179433][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:12:32][350048582179433][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:12:32][350048582179433][495 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2043\nsuccessfulTxPacketsPerSecond: 0.687808184585122\nretriedTxPackets: 473\nretriedTxPacketsPerSecond: 0.2359148845678438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1893\nsuccessfulRxPacketsPerSecond: 0.5881258389930754\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:12:32][350048582179433][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:12:33][350048582179433][870 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.634/278.634/278.634/0.000 ms\n [2025-09-09 14:12:33][350048582179433][870 ms][DEBUG] check_internet: online [2025-09-09 14:12:33][350048582179433][871 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:12:33][350048582179433][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048582179433\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7640\"}'\'' -e'"" [2025-09-09 14:12:33][350048582179433][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:12:33][350048582179433][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048582179433\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7640\"}'\'' -e'"" [2025-09-09 14:12:36][350048582179433][4213 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fca3cfc-eb16-4572-8a83-03c5dc6bd048","id":"QR_5fca3cfc-eb16-4572-8a83-03c5dc6bd048","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:12:36][350048582179433][4369 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=3343 [2025-09-09 14:12:36][350048582179433][4369 ms][DEBUG] END runCmdUntilRes#1 in 3498 ms [2025-09-09 14:12:36][350048582179433][4369 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:12:38][350048582179433][0 ms][INFO] === Request start === [2025-09-09 14:12:38][350048582179433][1 ms][DEBUG] START check_scloud [2025-09-09 14:12:38][350048582179433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:12:39][350048582179433][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 22048 5018 24259148 172376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:12:39][350048582179433][308 ms][DEBUG] targetPkg: running [2025-09-09 14:12:39][350048582179433][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 14:12:39][350048582179433][309 ms][DEBUG] START check_boot_completed [2025-09-09 14:12:39][350048582179433][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:12:39][350048582179433][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:12:39][350048582179433][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:12:39][350048582179433][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:12:39][350048582179433][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:12:39][350048582179433][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:12:39][350048582179433][574 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2043\nsuccessfulTxPacketsPerSecond: 0.687808184585122\nretriedTxPackets: 473\nretriedTxPacketsPerSecond: 0.2359148845678438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1893\nsuccessfulRxPacketsPerSecond: 0.5881258389930754\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:12:39][350048582179433][574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:12:39][350048582179433][980 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.560/288.560/288.560/0.000 ms\n [2025-09-09 14:12:39][350048582179433][980 ms][DEBUG] check_internet: online [2025-09-09 14:12:39][350048582179433][980 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:12:39][350048582179433][980 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048582179433\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4043\"}'\'' -e'"" [2025-09-09 14:12:39][350048582179433][980 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:12:39][350048582179433][980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048582179433\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4043\"}'\'' -e'"" [2025-09-09 14:12:49][350048582179433][10743 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83a8953e-3fe2-44c1-b994-234261335e8c","id":"QR_83a8953e-3fe2-44c1-b994-234261335e8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:12:49][350048582179433][10899 ms][DEBUG] proc_open done in 9919 ms; code=255; res.len=3343 [2025-09-09 14:12:49][350048582179433][10899 ms][DEBUG] END runCmdUntilRes#1 in 9919 ms [2025-09-09 14:12:49][350048582179433][10900 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:14:04][352677530867034][1 ms][INFO] === Request start === [2025-09-09 14:14:04][352677530867034][1 ms][DEBUG] START check_scloud [2025-09-09 14:14:04][352677530867034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:14:04][352677530867034][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 22048 5018 24316572 183728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:14:04][352677530867034][310 ms][DEBUG] targetPkg: running [2025-09-09 14:14:04][352677530867034][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 14:14:04][352677530867034][310 ms][DEBUG] START check_boot_completed [2025-09-09 14:14:04][352677530867034][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:14:04][352677530867034][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:14:04][352677530867034][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:14:04][352677530867034][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:14:04][352677530867034][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:14:04][352677530867034][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:14:04][352677530867034][513 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2257\nsuccessfulTxPacketsPerSecond: 1.8215711476749432\nretriedTxPackets: 535\nretriedTxPacketsPerSecond: 0.5277449119432078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2069\nsuccessfulRxPacketsPerSecond: 1.4981145887420093\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:14:04][352677530867034][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:14:05][352677530867034][889 ms][DEBUG] SU: done in 376 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.558/272.558/272.558/0.000 ms\n [2025-09-09 14:14:05][352677530867034][889 ms][DEBUG] check_internet: online [2025-09-09 14:14:05][352677530867034][889 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:14:05][352677530867034][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530867034\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4419\"}'\'' -e'"" [2025-09-09 14:14:05][352677530867034][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:14:05][352677530867034][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530867034\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4419\"}'\'' -e'"" [2025-09-09 14:14:09][352677530867034][5808 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c940db5d-b8a2-48d7-9ffe-e42cddc6853e","id":"QR_c940db5d-b8a2-48d7-9ffe-e42cddc6853e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:14:10][352677530867034][5964 ms][DEBUG] proc_open done in 5075 ms; code=255; res.len=3343 [2025-09-09 14:14:10][352677530867034][5964 ms][DEBUG] END runCmdUntilRes#1 in 5075 ms [2025-09-09 14:14:10][352677530867034][5965 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:14:12][352677530867034][0 ms][INFO] === Request start === [2025-09-09 14:14:12][352677530867034][1 ms][DEBUG] START check_scloud [2025-09-09 14:14:12][352677530867034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:14:12][352677530867034][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 22048 5018 24493860 195472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:14:12][352677530867034][259 ms][DEBUG] targetPkg: running [2025-09-09 14:14:12][352677530867034][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 14:14:12][352677530867034][259 ms][DEBUG] START check_boot_completed [2025-09-09 14:14:12][352677530867034][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:14:12][352677530867034][288 ms][DEBUG] ADB: done in 29 ms; out [2025-09-09 14:14:12][352677530867034][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:14:12][352677530867034][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:14:12][352677530867034][335 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-09 14:14:12][352677530867034][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:14:12][352677530867034][444 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2257\nsuccessfulTxPacketsPerSecond: 1.8215711476749432\nretriedTxPackets: 535\nretriedTxPacketsPerSecond: 0.5277449119432078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2069\nsuccessfulRxPacketsPerSecond: 1.4981145887420093\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:14:12][352677530867034][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:14:13][352677530867034][834 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.883/253.883/253.883/0.000 ms\n [2025-09-09 14:14:13][352677530867034][834 ms][DEBUG] check_internet: online [2025-09-09 14:14:13][352677530867034][835 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:14:13][352677530867034][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530867034\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1835\"}'\'' -e'"" [2025-09-09 14:14:13][352677530867034][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:14:13][352677530867034][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530867034\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1835\"}'\'' -e'"" [2025-09-09 14:14:18][352677530867034][5490 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bea6c91-c2eb-4b59-955d-67c94187617d","id":"QR_0bea6c91-c2eb-4b59-955d-67c94187617d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:14:18][352677530867034][5646 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 14:14:18][352677530867034][5646 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 14:14:18][352677530867034][5646 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:15:04][352677531608452][1 ms][INFO] === Request start === [2025-09-09 14:15:04][352677531608452][1 ms][DEBUG] START check_scloud [2025-09-09 14:15:04][352677531608452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:15:04][352677531608452][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22048 5018 24603492 206404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:15:04][352677531608452][305 ms][DEBUG] targetPkg: running [2025-09-09 14:15:04][352677531608452][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 14:15:04][352677531608452][305 ms][DEBUG] START check_boot_completed [2025-09-09 14:15:04][352677531608452][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:15:04][352677531608452][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:15:04][352677531608452][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:15:04][352677531608452][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:15:04][352677531608452][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:15:04][352677531608452][383 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:15:04][352677531608452][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531608452\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4192\"}'\'' -e'"" [2025-09-09 14:15:04][352677531608452][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:15:04][352677531608452][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531608452\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4192\"}'\'' -e'"" [2025-09-09 14:15:07][352677531608452][3617 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae49eb25-8bdf-4bb6-b92a-85d4eb8187bf","id":"QR_ae49eb25-8bdf-4bb6-b92a-85d4eb8187bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:15:07][352677531608452][3773 ms][DEBUG] proc_open done in 3390 ms; code=255; res.len=3343 [2025-09-09 14:15:07][352677531608452][3773 ms][DEBUG] END runCmdUntilRes#1 in 3390 ms [2025-09-09 14:15:07][352677531608452][3773 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:15:10][352677531608452][0 ms][INFO] === Request start === [2025-09-09 14:15:10][352677531608452][1 ms][DEBUG] START check_scloud [2025-09-09 14:15:10][352677531608452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:15:10][352677531608452][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 22048 5018 24750188 218260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:15:10][352677531608452][258 ms][DEBUG] targetPkg: running [2025-09-09 14:15:10][352677531608452][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 14:15:10][352677531608452][258 ms][DEBUG] START check_boot_completed [2025-09-09 14:15:10][352677531608452][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:15:10][352677531608452][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:15:10][352677531608452][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:15:10][352677531608452][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:15:10][352677531608452][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:15:10][352677531608452][352 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:15:10][352677531608452][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531608452\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4822\"}'\'' -e'"" [2025-09-09 14:15:10][352677531608452][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:15:10][352677531608452][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531608452\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4822\"}'\'' -e'"" [2025-09-09 14:15:15][352677531608452][5038 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b5812b6-cc18-4b2f-838d-404329c4082f","id":"QR_8b5812b6-cc18-4b2f-838d-404329c4082f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:15:15][352677531608452][5194 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-09 14:15:15][352677531608452][5194 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-09 14:15:15][352677531608452][5194 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:15:19][354068191021046][0 ms][INFO] === Request start === [2025-09-09 14:15:19][354068191021046][1 ms][DEBUG] START check_scloud [2025-09-09 14:15:19][354068191021046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:15:19][354068191021046][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 22048 5018 24909172 229268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:15:19][354068191021046][324 ms][DEBUG] targetPkg: running [2025-09-09 14:15:19][354068191021046][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 14:15:19][354068191021046][324 ms][DEBUG] START check_boot_completed [2025-09-09 14:15:19][354068191021046][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:15:20][354068191021046][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:15:20][354068191021046][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:15:20][354068191021046][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:15:20][354068191021046][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:15:20][354068191021046][402 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:15:20][354068191021046][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191021046\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9957\"}'\'' -e'"" [2025-09-09 14:15:20][354068191021046][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:15:20][354068191021046][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191021046\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9957\"}'\'' -e'"" [2025-09-09 14:15:24][354068191021046][4994 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_258ac234-6fef-4ef3-8b33-f57188c5f5bc","id":"QR_258ac234-6fef-4ef3-8b33-f57188c5f5bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:15:24][354068191021046][5151 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-09 14:15:24][354068191021046][5151 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-09 14:15:24][354068191021046][5151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:15:27][354068191021046][0 ms][INFO] === Request start === [2025-09-09 14:15:27][354068191021046][1 ms][DEBUG] START check_scloud [2025-09-09 14:15:27][354068191021046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:15:27][354068191021046][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22048 5018 25074264 241408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:15:27][354068191021046][308 ms][DEBUG] targetPkg: running [2025-09-09 14:15:27][354068191021046][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 14:15:27][354068191021046][308 ms][DEBUG] START check_boot_completed [2025-09-09 14:15:27][354068191021046][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:15:27][354068191021046][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:15:27][354068191021046][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:15:27][354068191021046][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:15:27][354068191021046][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:15:27][354068191021046][402 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:15:27][354068191021046][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191021046\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8846\"}'\'' -e'"" [2025-09-09 14:15:27][354068191021046][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:15:27][354068191021046][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191021046\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8846\"}'\'' -e'"" [2025-09-09 14:15:31][354068191021046][4010 ms][DEBUG] proc_open done in 3608 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:15:31][354068191021046][4010 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-09 14:15:31][354068191021046][4010 ms][WARN] Detected error: Process with pid 22048 either refused to load frida-agent, or terminated during injectionProcess with pid 22048 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:15:31][354068191021046][4010 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:15:31][354068191021046][4307 ms][DEBUG] SU: done in 297 ms; outsystem 5446 5018 12835940 210228 ep_poll 0 S system_server\n [2025-09-09 14:15:31][354068191021046][4307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:15:31][354068191021046][4448 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:15:31][354068191021046][4448 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:15:31][354068191021046][4448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:15:31][354068191021046][4573 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:15:31][354068191021046][4573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:15:31][354068191021046][4729 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:15:33][354068191021046][6744 ms][DEBUG] START check_boot_completed [2025-09-09 14:15:33][354068191021046][6744 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:15:33][354068191021046][6791 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:15:33][354068191021046][6791 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:15:33][354068191021046][6838 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:15:33][354068191021046][6838 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:15:36][354068191021046][9853 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:15:36][354068191021046][9853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191021046\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8846\"}'\'' -e'"" [2025-09-09 14:15:42][354068191021046][15086 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6500250d-edc5-4b75-97eb-b9bc961d4c75","id":"QR_6500250d-edc5-4b75-97eb-b9bc961d4c75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:15:42][354068191021046][15242 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-09 14:15:42][354068191021046][15242 ms][DEBUG] END runCmdUntilRes#2 in 5390 ms [2025-09-09 14:15:42][354068191021046][15242 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:16:03][359468677831469][0 ms][INFO] === Request start === [2025-09-09 14:16:03][359468677831469][1 ms][DEBUG] START check_scloud [2025-09-09 14:16:03][359468677831469][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:16:03][359468677831469][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 23489 5018 23686292 126108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:16:03][359468677831469][302 ms][DEBUG] targetPkg: running [2025-09-09 14:16:03][359468677831469][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 14:16:03][359468677831469][302 ms][DEBUG] START check_boot_completed [2025-09-09 14:16:03][359468677831469][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:16:04][359468677831469][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:16:04][359468677831469][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:16:04][359468677831469][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:16:04][359468677831469][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:16:04][359468677831469][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:16:04][359468677831469][505 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2257\nsuccessfulTxPacketsPerSecond: 1.8215711476749432\nretriedTxPackets: 535\nretriedTxPacketsPerSecond: 0.5277449119432078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2069\nsuccessfulRxPacketsPerSecond: 1.4981145887420093\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:16:04][359468677831469][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:16:04][359468677831469][880 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.728/243.728/243.728/0.000 ms\n [2025-09-09 14:16:04][359468677831469][880 ms][DEBUG] check_internet: online [2025-09-09 14:16:04][359468677831469][880 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:16:04][359468677831469][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468677831469\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3409\"}'\'' -e'"" [2025-09-09 14:16:04][359468677831469][880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:16:04][359468677831469][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468677831469\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3409\"}'\'' -e'"" [2025-09-09 14:16:07][359468677831469][4097 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f0e55b4-40c9-42f4-b93b-8a53b30c5524","id":"QR_2f0e55b4-40c9-42f4-b93b-8a53b30c5524","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:16:07][359468677831469][4254 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=3343 [2025-09-09 14:16:07][359468677831469][4254 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-09 14:16:07][359468677831469][4254 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:16:10][359468677831469][1 ms][INFO] === Request start === [2025-09-09 14:16:10][359468677831469][1 ms][DEBUG] START check_scloud [2025-09-09 14:16:10][359468677831469][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:16:10][359468677831469][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 23489 5018 23843164 136824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:16:10][359468677831469][312 ms][DEBUG] targetPkg: running [2025-09-09 14:16:10][359468677831469][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 14:16:10][359468677831469][312 ms][DEBUG] START check_boot_completed [2025-09-09 14:16:10][359468677831469][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:16:10][359468677831469][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:16:10][359468677831469][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:16:10][359468677831469][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:16:10][359468677831469][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:16:10][359468677831469][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:16:10][359468677831469][531 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2257\nsuccessfulTxPacketsPerSecond: 1.8215711476749432\nretriedTxPackets: 535\nretriedTxPacketsPerSecond: 0.5277449119432078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2069\nsuccessfulRxPacketsPerSecond: 1.4981145887420093\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:16:10][359468677831469][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:16:11][359468677831469][1000 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.950/329.950/329.950/0.000 ms\n [2025-09-09 14:16:11][359468677831469][1000 ms][DEBUG] check_internet: online [2025-09-09 14:16:11][359468677831469][1000 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:16:11][359468677831469][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468677831469\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2770\"}'\'' -e'"" [2025-09-09 14:16:11][359468677831469][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:16:11][359468677831469][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468677831469\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2770\"}'\'' -e'"" [2025-09-09 14:16:15][359468677831469][5233 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e790bc4-e562-41f3-b39b-30521ddffa24","id":"QR_2e790bc4-e562-41f3-b39b-30521ddffa24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:16:15][359468677831469][5389 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 14:16:15][359468677831469][5389 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 14:16:15][359468677831469][5389 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:16:19][351272335397105][0 ms][INFO] === Request start === [2025-09-09 14:16:19][351272335397105][0 ms][DEBUG] START check_scloud [2025-09-09 14:16:19][351272335397105][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:16:20][351272335397105][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 23489 5018 23990848 148616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:16:20][351272335397105][306 ms][DEBUG] targetPkg: running [2025-09-09 14:16:20][351272335397105][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 14:16:20][351272335397105][306 ms][DEBUG] START check_boot_completed [2025-09-09 14:16:20][351272335397105][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:16:20][351272335397105][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:16:20][351272335397105][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:16:20][351272335397105][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:16:20][351272335397105][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:16:20][351272335397105][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:16:20][351272335397105][572 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2257\nsuccessfulTxPacketsPerSecond: 1.8215711476749432\nretriedTxPackets: 535\nretriedTxPacketsPerSecond: 0.5277449119432078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2069\nsuccessfulRxPacketsPerSecond: 1.4981145887420093\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:16:20][351272335397105][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:16:21][351272335397105][1900 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.704/302.704/302.704/0.000 ms\n [2025-09-09 14:16:21][351272335397105][1900 ms][DEBUG] check_internet: online [2025-09-09 14:16:21][351272335397105][1900 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:16:21][351272335397105][1900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335397105\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8013\"}'\'' -e'"" [2025-09-09 14:16:21][351272335397105][1900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:16:21][351272335397105][1900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335397105\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8013\"}'\'' -e'"" [2025-09-09 14:16:25][351272335397105][5664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59d535b8-37fb-40e8-aca8-0c22efac839c","id":"QR_59d535b8-37fb-40e8-aca8-0c22efac839c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:16:25][351272335397105][5820 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-09 14:16:25][351272335397105][5820 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-09 14:16:25][351272335397105][5820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:16:27][351272335397105][0 ms][INFO] === Request start === [2025-09-09 14:16:27][351272335397105][1 ms][DEBUG] START check_scloud [2025-09-09 14:16:27][351272335397105][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:16:28][351272335397105][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 23489 5018 24126052 159900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:16:28][351272335397105][321 ms][DEBUG] targetPkg: running [2025-09-09 14:16:28][351272335397105][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 14:16:28][351272335397105][322 ms][DEBUG] START check_boot_completed [2025-09-09 14:16:28][351272335397105][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:16:28][351272335397105][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:16:28][351272335397105][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:16:28][351272335397105][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:16:28][351272335397105][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:16:28][351272335397105][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:16:28][351272335397105][540 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2257\nsuccessfulTxPacketsPerSecond: 1.8215711476749432\nretriedTxPackets: 535\nretriedTxPacketsPerSecond: 0.5277449119432078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2069\nsuccessfulRxPacketsPerSecond: 1.4981145887420093\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:16:28][351272335397105][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:16:28][351272335397105][868 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.194/224.194/224.194/0.000 ms\n [2025-09-09 14:16:28][351272335397105][868 ms][DEBUG] check_internet: online [2025-09-09 14:16:28][351272335397105][868 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:16:28][351272335397105][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335397105\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5416\"}'\'' -e'"" [2025-09-09 14:16:28][351272335397105][868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:16:28][351272335397105][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335397105\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5416\"}'\'' -e'"" [2025-09-09 14:16:33][351272335397105][5304 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01ee34f5-7072-4c7c-b1df-1edd12fcc635","id":"QR_01ee34f5-7072-4c7c-b1df-1edd12fcc635","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:16:33][351272335397105][5461 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 14:16:33][351272335397105][5461 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-09-09 14:16:33][351272335397105][5461 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:17:03][350828944871490][0 ms][INFO] === Request start === [2025-09-09 14:17:03][350828944871490][1 ms][DEBUG] START check_scloud [2025-09-09 14:17:03][350828944871490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:17:04][350828944871490][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 23489 5018 24237700 171384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:17:04][350828944871490][325 ms][DEBUG] targetPkg: running [2025-09-09 14:17:04][350828944871490][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 14:17:04][350828944871490][325 ms][DEBUG] START check_boot_completed [2025-09-09 14:17:04][350828944871490][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:17:04][350828944871490][372 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:17:04][350828944871490][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:17:04][350828944871490][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:17:04][350828944871490][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:17:04][350828944871490][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:17:04][350828944871490][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828944871490\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8250\"}'\'' -e'"" [2025-09-09 14:17:04][350828944871490][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:17:04][350828944871490][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828944871490\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8250\"}'\'' -e'"" [2025-09-09 14:17:07][350828944871490][3918 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_590d545a-c5ef-4987-b053-44fce6f90d74","id":"QR_590d545a-c5ef-4987-b053-44fce6f90d74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:17:07][350828944871490][4074 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-09 14:17:07][350828944871490][4074 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 14:17:07][350828944871490][4074 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:17:10][350828944871490][0 ms][INFO] === Request start === [2025-09-09 14:17:10][350828944871490][1 ms][DEBUG] START check_scloud [2025-09-09 14:17:10][350828944871490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:17:10][350828944871490][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 23489 5018 24386316 182224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:17:10][350828944871490][303 ms][DEBUG] targetPkg: running [2025-09-09 14:17:10][350828944871490][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 14:17:10][350828944871490][304 ms][DEBUG] START check_boot_completed [2025-09-09 14:17:10][350828944871490][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:17:10][350828944871490][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:17:10][350828944871490][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:17:10][350828944871490][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:17:10][350828944871490][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:17:10][350828944871490][397 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:17:10][350828944871490][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828944871490\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2225\"}'\'' -e'"" [2025-09-09 14:17:10][350828944871490][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:17:10][350828944871490][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828944871490\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2225\"}'\'' -e'"" [2025-09-09 14:17:16][350828944871490][6333 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_917be139-e01a-4e1e-ae86-05495c481b15","id":"QR_917be139-e01a-4e1e-ae86-05495c481b15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:17:16][350828944871490][6489 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=3343 [2025-09-09 14:17:16][350828944871490][6489 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-09 14:17:16][350828944871490][6489 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:18:03][352665182197594][0 ms][INFO] === Request start === [2025-09-09 14:18:03][352665182197594][1 ms][DEBUG] START check_scloud [2025-09-09 14:18:03][352665182197594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:18:03][352665182197594][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23489 5018 24484672 194932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:18:03][352665182197594][310 ms][DEBUG] targetPkg: running [2025-09-09 14:18:03][352665182197594][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 14:18:03][352665182197594][310 ms][DEBUG] START check_boot_completed [2025-09-09 14:18:03][352665182197594][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:18:03][352665182197594][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:18:03][352665182197594][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:18:03][352665182197594][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:18:03][352665182197594][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:18:03][352665182197594][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:18:03][352665182197594][576 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2580\nsuccessfulTxPacketsPerSecond: 1.0620528198653199\nretriedTxPackets: 634\nretriedTxPacketsPerSecond: 0.3255208333333333\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2335\nsuccessfulRxPacketsPerSecond: 0.874631734006734\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:18:03][352665182197594][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:18:04][352665182197594][966 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.882/272.882/272.882/0.000 ms\n [2025-09-09 14:18:04][352665182197594][966 ms][DEBUG] check_internet: online [2025-09-09 14:18:04][352665182197594][966 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:18:04][352665182197594][966 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182197594\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7235\"}'\'' -e'"" [2025-09-09 14:18:04][352665182197594][966 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:18:04][352665182197594][966 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182197594\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7235\"}'\'' -e'"" [2025-09-09 14:18:08][352665182197594][5481 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d43ea203-847c-4d56-a772-c69ddfd04909","id":"QR_d43ea203-847c-4d56-a772-c69ddfd04909","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:18:08][352665182197594][5637 ms][DEBUG] proc_open done in 4671 ms; code=255; res.len=3343 [2025-09-09 14:18:08][352665182197594][5637 ms][DEBUG] END runCmdUntilRes#1 in 4671 ms [2025-09-09 14:18:08][352665182197594][5637 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:18:11][352665182197594][1 ms][INFO] === Request start === [2025-09-09 14:18:11][352665182197594][1 ms][DEBUG] START check_scloud [2025-09-09 14:18:11][352665182197594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:18:11][352665182197594][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 23489 5018 24612872 205828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:18:11][352665182197594][312 ms][DEBUG] targetPkg: running [2025-09-09 14:18:11][352665182197594][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 14:18:11][352665182197594][312 ms][DEBUG] START check_boot_completed [2025-09-09 14:18:11][352665182197594][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:18:11][352665182197594][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:18:11][352665182197594][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:18:11][352665182197594][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:18:11][352665182197594][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:18:11][352665182197594][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:18:11][352665182197594][500 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2580\nsuccessfulTxPacketsPerSecond: 1.0620528198653199\nretriedTxPackets: 634\nretriedTxPacketsPerSecond: 0.3255208333333333\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2335\nsuccessfulRxPacketsPerSecond: 0.874631734006734\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:18:11][352665182197594][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:18:12][352665182197594][874 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.310/282.310/282.310/0.000 ms\n [2025-09-09 14:18:12][352665182197594][874 ms][DEBUG] check_internet: online [2025-09-09 14:18:12][352665182197594][874 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:18:12][352665182197594][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182197594\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8146\"}'\'' -e'"" [2025-09-09 14:18:12][352665182197594][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:18:12][352665182197594][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182197594\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8146\"}'\'' -e'"" [2025-09-09 14:18:16][352665182197594][5420 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75dac291-4dcb-4449-88af-6249aaee72e8","id":"QR_75dac291-4dcb-4449-88af-6249aaee72e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:18:16][352665182197594][5576 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 14:18:16][352665182197594][5576 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 14:18:16][352665182197594][5576 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:20:04][350805650586157][0 ms][INFO] === Request start === [2025-09-09 14:20:04][350805650586157][1 ms][DEBUG] START check_scloud [2025-09-09 14:20:04][350805650586157][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:20:04][350805650586157][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 23489 5018 24704072 217548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:20:04][350805650586157][275 ms][DEBUG] targetPkg: running [2025-09-09 14:20:04][350805650586157][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 14:20:04][350805650586157][275 ms][DEBUG] START check_boot_completed [2025-09-09 14:20:04][350805650586157][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:20:04][350805650586157][306 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:20:04][350805650586157][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:20:04][350805650586157][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:20:04][350805650586157][353 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:20:04][350805650586157][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:20:04][350805650586157][462 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2642\nsuccessfulTxPacketsPerSecond: 0.5372710098961854\nretriedTxPackets: 652\nretriedTxPacketsPerSecond: 0.15598190609889254\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2386\nsuccessfulRxPacketsPerSecond: 0.4419487339468622\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:20:04][350805650586157][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:20:04][350805650586157][837 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.127/257.127/257.127/0.000 ms\n [2025-09-09 14:20:04][350805650586157][837 ms][DEBUG] check_internet: online [2025-09-09 14:20:04][350805650586157][837 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:20:04][350805650586157][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650586157\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1794\"}'\'' -e'"" [2025-09-09 14:20:05][350805650586157][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:20:05][350805650586157][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650586157\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1794\"}'\'' -e'"" [2025-09-09 14:20:10][350805650586157][5883 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3b9943b-adbe-415f-bddc-f0da47cb5991","id":"QR_b3b9943b-adbe-415f-bddc-f0da47cb5991","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:20:10][350805650586157][6039 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 14:20:10][350805650586157][6039 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 14:20:10][350805650586157][6039 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:20:12][350805650586157][1 ms][INFO] === Request start === [2025-09-09 14:20:12][350805650586157][1 ms][DEBUG] START check_scloud [2025-09-09 14:20:12][350805650586157][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:20:12][350805650586157][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 23489 5018 24869072 226740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:20:12][350805650586157][259 ms][DEBUG] targetPkg: running [2025-09-09 14:20:12][350805650586157][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 14:20:12][350805650586157][259 ms][DEBUG] START check_boot_completed [2025-09-09 14:20:12][350805650586157][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:20:12][350805650586157][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:20:12][350805650586157][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:20:12][350805650586157][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:20:12][350805650586157][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:20:12][350805650586157][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:20:12][350805650586157][462 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30937 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2642\nsuccessfulTxPacketsPerSecond: 0.5372710098961854\nretriedTxPackets: 652\nretriedTxPacketsPerSecond: 0.15598190609889254\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2386\nsuccessfulRxPacketsPerSecond: 0.4419487339468622\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:20:12][350805650586157][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:20:13][350805650586157][837 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.082/267.082/267.082/0.000 ms\n [2025-09-09 14:20:13][350805650586157][837 ms][DEBUG] check_internet: online [2025-09-09 14:20:13][350805650586157][837 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:20:13][350805650586157][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650586157\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7500\"}'\'' -e'"" [2025-09-09 14:20:13][350805650586157][837 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:20:13][350805650586157][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650586157\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7500\"}'\'' -e'"" [2025-09-09 14:20:19][350805650586157][6914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f0c9771-4b7f-4ee2-b50b-2498a45f485e","id":"QR_4f0c9771-4b7f-4ee2-b50b-2498a45f485e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:20:19][350805650586157][7070 ms][DEBUG] proc_open done in 6233 ms; code=255; res.len=3343 [2025-09-09 14:20:19][350805650586157][7070 ms][DEBUG] END runCmdUntilRes#1 in 6233 ms [2025-09-09 14:20:19][350805650586157][7070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:21:04][358104902563707][1 ms][INFO] === Request start === [2025-09-09 14:21:04][358104902563707][1 ms][DEBUG] START check_scloud [2025-09-09 14:21:04][358104902563707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:21:04][358104902563707][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 23489 5018 24964496 202968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:21:04][358104902563707][325 ms][DEBUG] targetPkg: running [2025-09-09 14:21:04][358104902563707][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 14:21:04][358104902563707][325 ms][DEBUG] START check_boot_completed [2025-09-09 14:21:04][358104902563707][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:21:04][358104902563707][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:21:04][358104902563707][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:21:04][358104902563707][420 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 14:21:04][358104902563707][420 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:21:04][358104902563707][420 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:21:04][358104902563707][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6879\"}'\'' -e'"" [2025-09-09 14:21:04][358104902563707][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:21:04][358104902563707][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6879\"}'\'' -e'"" [2025-09-09 14:21:12][358104902563707][8525 ms][DEBUG] proc_open done in 8105 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:21:12][358104902563707][8526 ms][DEBUG] END runCmdUntilRes#1 in 8105 ms [2025-09-09 14:21:12][358104902563707][8526 ms][WARN] Detected error: Process with pid 23489 either refused to load frida-agent, or terminated during injectionProcess with pid 23489 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:21:12][358104902563707][8526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:21:12][358104902563707][8822 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 14:21:12][358104902563707][8823 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:21:12][358104902563707][8994 ms][DEBUG] SU: done in 172 ms; out [2025-09-09 14:21:12][358104902563707][8994 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:21:12][358104902563707][8995 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:21:13][358104902563707][9463 ms][DEBUG] SU: done in 468 ms; out [2025-09-09 14:21:13][358104902563707][9463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:21:13][358104902563707][9760 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 14:21:15][358104902563707][11775 ms][DEBUG] START check_boot_completed [2025-09-09 14:21:15][358104902563707][11775 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:21:15][358104902563707][11822 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:21:15][358104902563707][11822 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:21:15][358104902563707][11884 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:21:15][358104902563707][11884 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 14:21:18][358104902563707][14899 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:21:18][358104902563707][14899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6879\"}'\'' -e'"" [2025-09-09 14:21:20][358104902563707][16274 ms][DEBUG] proc_open done in 1375 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 14:21:20][358104902563707][16274 ms][DEBUG] END runCmdUntilRes#2 in 1375 ms [2025-09-09 14:21:20][358104902563707][16274 ms][WARN] Detected error 2; Reboot the device [2025-09-09 14:21:20][358104902563707][16274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:21:20][358104902563707][16539 ms][DEBUG] SU: done in 265 ms; outsystem 26278 25945 7433320 127640 binder_ioctl 0 R system_server\n [2025-09-09 14:21:20][358104902563707][16539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 14:21:21][358104902563707][17164 ms][DEBUG] SU: done in 625 ms; out [2025-09-09 14:22:04][358104902563707][0 ms][INFO] === Request start === [2025-09-09 14:22:04][358104902563707][1 ms][DEBUG] START check_scloud [2025-09-09 14:22:04][358104902563707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:22:04][358104902563707][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-09 14:22:04][358104902563707][43 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:22:04][358104902563707][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 14:22:04][358104902563707][74 ms][WARN] check_devices: no device [2025-09-09 14:22:04][358104902563707][74 ms][WARN] check_devices: no device [2025-09-09 14:22:04][358104902563707][74 ms][DEBUG] END check_scloud in 74 ms [2025-09-09 14:23:03][358104902563707][1 ms][INFO] === Request start === [2025-09-09 14:23:03][358104902563707][1 ms][DEBUG] START check_scloud [2025-09-09 14:23:03][358104902563707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:23:03][358104902563707][383 ms][DEBUG] SU: done in 382 ms; out [2025-09-09 14:23:03][358104902563707][383 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:23:03][358104902563707][414 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 14:23:03][358104902563707][414 ms][DEBUG] check_devices: device found [2025-09-09 14:23:03][358104902563707][414 ms][WARN] targetPkg: not running, restarting [2025-09-09 14:23:03][358104902563707][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:23:03][358104902563707][539 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:23:03][358104902563707][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:23:04][358104902563707][805 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:23:06][358104902563707][2820 ms][DEBUG] END check_scloud in 2819 ms [2025-09-09 14:23:06][358104902563707][2820 ms][DEBUG] START check_boot_completed [2025-09-09 14:23:06][358104902563707][2820 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:23:06][358104902563707][2867 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:23:06][358104902563707][2867 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:23:06][358104902563707][2929 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:23:06][358104902563707][2929 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:23:06][358104902563707][2929 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:23:06][358104902563707][2929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1436\"}'\'' -e'"" [2025-09-09 14:23:06][358104902563707][2929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:23:06][358104902563707][2929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1436\"}'\'' -e'"" [2025-09-09 14:23:12][358104902563707][9662 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 14:23:13][358104902563707][9818 ms][DEBUG] proc_open done in 6889 ms; code=255; res.len=115 [2025-09-09 14:23:13][358104902563707][9819 ms][DEBUG] END runCmdUntilRes#1 in 6889 ms [2025-09-09 14:23:13][358104902563707][9819 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 14:23:13][][0 ms][INFO] === Request start === [2025-09-09 14:23:13][][1 ms][DEBUG] START check_scloud [2025-09-09 14:23:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:23:13][][332 ms][DEBUG] SU: done in 332 ms; outu0_a118 11355 4968 23678948 114984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:23:13][][333 ms][DEBUG] targetPkg: running [2025-09-09 14:23:13][][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-09 14:23:13][][333 ms][DEBUG] START check_boot_completed [2025-09-09 14:23:13][][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:23:13][][379 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:23:13][][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:23:13][][427 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:23:13][][427 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:23:13][][427 ms][DEBUG] rawBody.length=1131 [2025-09-09 14:23:13][][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B33XR\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6876\"}'\'' -e'"" [2025-09-09 14:23:13][][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:23:13][][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B33XR\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6876\"}'\'' -e'"" [2025-09-09 14:23:17][][4050 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-09 14:23:17][][4206 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=115 [2025-09-09 14:23:17][][4206 ms][DEBUG] END runCmdUntilRes#1 in 3779 ms [2025-09-09 14:23:17][][4206 ms][INFO] SUCCESS response from frida (len=115) [2025-09-09 14:23:19][358104902563707][0 ms][INFO] === Request start === [2025-09-09 14:23:19][358104902563707][1 ms][DEBUG] START check_scloud [2025-09-09 14:23:19][358104902563707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:23:19][358104902563707][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 11355 4968 23811308 117584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:23:19][358104902563707][303 ms][DEBUG] targetPkg: running [2025-09-09 14:23:19][358104902563707][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 14:23:19][358104902563707][303 ms][DEBUG] START check_boot_completed [2025-09-09 14:23:19][358104902563707][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:23:19][358104902563707][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:23:19][358104902563707][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:23:19][358104902563707][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:23:19][358104902563707][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:23:19][358104902563707][413 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:23:19][358104902563707][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1697\"}'\'' -e'"" [2025-09-09 14:23:19][358104902563707][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:23:19][358104902563707][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1697\"}'\'' -e'"" [2025-09-09 14:23:25][358104902563707][5864 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9d8ac93-aad2-41b5-a266-bc704e5cc8f6","id":"QR_c9d8ac93-aad2-41b5-a266-bc704e5cc8f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:23:25][358104902563707][6020 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-09 14:23:25][358104902563707][6020 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 14:23:25][358104902563707][6020 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:23:29][350299947759969][0 ms][INFO] === Request start === [2025-09-09 14:23:29][350299947759969][1 ms][DEBUG] START check_scloud [2025-09-09 14:23:29][350299947759969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:23:29][350299947759969][442 ms][DEBUG] SU: done in 441 ms; outu0_a118 11355 4968 23950812 107344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:23:29][350299947759969][442 ms][DEBUG] targetPkg: running [2025-09-09 14:23:29][350299947759969][442 ms][DEBUG] END check_scloud in 442 ms [2025-09-09 14:23:29][350299947759969][442 ms][DEBUG] START check_boot_completed [2025-09-09 14:23:29][350299947759969][443 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:23:30][350299947759969][489 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:23:30][350299947759969][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:23:30][350299947759969][536 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:23:30][350299947759969][536 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:23:30][350299947759969][536 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:23:30][350299947759969][536 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947759969\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8133\"}'\'' -e'"" [2025-09-09 14:23:30][350299947759969][536 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:23:30][350299947759969][536 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947759969\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8133\"}'\'' -e'"" [2025-09-09 14:23:33][350299947759969][4129 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8b0e69d-12c1-4e08-a0a2-cbf920d0f9b8","id":"QR_e8b0e69d-12c1-4e08-a0a2-cbf920d0f9b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:23:33][350299947759969][4285 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-09 14:23:33][350299947759969][4285 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-09 14:23:33][350299947759969][4285 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:23:36][350299947759969][0 ms][INFO] === Request start === [2025-09-09 14:23:36][350299947759969][1 ms][DEBUG] START check_scloud [2025-09-09 14:23:36][350299947759969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:23:36][350299947759969][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 11355 4968 24023312 107300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:23:36][350299947759969][289 ms][DEBUG] targetPkg: running [2025-09-09 14:23:36][350299947759969][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 14:23:36][350299947759969][289 ms][DEBUG] START check_boot_completed [2025-09-09 14:23:36][350299947759969][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:23:36][350299947759969][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:23:36][350299947759969][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:23:36][350299947759969][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:23:36][350299947759969][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:23:36][350299947759969][368 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:23:36][350299947759969][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947759969\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7622\"}'\'' -e'"" [2025-09-09 14:23:36][350299947759969][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:23:36][350299947759969][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947759969\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7622\"}'\'' -e'"" [2025-09-09 14:23:41][350299947759969][5616 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47abe4da-0e97-48dd-91eb-61eed0193abe","id":"QR_47abe4da-0e97-48dd-91eb-61eed0193abe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:23:41][350299947759969][5772 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-09 14:23:41][350299947759969][5772 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-09 14:23:41][350299947759969][5772 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:24:03][356990911930545][0 ms][INFO] === Request start === [2025-09-09 14:24:03][356990911930545][1 ms][DEBUG] START check_scloud [2025-09-09 14:24:03][356990911930545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:24:03][356990911930545][274 ms][DEBUG] SU: done in 273 ms; out [2025-09-09 14:24:03][356990911930545][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:24:03][356990911930545][321 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 14:24:03][356990911930545][321 ms][DEBUG] check_devices: device found [2025-09-09 14:24:03][356990911930545][321 ms][WARN] targetPkg: not running, restarting [2025-09-09 14:24:03][356990911930545][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:24:03][356990911930545][477 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 14:24:03][356990911930545][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:24:04][356990911930545][821 ms][DEBUG] SU: done in 344 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:24:06][356990911930545][2836 ms][DEBUG] END check_scloud in 2835 ms [2025-09-09 14:24:06][356990911930545][2836 ms][DEBUG] START check_boot_completed [2025-09-09 14:24:06][356990911930545][2836 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:24:06][356990911930545][2883 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:24:06][356990911930545][2883 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:24:06][356990911930545][2930 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:24:06][356990911930545][2930 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:24:06][356990911930545][2930 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:24:06][356990911930545][3039 ms][DEBUG] SU: done in 109 ms; outWifi is disabled\nWifi scanning is only available when wifi is enabled\n [2025-09-09 14:24:06][356990911930545][3039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:24:06][356990911930545][3148 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 14:24:06][356990911930545][3148 ms][WARN] check_internet: offline [2025-09-09 14:25:03][356990911930545][0 ms][INFO] === Request start === [2025-09-09 14:25:03][356990911930545][1 ms][DEBUG] START check_scloud [2025-09-09 14:25:03][356990911930545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:25:04][356990911930545][265 ms][DEBUG] SU: done in 264 ms; out [2025-09-09 14:25:04][356990911930545][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:25:04][356990911930545][310 ms][DEBUG] ADB: done in 45 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 14:25:04][356990911930545][310 ms][DEBUG] check_devices: device found [2025-09-09 14:25:04][356990911930545][310 ms][WARN] targetPkg: not running, restarting [2025-09-09 14:25:04][356990911930545][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:25:04][356990911930545][420 ms][DEBUG] SU: done in 111 ms; out [2025-09-09 14:25:04][356990911930545][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:25:04][356990911930545][577 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:25:06][356990911930545][2590 ms][DEBUG] END check_scloud in 2590 ms [2025-09-09 14:25:06][356990911930545][2590 ms][DEBUG] START check_boot_completed [2025-09-09 14:25:06][356990911930545][2590 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:25:06][356990911930545][2637 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:25:06][356990911930545][2637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:25:06][356990911930545][2700 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:25:06][356990911930545][2700 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 14:25:06][356990911930545][2700 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:25:06][356990911930545][2700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990911930545\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2644\"}'\'' -e'"" [2025-09-09 14:25:06][356990911930545][2700 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:25:06][356990911930545][2700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990911930545\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2644\"}'\'' -e'"" [2025-09-09 14:25:09][356990911930545][5215 ms][DEBUG] proc_open done in 2514 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-09 14:25:09][356990911930545][5215 ms][DEBUG] END runCmdUntilRes#1 in 2515 ms [2025-09-09 14:25:09][356990911930545][5215 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-09 14:25:09][356990911930545][5215 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:25:09][356990911930545][5512 ms][DEBUG] SU: done in 297 ms; outsystem 16692 16492 11232768 284732 ep_poll 0 S system_server\n [2025-09-09 14:25:09][356990911930545][5512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:25:09][356990911930545][5652 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:25:09][356990911930545][5652 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:25:09][356990911930545][5652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:25:09][356990911930545][5793 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:25:09][356990911930545][5793 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:25:09][356990911930545][5950 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:25:11][356990911930545][7964 ms][DEBUG] START check_boot_completed [2025-09-09 14:25:11][356990911930545][7964 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:25:11][356990911930545][8011 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:25:11][356990911930545][8011 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:25:11][356990911930545][8073 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:25:11][356990911930545][8073 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:25:14][356990911930545][11088 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:25:14][356990911930545][11088 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990911930545\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2644\"}'\'' -e'"" [2025-09-09 14:25:16][356990911930545][12994 ms][DEBUG] proc_open done in 1906 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-09 14:25:16][356990911930545][12994 ms][DEBUG] END runCmdUntilRes#2 in 1906 ms [2025-09-09 14:25:16][356990911930545][12994 ms][WARN] Detected error 2; Reboot the device [2025-09-09 14:25:16][356990911930545][12994 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:25:17][356990911930545][13244 ms][DEBUG] SU: done in 250 ms; outsystem 16692 16492 11215284 281624 ep_poll 0 S system_server\n [2025-09-09 14:25:17][356990911930545][13244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 14:25:18][356990911930545][14712 ms][DEBUG] SU: done in 1468 ms; out [2025-09-09 14:26:02][356990911930545][1 ms][INFO] === Request start === [2025-09-09 14:26:02][356990911930545][1 ms][DEBUG] START check_scloud [2025-09-09 14:26:02][356990911930545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:26:02][356990911930545][37 ms][DEBUG] SU: done in 36 ms; out [2025-09-09 14:26:02][356990911930545][38 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:26:02][356990911930545][69 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 14:26:02][356990911930545][69 ms][WARN] check_devices: no device [2025-09-09 14:26:02][356990911930545][69 ms][WARN] check_devices: no device [2025-09-09 14:26:02][356990911930545][69 ms][DEBUG] END check_scloud in 68 ms [2025-09-09 14:26:05][356414815064103][0 ms][INFO] === Request start === [2025-09-09 14:26:05][356414815064103][1 ms][DEBUG] START check_scloud [2025-09-09 14:26:05][356414815064103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:26:06][356414815064103][35 ms][DEBUG] SU: done in 34 ms; out [2025-09-09 14:26:06][356414815064103][35 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:26:06][356414815064103][67 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 14:26:06][356414815064103][67 ms][WARN] check_devices: no device [2025-09-09 14:26:06][356414815064103][67 ms][WARN] check_devices: no device [2025-09-09 14:26:06][356414815064103][67 ms][DEBUG] END check_scloud in 66 ms [2025-09-09 14:27:03][356990911930545][0 ms][INFO] === Request start === [2025-09-09 14:27:03][356990911930545][1 ms][DEBUG] START check_scloud [2025-09-09 14:27:03][356990911930545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:27:04][356990911930545][614 ms][DEBUG] SU: done in 613 ms; out [2025-09-09 14:27:04][356990911930545][614 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:27:04][356990911930545][645 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 14:27:04][356990911930545][645 ms][DEBUG] check_devices: device found [2025-09-09 14:27:04][356990911930545][646 ms][WARN] targetPkg: not running, restarting [2025-09-09 14:27:04][356990911930545][646 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:27:04][356990911930545][771 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:27:04][356990911930545][771 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:27:04][356990911930545][1083 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:27:06][356990911930545][3098 ms][DEBUG] END check_scloud in 3097 ms [2025-09-09 14:27:06][356990911930545][3098 ms][DEBUG] START check_boot_completed [2025-09-09 14:27:06][356990911930545][3098 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:27:07][356990911930545][3145 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:27:07][356990911930545][3145 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:27:07][356990911930545][3223 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 14:27:07][356990911930545][3223 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 14:27:07][356990911930545][3223 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:27:07][356990911930545][3223 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990911930545\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4286\"}'\'' -e'"" [2025-09-09 14:27:07][356990911930545][3223 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:27:07][356990911930545][3223 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990911930545\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4286\"}'\'' -e'"" [2025-09-09 14:27:13][356990911930545][10081 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b31c06c8-63b6-422e-83b9-85ec57268fc7","id":"QR_b31c06c8-63b6-422e-83b9-85ec57268fc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:27:14][356990911930545][10237 ms][DEBUG] proc_open done in 7014 ms; code=255; res.len=3343 [2025-09-09 14:27:14][356990911930545][10237 ms][DEBUG] END runCmdUntilRes#1 in 7014 ms [2025-09-09 14:27:14][356990911930545][10237 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:27:16][356990911930545][0 ms][INFO] === Request start === [2025-09-09 14:27:16][356990911930545][1 ms][DEBUG] START check_scloud [2025-09-09 14:27:16][356990911930545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:27:16][356990911930545][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 11473 4973 23827456 102876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:27:16][356990911930545][323 ms][DEBUG] targetPkg: running [2025-09-09 14:27:16][356990911930545][323 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 14:27:16][356990911930545][323 ms][DEBUG] START check_boot_completed [2025-09-09 14:27:16][356990911930545][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:27:16][356990911930545][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:27:16][356990911930545][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:27:16][356990911930545][433 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:27:16][356990911930545][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:27:16][356990911930545][433 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:27:16][356990911930545][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990911930545\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4784\"}'\'' -e'"" [2025-09-09 14:27:16][356990911930545][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:27:16][356990911930545][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990911930545\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4784\"}'\'' -e'"" [2025-09-09 14:27:22][356990911930545][6212 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8573809c-0226-4b1f-890c-1a1167989e5c","id":"QR_8573809c-0226-4b1f-890c-1a1167989e5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:27:22][356990911930545][6368 ms][DEBUG] proc_open done in 5935 ms; code=255; res.len=3343 [2025-09-09 14:27:22][356990911930545][6368 ms][DEBUG] END runCmdUntilRes#1 in 5935 ms [2025-09-09 14:27:22][356990911930545][6368 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:27:27][356414815064103][0 ms][INFO] === Request start === [2025-09-09 14:27:27][356414815064103][1 ms][DEBUG] START check_scloud [2025-09-09 14:27:27][356414815064103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:27:27][356414815064103][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 11473 4973 23983316 91672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:27:27][356414815064103][340 ms][DEBUG] targetPkg: running [2025-09-09 14:27:27][356414815064103][340 ms][DEBUG] END check_scloud in 339 ms [2025-09-09 14:27:27][356414815064103][340 ms][DEBUG] START check_boot_completed [2025-09-09 14:27:27][356414815064103][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:27:27][356414815064103][387 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:27:27][356414815064103][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:27:27][356414815064103][449 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:27:27][356414815064103][449 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:27:27][356414815064103][449 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:27:27][356414815064103][449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815064103\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9980\"}'\'' -e'"" [2025-09-09 14:27:27][356414815064103][449 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:27:27][356414815064103][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815064103\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9980\"}'\'' -e'"" [2025-09-09 14:27:31][356414815064103][4698 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d46781c9-d491-471e-8088-e4d8d7fb5eec","id":"QR_d46781c9-d491-471e-8088-e4d8d7fb5eec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:27:31][356414815064103][4854 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-09 14:27:31][356414815064103][4854 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-09 14:27:31][356414815064103][4854 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:27:34][356414815064103][0 ms][INFO] === Request start === [2025-09-09 14:27:34][356414815064103][1 ms][DEBUG] START check_scloud [2025-09-09 14:27:34][356414815064103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:27:34][356414815064103][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 11473 4973 24142200 86576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:27:34][356414815064103][299 ms][DEBUG] targetPkg: running [2025-09-09 14:27:34][356414815064103][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 14:27:34][356414815064103][299 ms][DEBUG] START check_boot_completed [2025-09-09 14:27:34][356414815064103][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:27:34][356414815064103][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:27:34][356414815064103][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:27:34][356414815064103][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:27:34][356414815064103][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:27:34][356414815064103][409 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:27:34][356414815064103][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815064103\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7008\"}'\'' -e'"" [2025-09-09 14:27:34][356414815064103][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:27:34][356414815064103][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815064103\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7008\"}'\'' -e'"" [2025-09-09 14:27:39][356414815064103][5392 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eca1085b-3a9f-4d43-b82c-19d28c4f7c89","id":"QR_eca1085b-3a9f-4d43-b82c-19d28c4f7c89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:27:39][356414815064103][5548 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-09 14:27:39][356414815064103][5548 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-09 14:27:39][356414815064103][5548 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:30:03][351828118400448][1 ms][INFO] === Request start === [2025-09-09 14:30:03][351828118400448][1 ms][DEBUG] START check_scloud [2025-09-09 14:30:03][351828118400448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:30:04][351828118400448][285 ms][DEBUG] SU: done in 283 ms; outu0_a118 11473 4973 24127640 76472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:30:04][351828118400448][285 ms][DEBUG] targetPkg: running [2025-09-09 14:30:04][351828118400448][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-09 14:30:04][351828118400448][285 ms][DEBUG] START check_boot_completed [2025-09-09 14:30:04][351828118400448][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:30:04][351828118400448][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:30:04][351828118400448][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:30:04][351828118400448][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:30:04][351828118400448][378 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:30:04][351828118400448][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:30:04][351828118400448][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 840\nsuccessfulTxPacketsPerSecond: 9.307104798260323\nretriedTxPackets: 105\nretriedTxPacketsPerSecond: 1.6421343945294207\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 862\nsuccessfulRxPacketsPerSecond: 9.451776682664523\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:30:04][351828118400448][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:30:06][351828118400448][2159 ms][DEBUG] SU: done in 1656 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.035/303.035/303.035/0.000 ms\n [2025-09-09 14:30:06][351828118400448][2159 ms][DEBUG] check_internet: online [2025-09-09 14:30:06][351828118400448][2159 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:30:06][351828118400448][2159 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828118400448\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7923\"}'\'' -e'"" [2025-09-09 14:30:06][351828118400448][2160 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:30:06][351828118400448][2160 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828118400448\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7923\"}'\'' -e'"" [2025-09-09 14:30:10][351828118400448][6283 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37dedbb7-1359-4ec6-a690-f15782718fb1","id":"QR_37dedbb7-1359-4ec6-a690-f15782718fb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:30:10][351828118400448][6439 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-09-09 14:30:10][351828118400448][6439 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-09 14:30:10][351828118400448][6439 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:30:12][351828118400448][0 ms][INFO] === Request start === [2025-09-09 14:30:12][351828118400448][1 ms][DEBUG] START check_scloud [2025-09-09 14:30:12][351828118400448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:30:13][351828118400448][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 11473 4973 24278240 88364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:30:13][351828118400448][325 ms][DEBUG] targetPkg: running [2025-09-09 14:30:13][351828118400448][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 14:30:13][351828118400448][325 ms][DEBUG] START check_boot_completed [2025-09-09 14:30:13][351828118400448][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:30:13][351828118400448][356 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:30:13][351828118400448][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:30:13][351828118400448][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:30:13][351828118400448][403 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:30:13][351828118400448][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:30:13][351828118400448][512 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 840\nsuccessfulTxPacketsPerSecond: 9.307104798260323\nretriedTxPackets: 105\nretriedTxPacketsPerSecond: 1.6421343945294207\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 862\nsuccessfulRxPacketsPerSecond: 9.451776682664523\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:30:13][351828118400448][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:30:13][351828118400448][934 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.924/279.924/279.924/0.000 ms\n [2025-09-09 14:30:13][351828118400448][934 ms][DEBUG] check_internet: online [2025-09-09 14:30:13][351828118400448][934 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:30:13][351828118400448][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828118400448\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3092\"}'\'' -e'"" [2025-09-09 14:30:13][351828118400448][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:30:13][351828118400448][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828118400448\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3092\"}'\'' -e'"" [2025-09-09 14:30:18][351828118400448][5777 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79ae5574-4a94-400b-b659-263f7224b01e","id":"QR_79ae5574-4a94-400b-b659-263f7224b01e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:30:18][351828118400448][5933 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-09 14:30:18][351828118400448][5933 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 14:30:18][351828118400448][5933 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:30:22][355320549018177][0 ms][INFO] === Request start === [2025-09-09 14:30:22][355320549018177][1 ms][DEBUG] START check_scloud [2025-09-09 14:30:22][355320549018177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:30:23][355320549018177][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 11473 4973 24433128 100440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:30:23][355320549018177][323 ms][DEBUG] targetPkg: running [2025-09-09 14:30:23][355320549018177][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 14:30:23][355320549018177][323 ms][DEBUG] START check_boot_completed [2025-09-09 14:30:23][355320549018177][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:30:23][355320549018177][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:30:23][355320549018177][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:30:23][355320549018177][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:30:23][355320549018177][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:30:23][355320549018177][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:30:23][355320549018177][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 840\nsuccessfulTxPacketsPerSecond: 9.307104798260323\nretriedTxPackets: 105\nretriedTxPacketsPerSecond: 1.6421343945294207\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 862\nsuccessfulRxPacketsPerSecond: 9.451776682664523\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:30:23][355320549018177][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:30:23][355320549018177][994 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.269/303.269/303.269/0.000 ms\n [2025-09-09 14:30:23][355320549018177][994 ms][DEBUG] check_internet: online [2025-09-09 14:30:23][355320549018177][995 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:30:23][355320549018177][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320549018177\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1390\"}'\'' -e'"" [2025-09-09 14:30:23][355320549018177][995 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:30:23][355320549018177][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320549018177\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1390\"}'\'' -e'"" [2025-09-09 14:30:27][355320549018177][4259 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36f07b04-9434-4584-8d15-ab1f1df23fc0","id":"QR_36f07b04-9434-4584-8d15-ab1f1df23fc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:30:27][355320549018177][4415 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-09 14:30:27][355320549018177][4415 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-09 14:30:27][355320549018177][4415 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:30:29][355320549018177][0 ms][INFO] === Request start === [2025-09-09 14:30:29][355320549018177][0 ms][DEBUG] START check_scloud [2025-09-09 14:30:29][355320549018177][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:30:29][355320549018177][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 11473 4973 24553164 111860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:30:29][355320549018177][271 ms][DEBUG] targetPkg: running [2025-09-09 14:30:29][355320549018177][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-09 14:30:29][355320549018177][271 ms][DEBUG] START check_boot_completed [2025-09-09 14:30:29][355320549018177][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:30:29][355320549018177][302 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:30:29][355320549018177][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:30:29][355320549018177][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:30:29][355320549018177][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:30:29][355320549018177][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:30:29][355320549018177][443 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 840\nsuccessfulTxPacketsPerSecond: 9.307104798260323\nretriedTxPackets: 105\nretriedTxPacketsPerSecond: 1.6421343945294207\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 862\nsuccessfulRxPacketsPerSecond: 9.451776682664523\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:30:29][355320549018177][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:30:30][355320549018177][819 ms][DEBUG] SU: done in 376 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=281 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 281.776/281.776/281.776/0.000 ms\n [2025-09-09 14:30:30][355320549018177][819 ms][DEBUG] check_internet: online [2025-09-09 14:30:30][355320549018177][819 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:30:30][355320549018177][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320549018177\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5581\"}'\'' -e'"" [2025-09-09 14:30:30][355320549018177][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:30:30][355320549018177][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320549018177\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5581\"}'\'' -e'"" [2025-09-09 14:30:34][355320549018177][5051 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e8109e7-68ff-4434-8e18-a275caf65dc1","id":"QR_1e8109e7-68ff-4434-8e18-a275caf65dc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:30:34][355320549018177][5207 ms][DEBUG] proc_open done in 4388 ms; code=255; res.len=3343 [2025-09-09 14:30:34][355320549018177][5207 ms][DEBUG] END runCmdUntilRes#1 in 4388 ms [2025-09-09 14:30:34][355320549018177][5207 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:32:03][350857486361529][0 ms][INFO] === Request start === [2025-09-09 14:32:03][350857486361529][1 ms][DEBUG] START check_scloud [2025-09-09 14:32:03][350857486361529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:32:04][350857486361529][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 11473 4973 24644328 122604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:32:04][350857486361529][304 ms][DEBUG] targetPkg: running [2025-09-09 14:32:04][350857486361529][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 14:32:04][350857486361529][304 ms][DEBUG] START check_boot_completed [2025-09-09 14:32:04][350857486361529][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:32:04][350857486361529][349 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 14:32:04][350857486361529][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:32:04][350857486361529][443 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 14:32:04][350857486361529][443 ms][DEBUG] END check_boot_completed in 139 ms [2025-09-09 14:32:04][350857486361529][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:32:04][350857486361529][568 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:32:04][350857486361529][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:32:04][350857486361529][1005 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=338 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 338.356/338.356/338.356/0.000 ms\n [2025-09-09 14:32:04][350857486361529][1005 ms][DEBUG] check_internet: online [2025-09-09 14:32:04][350857486361529][1005 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:32:04][350857486361529][1005 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857486361529\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9026\"}'\'' -e'"" [2025-09-09 14:32:04][350857486361529][1005 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:32:04][350857486361529][1005 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857486361529\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9026\"}'\'' -e'"" [2025-09-09 14:32:09][350857486361529][5645 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3a41608-f1c1-4535-8c6f-5b12c04f1293","id":"QR_a3a41608-f1c1-4535-8c6f-5b12c04f1293","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:32:09][350857486361529][5801 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 14:32:09][350857486361529][5801 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-09 14:32:09][350857486361529][5801 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:32:11][350857486361529][1 ms][INFO] === Request start === [2025-09-09 14:32:11][350857486361529][1 ms][DEBUG] START check_scloud [2025-09-09 14:32:11][350857486361529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:32:12][350857486361529][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 11473 4973 24799216 130724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:32:12][350857486361529][290 ms][DEBUG] targetPkg: running [2025-09-09 14:32:12][350857486361529][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 14:32:12][350857486361529][290 ms][DEBUG] START check_boot_completed [2025-09-09 14:32:12][350857486361529][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:32:12][350857486361529][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:32:12][350857486361529][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:32:12][350857486361529][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:32:12][350857486361529][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:32:12][350857486361529][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:32:12][350857486361529][493 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:32:12][350857486361529][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:32:12][350857486361529][930 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.517/301.517/301.517/0.000 ms\n [2025-09-09 14:32:12][350857486361529][930 ms][DEBUG] check_internet: online [2025-09-09 14:32:12][350857486361529][930 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:32:12][350857486361529][930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857486361529\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-09-09 14:32:12][350857486361529][930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:32:12][350857486361529][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857486361529\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-09-09 14:32:17][350857486361529][5976 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b551786d-4a3f-48a7-ad41-2b0e694dbd13","id":"QR_b551786d-4a3f-48a7-ad41-2b0e694dbd13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:32:18][350857486361529][6132 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 14:32:18][350857486361529][6132 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 14:32:18][350857486361529][6132 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:32:23][352967353952900][0 ms][INFO] === Request start === [2025-09-09 14:32:23][352967353952900][1 ms][DEBUG] START check_scloud [2025-09-09 14:32:23][352967353952900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:32:23][352967353952900][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 11473 4973 24993016 141984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:32:23][352967353952900][280 ms][DEBUG] targetPkg: running [2025-09-09 14:32:23][352967353952900][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-09 14:32:23][352967353952900][281 ms][DEBUG] START check_boot_completed [2025-09-09 14:32:23][352967353952900][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:32:23][352967353952900][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:32:23][352967353952900][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:32:23][352967353952900][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:32:23][352967353952900][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:32:23][352967353952900][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:32:23][352967353952900][546 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:32:23][352967353952900][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:32:24][352967353952900][920 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.140/276.140/276.140/0.000 ms\n [2025-09-09 14:32:24][352967353952900][920 ms][DEBUG] check_internet: online [2025-09-09 14:32:24][352967353952900][920 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:32:24][352967353952900][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353952900\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-09-09 14:32:24][352967353952900][921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:32:24][352967353952900][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353952900\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-09-09 14:32:29][352967353952900][5669 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1f2f0dd-9b3a-44c3-a83f-97f52ece9327","id":"QR_b1f2f0dd-9b3a-44c3-a83f-97f52ece9327","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:32:29][352967353952900][5825 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 14:32:29][352967353952900][5825 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 14:32:29][352967353952900][5826 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:32:33][352967353952900][1 ms][INFO] === Request start === [2025-09-09 14:32:33][352967353952900][1 ms][DEBUG] START check_scloud [2025-09-09 14:32:33][352967353952900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:32:33][352967353952900][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 11473 4973 25098592 153020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:32:33][352967353952900][288 ms][DEBUG] targetPkg: running [2025-09-09 14:32:33][352967353952900][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 14:32:33][352967353952900][288 ms][DEBUG] START check_boot_completed [2025-09-09 14:32:33][352967353952900][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:32:33][352967353952900][334 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:32:33][352967353952900][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:32:33][352967353952900][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:32:33][352967353952900][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:32:33][352967353952900][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:32:33][352967353952900][553 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:32:33][352967353952900][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:32:34][352967353952900][991 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.357/315.357/315.357/0.000 ms\n [2025-09-09 14:32:34][352967353952900][991 ms][DEBUG] check_internet: online [2025-09-09 14:32:34][352967353952900][991 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:32:34][352967353952900][991 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353952900\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4139\"}'\'' -e'"" [2025-09-09 14:32:34][352967353952900][991 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:32:34][352967353952900][991 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353952900\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4139\"}'\'' -e'"" [2025-09-09 14:32:38][352967353952900][5349 ms][DEBUG] proc_open done in 4358 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:32:38][352967353952900][5349 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-09-09 14:32:38][352967353952900][5349 ms][WARN] Detected error: Process with pid 11473 either refused to load frida-agent, or terminated during injectionProcess with pid 11473 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:32:38][352967353952900][5349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:32:38][352967353952900][5615 ms][DEBUG] SU: done in 265 ms; outsystem 5392 4973 12953080 571684 ep_poll 0 S system_server\n [2025-09-09 14:32:38][352967353952900][5615 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:32:38][352967353952900][5755 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 14:32:38][352967353952900][5756 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:32:38][352967353952900][5756 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:32:38][352967353952900][5911 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 14:32:38][352967353952900][5911 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:32:39][352967353952900][6084 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:32:41][352967353952900][8098 ms][DEBUG] START check_boot_completed [2025-09-09 14:32:41][352967353952900][8098 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:32:41][352967353952900][8145 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:32:41][352967353952900][8145 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:32:41][352967353952900][8192 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:32:41][352967353952900][8192 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:32:44][352967353952900][11207 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:32:44][352967353952900][11207 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353952900\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4139\"}'\'' -e'"" [2025-09-09 14:32:47][352967353952900][14534 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_732dcd18-69b4-49bb-86c5-69075c19749c","id":"QR_732dcd18-69b4-49bb-86c5-69075c19749c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:32:47][352967353952900][14690 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 14:32:47][352967353952900][14691 ms][DEBUG] END runCmdUntilRes#2 in 3484 ms [2025-09-09 14:32:47][352967353952900][14691 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:33:05][357567913891641][0 ms][INFO] === Request start === [2025-09-09 14:33:05][357567913891641][1 ms][DEBUG] START check_scloud [2025-09-09 14:33:05][357567913891641][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:33:05][357567913891641][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 19433 4973 23794312 127592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:33:05][357567913891641][268 ms][DEBUG] targetPkg: running [2025-09-09 14:33:05][357567913891641][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 14:33:05][357567913891641][268 ms][DEBUG] START check_boot_completed [2025-09-09 14:33:05][357567913891641][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:33:05][357567913891641][314 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:33:05][357567913891641][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:33:05][357567913891641][362 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:33:05][357567913891641][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:33:05][357567913891641][362 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:33:05][357567913891641][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567913891641\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9336\"}'\'' -e'"" [2025-09-09 14:33:05][357567913891641][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:33:05][357567913891641][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567913891641\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9336\"}'\'' -e'"" [2025-09-09 14:33:10][357567913891641][5079 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee139894-3de5-4d77-8df8-a12ea77582fd","id":"QR_ee139894-3de5-4d77-8df8-a12ea77582fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:33:10][357567913891641][5235 ms][DEBUG] proc_open done in 4872 ms; code=255; res.len=3343 [2025-09-09 14:33:10][357567913891641][5235 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-09 14:33:10][357567913891641][5235 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:33:15][351040994429794][0 ms][INFO] === Request start === [2025-09-09 14:33:15][351040994429794][1 ms][DEBUG] START check_scloud [2025-09-09 14:33:15][351040994429794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:33:16][351040994429794][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 19433 4973 23864800 138908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:33:16][351040994429794][315 ms][DEBUG] targetPkg: running [2025-09-09 14:33:16][351040994429794][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 14:33:16][351040994429794][315 ms][DEBUG] START check_boot_completed [2025-09-09 14:33:16][351040994429794][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:33:16][351040994429794][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:33:16][351040994429794][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:33:16][351040994429794][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:33:16][351040994429794][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:33:16][351040994429794][393 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:33:16][351040994429794][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351040994429794\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6392\"}'\'' -e'"" [2025-09-09 14:33:16][351040994429794][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:33:16][351040994429794][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351040994429794\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6392\"}'\'' -e'"" [2025-09-09 14:33:21][351040994429794][5532 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4385789b-4c4e-4fca-97fc-350e0b3020e8","id":"QR_4385789b-4c4e-4fca-97fc-350e0b3020e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:33:21][351040994429794][5688 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 14:33:21][351040994429794][5688 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 14:33:21][351040994429794][5688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:33:25][351040994429794][0 ms][INFO] === Request start === [2025-09-09 14:33:25][351040994429794][1 ms][DEBUG] START check_scloud [2025-09-09 14:33:25][351040994429794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:33:25][351040994429794][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19433 4973 24033896 150612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:33:25][351040994429794][311 ms][DEBUG] targetPkg: running [2025-09-09 14:33:25][351040994429794][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 14:33:25][351040994429794][311 ms][DEBUG] START check_boot_completed [2025-09-09 14:33:25][351040994429794][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:33:25][351040994429794][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:33:25][351040994429794][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:33:25][351040994429794][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:33:25][351040994429794][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:33:25][351040994429794][404 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:33:25][351040994429794][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351040994429794\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2455\"}'\'' -e'"" [2025-09-09 14:33:25][351040994429794][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:33:25][351040994429794][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351040994429794\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2455\"}'\'' -e'"" [2025-09-09 14:33:28][351040994429794][3935 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccd0efbb-2633-4f9f-a7dc-8c33ccac48c4","id":"QR_ccd0efbb-2633-4f9f-a7dc-8c33ccac48c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:33:29][351040994429794][4091 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-09 14:33:29][351040994429794][4091 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-09-09 14:33:29][351040994429794][4091 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:34:03][352549936540624][0 ms][INFO] === Request start === [2025-09-09 14:34:03][352549936540624][0 ms][DEBUG] START check_scloud [2025-09-09 14:34:03][352549936540624][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:34:03][352549936540624][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 19433 4973 24144480 161440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:34:03][352549936540624][287 ms][DEBUG] targetPkg: running [2025-09-09 14:34:03][352549936540624][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 14:34:03][352549936540624][287 ms][DEBUG] START check_boot_completed [2025-09-09 14:34:03][352549936540624][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:34:03][352549936540624][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:34:03][352549936540624][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:34:03][352549936540624][381 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:34:03][352549936540624][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:34:03][352549936540624][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:34:03][352549936540624][507 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:34:03][352549936540624][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:34:04][352549936540624][912 ms][DEBUG] SU: done in 405 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.626/294.626/294.626/0.000 ms\n [2025-09-09 14:34:04][352549936540624][912 ms][DEBUG] check_internet: online [2025-09-09 14:34:04][352549936540624][912 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:34:04][352549936540624][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936540624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5420\"}'\'' -e'"" [2025-09-09 14:34:04][352549936540624][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:34:04][352549936540624][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936540624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5420\"}'\'' -e'"" [2025-09-09 14:34:07][352549936540624][4270 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d06af058-890b-4944-aca1-37bcf404bebe","id":"QR_d06af058-890b-4944-aca1-37bcf404bebe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:34:07][352549936540624][4427 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-09 14:34:07][352549936540624][4427 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-09 14:34:07][352549936540624][4427 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:34:09][352549936540624][0 ms][INFO] === Request start === [2025-09-09 14:34:09][352549936540624][1 ms][DEBUG] START check_scloud [2025-09-09 14:34:09][352549936540624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:34:10][352549936540624][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 19433 4973 24297320 173216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:34:10][352549936540624][322 ms][DEBUG] targetPkg: running [2025-09-09 14:34:10][352549936540624][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 14:34:10][352549936540624][322 ms][DEBUG] START check_boot_completed [2025-09-09 14:34:10][352549936540624][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:34:10][352549936540624][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:34:10][352549936540624][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:34:10][352549936540624][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:34:10][352549936540624][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:34:10][352549936540624][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:34:10][352549936540624][525 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:34:10][352549936540624][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:34:11][352549936540624][1728 ms][DEBUG] SU: done in 1203 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.834/298.834/298.834/0.000 ms\n [2025-09-09 14:34:11][352549936540624][1728 ms][DEBUG] check_internet: online [2025-09-09 14:34:11][352549936540624][1728 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:34:11][352549936540624][1728 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936540624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3320\"}'\'' -e'"" [2025-09-09 14:34:11][352549936540624][1728 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:34:11][352549936540624][1728 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936540624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3320\"}'\'' -e'"" [2025-09-09 14:34:16][352549936540624][6258 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_220ab2c9-5d26-4172-a5f3-e9e60c27ee66","id":"QR_220ab2c9-5d26-4172-a5f3-e9e60c27ee66","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:34:16][352549936540624][6414 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 14:34:16][352549936540624][6414 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 14:34:16][352549936540624][6414 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:35:03][353310801469368][1 ms][INFO] === Request start === [2025-09-09 14:35:03][353310801469368][1 ms][DEBUG] START check_scloud [2025-09-09 14:35:03][353310801469368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:35:04][353310801469368][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 19433 4973 24389532 184316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:35:04][353310801469368][283 ms][DEBUG] targetPkg: running [2025-09-09 14:35:04][353310801469368][283 ms][DEBUG] END check_scloud in 281 ms [2025-09-09 14:35:04][353310801469368][283 ms][DEBUG] START check_boot_completed [2025-09-09 14:35:04][353310801469368][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:35:04][353310801469368][314 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:35:04][353310801469368][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:35:04][353310801469368][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:35:04][353310801469368][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:35:04][353310801469368][361 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:35:04][353310801469368][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801469368\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7651\"}'\'' -e'"" [2025-09-09 14:35:04][353310801469368][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:35:04][353310801469368][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801469368\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7651\"}'\'' -e'"" [2025-09-09 14:35:08][353310801469368][4938 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_766845ed-c23f-4fe8-a95f-03283eb97b4f","id":"QR_766845ed-c23f-4fe8-a95f-03283eb97b4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:35:09][353310801469368][5094 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 14:35:09][353310801469368][5094 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 14:35:09][353310801469368][5094 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:35:11][353310801469368][0 ms][INFO] === Request start === [2025-09-09 14:35:11][353310801469368][1 ms][DEBUG] START check_scloud [2025-09-09 14:35:11][353310801469368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:35:11][353310801469368][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19433 4973 24566884 195784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:35:11][353310801469368][312 ms][DEBUG] targetPkg: running [2025-09-09 14:35:11][353310801469368][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 14:35:11][353310801469368][312 ms][DEBUG] START check_boot_completed [2025-09-09 14:35:11][353310801469368][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:35:11][353310801469368][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:35:11][353310801469368][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:35:11][353310801469368][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:35:11][353310801469368][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:35:11][353310801469368][421 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:35:11][353310801469368][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801469368\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3733\"}'\'' -e'"" [2025-09-09 14:35:11][353310801469368][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:35:11][353310801469368][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801469368\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3733\"}'\'' -e'"" [2025-09-09 14:35:17][353310801469368][5717 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd985379-6430-4dfc-9596-0f8c78446f92","id":"QR_dd985379-6430-4dfc-9596-0f8c78446f92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:35:17][353310801469368][5873 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-09-09 14:35:17][353310801469368][5873 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-09 14:35:17][353310801469368][5873 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:36:04][352967355006424][0 ms][INFO] === Request start === [2025-09-09 14:36:04][352967355006424][1 ms][DEBUG] START check_scloud [2025-09-09 14:36:04][352967355006424][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:36:05][352967355006424][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19433 4973 24654116 207004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:36:05][352967355006424][310 ms][DEBUG] targetPkg: running [2025-09-09 14:36:05][352967355006424][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 14:36:05][352967355006424][310 ms][DEBUG] START check_boot_completed [2025-09-09 14:36:05][352967355006424][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:36:05][352967355006424][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:36:05][352967355006424][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:36:05][352967355006424][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:36:05][352967355006424][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:36:05][352967355006424][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:36:05][352967355006424][513 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:36:05][352967355006424][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:36:05][352967355006424][966 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.197/312.197/312.197/0.000 ms\n [2025-09-09 14:36:05][352967355006424][967 ms][DEBUG] check_internet: online [2025-09-09 14:36:05][352967355006424][967 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:36:05][352967355006424][967 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355006424\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8405\"}'\'' -e'"" [2025-09-09 14:36:05][352967355006424][967 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:36:05][352967355006424][967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355006424\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8405\"}'\'' -e'"" [2025-09-09 14:36:10][352967355006424][5356 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e41caf68-f7a6-4647-b70a-bb693030c3d4","id":"QR_e41caf68-f7a6-4647-b70a-bb693030c3d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:36:10][352967355006424][5512 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-09 14:36:10][352967355006424][5512 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-09 14:36:10][352967355006424][5512 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:36:13][352967355006424][0 ms][INFO] === Request start === [2025-09-09 14:36:13][352967355006424][1 ms][DEBUG] START check_scloud [2025-09-09 14:36:13][352967355006424][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:36:14][352967355006424][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 19433 4973 24831532 217836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:36:14][352967355006424][305 ms][DEBUG] targetPkg: running [2025-09-09 14:36:14][352967355006424][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 14:36:14][352967355006424][305 ms][DEBUG] START check_boot_completed [2025-09-09 14:36:14][352967355006424][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:36:14][352967355006424][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:36:14][352967355006424][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:36:14][352967355006424][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:36:14][352967355006424][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:36:14][352967355006424][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:36:14][352967355006424][539 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31432 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.9166676840062018\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.38251966517321223\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1283\nsuccessfulRxPacketsPerSecond: 1.713199776999174\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:36:14][352967355006424][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:36:14][352967355006424][992 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.564/319.564/319.564/0.000 ms\n [2025-09-09 14:36:14][352967355006424][992 ms][DEBUG] check_internet: online [2025-09-09 14:36:14][352967355006424][992 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:36:14][352967355006424][992 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355006424\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8585\"}'\'' -e'"" [2025-09-09 14:36:14][352967355006424][992 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:36:14][352967355006424][992 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355006424\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8585\"}'\'' -e'"" [2025-09-09 14:36:19][352967355006424][5631 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40d291b3-0477-47aa-afd0-7e8be748b717","id":"QR_40d291b3-0477-47aa-afd0-7e8be748b717","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:36:19][352967355006424][5788 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 14:36:19][352967355006424][5788 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 14:36:19][352967355006424][5788 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:37:03][352397453920997][0 ms][INFO] === Request start === [2025-09-09 14:37:03][352397453920997][1 ms][DEBUG] START check_scloud [2025-09-09 14:37:03][352397453920997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:37:03][352397453920997][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 19433 4973 24920428 229616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:37:03][352397453920997][296 ms][DEBUG] targetPkg: running [2025-09-09 14:37:03][352397453920997][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 14:37:03][352397453920997][296 ms][DEBUG] START check_boot_completed [2025-09-09 14:37:03][352397453920997][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:37:03][352397453920997][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:37:03][352397453920997][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:37:03][352397453920997][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:37:03][352397453920997][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:37:03][352397453920997][374 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:37:03][352397453920997][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453920997\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1203\"}'\'' -e'"" [2025-09-09 14:37:03][352397453920997][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:37:03][352397453920997][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453920997\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1203\"}'\'' -e'"" [2025-09-09 14:37:07][352397453920997][3732 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55621150-883c-407a-8e4b-29dcf2b77bbd","id":"QR_55621150-883c-407a-8e4b-29dcf2b77bbd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:37:07][352397453920997][3888 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-09 14:37:07][352397453920997][3888 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-09 14:37:07][352397453920997][3888 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:37:09][352397453920997][1 ms][INFO] === Request start === [2025-09-09 14:37:09][352397453920997][1 ms][DEBUG] START check_scloud [2025-09-09 14:37:09][352397453920997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:37:09][352397453920997][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 19433 4973 25097848 241364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:37:09][352397453920997][291 ms][DEBUG] targetPkg: running [2025-09-09 14:37:09][352397453920997][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-09 14:37:09][352397453920997][291 ms][DEBUG] START check_boot_completed [2025-09-09 14:37:09][352397453920997][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:37:09][352397453920997][321 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 14:37:09][352397453920997][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:37:09][352397453920997][369 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:37:09][352397453920997][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:37:09][352397453920997][369 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:37:09][352397453920997][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453920997\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3683\"}'\'' -e'"" [2025-09-09 14:37:09][352397453920997][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:37:09][352397453920997][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453920997\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3683\"}'\'' -e'"" [2025-09-09 14:37:17][352397453920997][8397 ms][DEBUG] proc_open done in 8028 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:37:17][352397453920997][8397 ms][DEBUG] END runCmdUntilRes#1 in 8028 ms [2025-09-09 14:37:17][352397453920997][8397 ms][WARN] Detected error: Process with pid 19433 either refused to load frida-agent, or terminated during injectionProcess with pid 19433 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:37:17][352397453920997][8397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:37:18][352397453920997][8741 ms][DEBUG] SU: done in 344 ms; out [2025-09-09 14:37:18][352397453920997][8741 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:37:18][352397453920997][8897 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 14:37:18][352397453920997][8897 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:37:18][352397453920997][8897 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:37:18][352397453920997][9116 ms][DEBUG] SU: done in 219 ms; out [2025-09-09 14:37:18][352397453920997][9116 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:37:18][352397453920997][9397 ms][DEBUG] SU: done in 281 ms; out [2025-09-09 14:37:20][352397453920997][11412 ms][DEBUG] START check_boot_completed [2025-09-09 14:37:20][352397453920997][11412 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:37:20][352397453920997][11459 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:37:20][352397453920997][11459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:37:21][352397453920997][11506 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:37:21][352397453920997][11506 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:37:24][352397453920997][14521 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:37:24][352397453920997][14521 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453920997\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3683\"}'\'' -e'"" [2025-09-09 14:37:25][352397453920997][16021 ms][DEBUG] proc_open done in 1500 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 14:37:25][352397453920997][16021 ms][DEBUG] END runCmdUntilRes#2 in 1500 ms [2025-09-09 14:37:25][352397453920997][16021 ms][WARN] Detected error 2; Reboot the device [2025-09-09 14:37:25][352397453920997][16021 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:37:25][352397453920997][16286 ms][DEBUG] SU: done in 265 ms; outsystem 21143 20813 7778900 145380 0 0 R system_server\n [2025-09-09 14:37:25][352397453920997][16286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 14:37:26][352397453920997][16895 ms][DEBUG] SU: done in 609 ms; out [2025-09-09 14:41:04][358140831074960][1 ms][INFO] === Request start === [2025-09-09 14:41:04][358140831074960][1 ms][DEBUG] START check_scloud [2025-09-09 14:41:04][358140831074960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:41:05][358140831074960][376 ms][DEBUG] SU: done in 375 ms; out [2025-09-09 14:41:05][358140831074960][376 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 14:41:05][358140831074960][407 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 14:41:05][358140831074960][407 ms][DEBUG] check_devices: device found [2025-09-09 14:41:05][358140831074960][407 ms][WARN] targetPkg: not running, restarting [2025-09-09 14:41:05][358140831074960][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:41:05][358140831074960][532 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:41:05][358140831074960][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:41:05][358140831074960][736 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:41:07][358140831074960][2750 ms][DEBUG] END check_scloud in 2749 ms [2025-09-09 14:41:07][358140831074960][2751 ms][DEBUG] START check_boot_completed [2025-09-09 14:41:07][358140831074960][2751 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:41:07][358140831074960][2797 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:41:07][358140831074960][2797 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:41:07][358140831074960][2844 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:41:07][358140831074960][2844 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:41:07][358140831074960][2844 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:41:07][358140831074960][2844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140831074960\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1670\"}'\'' -e'"" [2025-09-09 14:41:07][358140831074960][2844 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:41:07][358140831074960][2844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140831074960\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1670\"}'\'' -e'"" [2025-09-09 14:41:13][358140831074960][8749 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d6f9d7d-0f25-4ce9-b429-1679d387de5e","id":"QR_6d6f9d7d-0f25-4ce9-b429-1679d387de5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:41:13][358140831074960][8905 ms][DEBUG] proc_open done in 6061 ms; code=255; res.len=3343 [2025-09-09 14:41:13][358140831074960][8905 ms][DEBUG] END runCmdUntilRes#1 in 6061 ms [2025-09-09 14:41:13][358140831074960][8905 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:41:17][358140831074960][0 ms][INFO] === Request start === [2025-09-09 14:41:17][358140831074960][1 ms][DEBUG] START check_scloud [2025-09-09 14:41:17][358140831074960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:41:17][358140831074960][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 15471 4970 23795872 124364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:41:17][358140831074960][332 ms][DEBUG] targetPkg: running [2025-09-09 14:41:17][358140831074960][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-09 14:41:17][358140831074960][332 ms][DEBUG] START check_boot_completed [2025-09-09 14:41:17][358140831074960][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:41:17][358140831074960][378 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:41:17][358140831074960][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:41:17][358140831074960][472 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 14:41:17][358140831074960][472 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 14:41:17][358140831074960][472 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:41:17][358140831074960][472 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140831074960\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2189\"}'\'' -e'"" [2025-09-09 14:41:17][358140831074960][473 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:41:17][358140831074960][473 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140831074960\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2189\"}'\'' -e'"" [2025-09-09 14:41:21][358140831074960][4159 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1cffb64-0a51-46f2-afe8-2f34015b56e6","id":"QR_f1cffb64-0a51-46f2-afe8-2f34015b56e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:41:21][358140831074960][4315 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-09 14:41:21][358140831074960][4315 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-09 14:41:21][358140831074960][4315 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:43:03][358104901153179][0 ms][INFO] === Request start === [2025-09-09 14:43:03][358104901153179][1 ms][DEBUG] START check_scloud [2025-09-09 14:43:03][358104901153179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:43:03][358104901153179][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 15471 4970 23868348 137700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:43:03][358104901153179][325 ms][DEBUG] targetPkg: running [2025-09-09 14:43:03][358104901153179][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 14:43:03][358104901153179][325 ms][DEBUG] START check_boot_completed [2025-09-09 14:43:03][358104901153179][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:43:03][358104901153179][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:43:03][358104901153179][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:43:03][358104901153179][420 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:43:03][358104901153179][420 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:43:03][358104901153179][420 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:43:03][358104901153179][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901153179\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1489\"}'\'' -e'"" [2025-09-09 14:43:03][358104901153179][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:43:03][358104901153179][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901153179\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1489\"}'\'' -e'"" [2025-09-09 14:43:08][358104901153179][4808 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0adfe229-dcf9-4c62-a666-bd33e5c3689c","id":"QR_0adfe229-dcf9-4c62-a666-bd33e5c3689c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:43:08][358104901153179][4964 ms][DEBUG] proc_open done in 4544 ms; code=255; res.len=3343 [2025-09-09 14:43:08][358104901153179][4964 ms][DEBUG] END runCmdUntilRes#1 in 4544 ms [2025-09-09 14:43:08][358104901153179][4964 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:43:10][358104901153179][1 ms][INFO] === Request start === [2025-09-09 14:43:10][358104901153179][1 ms][DEBUG] START check_scloud [2025-09-09 14:43:10][358104901153179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:43:10][358104901153179][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 15471 4970 24023928 149460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:43:10][358104901153179][321 ms][DEBUG] targetPkg: running [2025-09-09 14:43:10][358104901153179][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 14:43:10][358104901153179][321 ms][DEBUG] START check_boot_completed [2025-09-09 14:43:10][358104901153179][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:43:10][358104901153179][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:43:10][358104901153179][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:43:10][358104901153179][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:43:10][358104901153179][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:43:10][358104901153179][430 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:43:10][358104901153179][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901153179\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5239\"}'\'' -e'"" [2025-09-09 14:43:10][358104901153179][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:43:10][358104901153179][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901153179\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5239\"}'\'' -e'"" [2025-09-09 14:43:15][358104901153179][5397 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13f40f79-37d1-414f-80dc-7b2bc4c8004f","id":"QR_13f40f79-37d1-414f-80dc-7b2bc4c8004f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:43:16][358104901153179][5553 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-09 14:43:16][358104901153179][5553 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-09 14:43:16][358104901153179][5553 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:43:21][357576781077829][0 ms][INFO] === Request start === [2025-09-09 14:43:21][357576781077829][1 ms][DEBUG] START check_scloud [2025-09-09 14:43:21][357576781077829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:43:21][357576781077829][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 15471 4970 24191104 160328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:43:21][357576781077829][320 ms][DEBUG] targetPkg: running [2025-09-09 14:43:21][357576781077829][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 14:43:21][357576781077829][320 ms][DEBUG] START check_boot_completed [2025-09-09 14:43:21][357576781077829][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:43:21][357576781077829][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:43:21][357576781077829][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:43:21][357576781077829][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:43:21][357576781077829][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:43:21][357576781077829][429 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:43:21][357576781077829][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781077829\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-09-09 14:43:21][357576781077829][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:43:21][357576781077829][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781077829\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-09-09 14:43:26][357576781077829][5006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a050d3a7-fd15-4fad-b31c-c12b05022137","id":"QR_a050d3a7-fd15-4fad-b31c-c12b05022137","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:43:26][357576781077829][5162 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 14:43:26][357576781077829][5162 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 14:43:26][357576781077829][5162 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:43:30][357576781077829][0 ms][INFO] === Request start === [2025-09-09 14:43:30][357576781077829][1 ms][DEBUG] START check_scloud [2025-09-09 14:43:30][357576781077829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:43:30][357576781077829][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 15471 4970 24301980 172304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:43:30][357576781077829][269 ms][DEBUG] targetPkg: running [2025-09-09 14:43:30][357576781077829][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 14:43:30][357576781077829][269 ms][DEBUG] START check_boot_completed [2025-09-09 14:43:30][357576781077829][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:43:30][357576781077829][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:43:30][357576781077829][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:43:30][357576781077829][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:43:30][357576781077829][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:43:30][357576781077829][378 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:43:30][357576781077829][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781077829\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7325\"}'\'' -e'"" [2025-09-09 14:43:30][357576781077829][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:43:30][357576781077829][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781077829\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7325\"}'\'' -e'"" [2025-09-09 14:43:33][357576781077829][3705 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af23831e-46e6-4dc9-8f4d-608dc0dd5578","id":"QR_af23831e-46e6-4dc9-8f4d-608dc0dd5578","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:43:33][357576781077829][3861 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 14:43:33][357576781077829][3861 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-09 14:43:33][357576781077829][3861 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:44:03][350013884031708][0 ms][INFO] === Request start === [2025-09-09 14:44:03][350013884031708][1 ms][DEBUG] START check_scloud [2025-09-09 14:44:03][350013884031708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:44:04][350013884031708][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 15471 4970 24411576 183700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:44:04][350013884031708][276 ms][DEBUG] targetPkg: running [2025-09-09 14:44:04][350013884031708][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 14:44:04][350013884031708][276 ms][DEBUG] START check_boot_completed [2025-09-09 14:44:04][350013884031708][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:44:04][350013884031708][323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:44:04][350013884031708][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:44:04][350013884031708][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:44:04][350013884031708][370 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:44:04][350013884031708][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:44:04][350013884031708][495 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 981\nsuccessfulTxPacketsPerSecond: 1.364052770278178\nretriedTxPackets: 175\nretriedTxPacketsPerSecond: 0.2623178404381111\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 1.2631612931865968\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:44:04][350013884031708][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:44:06][350013884031708][2213 ms][DEBUG] SU: done in 1718 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.795/300.795/300.795/0.000 ms\n [2025-09-09 14:44:06][350013884031708][2213 ms][DEBUG] check_internet: online [2025-09-09 14:44:06][350013884031708][2214 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:44:06][350013884031708][2214 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884031708\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3522\"}'\'' -e'"" [2025-09-09 14:44:06][350013884031708][2214 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:44:06][350013884031708][2214 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884031708\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3522\"}'\'' -e'"" [2025-09-09 14:44:10][350013884031708][6290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7127172a-a0f6-47fc-8f25-8f938853ed59","id":"QR_7127172a-a0f6-47fc-8f25-8f938853ed59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:44:10][350013884031708][6446 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-09 14:44:10][350013884031708][6447 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 14:44:10][350013884031708][6447 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:44:12][350013884031708][0 ms][INFO] === Request start === [2025-09-09 14:44:12][350013884031708][1 ms][DEBUG] START check_scloud [2025-09-09 14:44:12][350013884031708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:44:13][350013884031708][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 15471 4970 24554176 195544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:44:13][350013884031708][296 ms][DEBUG] targetPkg: running [2025-09-09 14:44:13][350013884031708][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 14:44:13][350013884031708][296 ms][DEBUG] START check_boot_completed [2025-09-09 14:44:13][350013884031708][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:44:13][350013884031708][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:44:13][350013884031708][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:44:13][350013884031708][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:44:13][350013884031708][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:44:13][350013884031708][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:44:13][350013884031708][546 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 981\nsuccessfulTxPacketsPerSecond: 1.364052770278178\nretriedTxPackets: 175\nretriedTxPacketsPerSecond: 0.2623178404381111\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 1.2631612931865968\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:44:13][350013884031708][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:44:13][350013884031708][921 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.584/247.584/247.584/0.000 ms\n [2025-09-09 14:44:13][350013884031708][921 ms][DEBUG] check_internet: online [2025-09-09 14:44:13][350013884031708][921 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:44:13][350013884031708][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884031708\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8269\"}'\'' -e'"" [2025-09-09 14:44:13][350013884031708][921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:44:13][350013884031708][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884031708\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8269\"}'\'' -e'"" [2025-09-09 14:44:18][350013884031708][5404 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b55acde1-6527-46bc-88a2-7675947e1d2f","id":"QR_b55acde1-6527-46bc-88a2-7675947e1d2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:44:18][350013884031708][5560 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 14:44:18][350013884031708][5560 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-09 14:44:18][350013884031708][5560 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:44:22][350501454114425][0 ms][INFO] === Request start === [2025-09-09 14:44:22][350501454114425][1 ms][DEBUG] START check_scloud [2025-09-09 14:44:22][350501454114425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:44:22][350501454114425][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 15471 4970 24674248 206348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:44:22][350501454114425][311 ms][DEBUG] targetPkg: running [2025-09-09 14:44:22][350501454114425][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 14:44:22][350501454114425][311 ms][DEBUG] START check_boot_completed [2025-09-09 14:44:22][350501454114425][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:44:22][350501454114425][355 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 14:44:22][350501454114425][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:44:22][350501454114425][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:44:22][350501454114425][402 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 14:44:22][350501454114425][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:44:22][350501454114425][497 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 981\nsuccessfulTxPacketsPerSecond: 1.364052770278178\nretriedTxPackets: 175\nretriedTxPacketsPerSecond: 0.2623178404381111\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 1.2631612931865968\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:44:22][350501454114425][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:44:23][350501454114425][855 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.785/270.785/270.785/0.000 ms\n [2025-09-09 14:44:23][350501454114425][855 ms][DEBUG] check_internet: online [2025-09-09 14:44:23][350501454114425][856 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:44:23][350501454114425][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501454114425\",\"model\":\"SM-M236L\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6920\"}'\'' -e'"" [2025-09-09 14:44:23][350501454114425][856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:44:23][350501454114425][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501454114425\",\"model\":\"SM-M236L\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6920\"}'\'' -e'"" [2025-09-09 14:44:26][350501454114425][4245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4daea473-249c-410e-aeb9-a3db62b5b7f5","id":"QR_4daea473-249c-410e-aeb9-a3db62b5b7f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:44:26][350501454114425][4401 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-09 14:44:26][350501454114425][4401 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 14:44:26][350501454114425][4401 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:44:29][350501454114425][0 ms][INFO] === Request start === [2025-09-09 14:44:29][350501454114425][1 ms][DEBUG] START check_scloud [2025-09-09 14:44:29][350501454114425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:44:29][350501454114425][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 15471 4970 24833196 217160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:44:29][350501454114425][316 ms][DEBUG] targetPkg: running [2025-09-09 14:44:29][350501454114425][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 14:44:29][350501454114425][316 ms][DEBUG] START check_boot_completed [2025-09-09 14:44:29][350501454114425][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:44:29][350501454114425][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:44:29][350501454114425][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:44:29][350501454114425][411 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 14:44:29][350501454114425][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:44:29][350501454114425][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:44:29][350501454114425][535 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 981\nsuccessfulTxPacketsPerSecond: 1.364052770278178\nretriedTxPackets: 175\nretriedTxPacketsPerSecond: 0.2623178404381111\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 1.2631612931865968\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:44:29][350501454114425][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:44:30][350501454114425][925 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.577/245.577/245.577/0.000 ms\n [2025-09-09 14:44:30][350501454114425][925 ms][DEBUG] check_internet: online [2025-09-09 14:44:30][350501454114425][925 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:44:30][350501454114425][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501454114425\",\"model\":\"SM-M236L\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6695\"}'\'' -e'"" [2025-09-09 14:44:30][350501454114425][926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:44:30][350501454114425][926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501454114425\",\"model\":\"SM-M236L\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6695\"}'\'' -e'"" [2025-09-09 14:44:34][350501454114425][5252 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a69e94b-63c4-4b08-a35e-d70865ca34d0","id":"QR_1a69e94b-63c4-4b08-a35e-d70865ca34d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:44:34][350501454114425][5408 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-09-09 14:44:34][350501454114425][5408 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 14:44:34][350501454114425][5408 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:45:05][351695960916049][0 ms][INFO] === Request start === [2025-09-09 14:45:05][351695960916049][1 ms][DEBUG] START check_scloud [2025-09-09 14:45:05][351695960916049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:45:05][351695960916049][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15471 4970 24921320 229352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:45:05][351695960916049][305 ms][DEBUG] targetPkg: running [2025-09-09 14:45:05][351695960916049][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 14:45:05][351695960916049][305 ms][DEBUG] START check_boot_completed [2025-09-09 14:45:05][351695960916049][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:45:05][351695960916049][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:45:05][351695960916049][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:45:05][351695960916049][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:45:05][351695960916049][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:45:05][351695960916049][414 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:45:05][351695960916049][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960916049\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6597\"}'\'' -e'"" [2025-09-09 14:45:05][351695960916049][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:45:05][351695960916049][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960916049\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6597\"}'\'' -e'"" [2025-09-09 14:45:09][351695960916049][4694 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06f6edd3-2df6-401e-9551-e50791e83d5b","id":"QR_06f6edd3-2df6-401e-9551-e50791e83d5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:45:09][351695960916049][4850 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-09-09 14:45:09][351695960916049][4850 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-09 14:45:09][351695960916049][4850 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:45:13][351695960916049][1 ms][INFO] === Request start === [2025-09-09 14:45:13][351695960916049][1 ms][DEBUG] START check_scloud [2025-09-09 14:45:13][351695960916049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:45:13][351695960916049][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 15471 4970 25089904 241284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:45:13][351695960916049][261 ms][DEBUG] targetPkg: running [2025-09-09 14:45:13][351695960916049][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 14:45:13][351695960916049][261 ms][DEBUG] START check_boot_completed [2025-09-09 14:45:13][351695960916049][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:45:13][351695960916049][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:45:13][351695960916049][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:45:13][351695960916049][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:45:13][351695960916049][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:45:13][351695960916049][355 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:45:13][351695960916049][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960916049\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 14:45:13][351695960916049][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:45:13][351695960916049][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960916049\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 14:45:17][351695960916049][4494 ms][DEBUG] proc_open done in 4140 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:45:17][351695960916049][4494 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-09-09 14:45:17][351695960916049][4494 ms][WARN] Detected error: Process with pid 15471 either refused to load frida-agent, or terminated during injectionProcess with pid 15471 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:45:17][351695960916049][4494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:45:18][351695960916049][4776 ms][DEBUG] SU: done in 281 ms; outsystem 5392 4970 12900728 576800 ep_poll 0 S system_server\n [2025-09-09 14:45:18][351695960916049][4776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:45:18][351695960916049][4916 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:45:18][351695960916049][4916 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:45:18][351695960916049][4916 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:45:18][351695960916049][5041 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:45:18][351695960916049][5041 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:45:18][351695960916049][5213 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:45:20][351695960916049][7228 ms][DEBUG] START check_boot_completed [2025-09-09 14:45:20][351695960916049][7228 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:45:20][351695960916049][7275 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:45:20][351695960916049][7275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:45:20][351695960916049][7337 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:45:20][351695960916049][7337 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:45:23][351695960916049][10352 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:45:23][351695960916049][10352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960916049\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 14:45:27][351695960916049][14351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5fd55b7-a15b-4ccb-8e93-516dd226651e","id":"QR_d5fd55b7-a15b-4ccb-8e93-516dd226651e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:45:27][351695960916049][14508 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-09 14:45:27][351695960916049][14508 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-09-09 14:45:27][351695960916049][14508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:46:03][350616255428855][0 ms][INFO] === Request start === [2025-09-09 14:46:03][350616255428855][1 ms][DEBUG] START check_scloud [2025-09-09 14:46:03][350616255428855][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:46:04][350616255428855][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 17168 4970 23734204 126508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:46:04][350616255428855][275 ms][DEBUG] targetPkg: running [2025-09-09 14:46:04][350616255428855][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 14:46:04][350616255428855][275 ms][DEBUG] START check_boot_completed [2025-09-09 14:46:04][350616255428855][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:46:04][350616255428855][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:46:04][350616255428855][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:46:04][350616255428855][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:46:04][350616255428855][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:46:04][350616255428855][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:46:04][350616255428855][478 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 981\nsuccessfulTxPacketsPerSecond: 1.364052770278178\nretriedTxPackets: 175\nretriedTxPacketsPerSecond: 0.2623178404381111\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 1.2631612931865968\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:46:04][350616255428855][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:46:04][350616255428855][915 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.763/324.763/324.763/0.000 ms\n [2025-09-09 14:46:04][350616255428855][915 ms][DEBUG] check_internet: online [2025-09-09 14:46:04][350616255428855][915 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:46:04][350616255428855][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255428855\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2435\"}'\'' -e'"" [2025-09-09 14:46:04][350616255428855][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:46:04][350616255428855][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255428855\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2435\"}'\'' -e'"" [2025-09-09 14:46:08][350616255428855][4273 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c47f72a-d1aa-40dc-b6e4-2de3969d7e24","id":"QR_1c47f72a-d1aa-40dc-b6e4-2de3969d7e24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:46:08][350616255428855][4429 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-09 14:46:08][350616255428855][4430 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-09 14:46:08][350616255428855][4430 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:46:10][350616255428855][0 ms][INFO] === Request start === [2025-09-09 14:46:10][350616255428855][1 ms][DEBUG] START check_scloud [2025-09-09 14:46:10][350616255428855][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:46:10][350616255428855][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 17168 4970 23915332 137080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:46:10][350616255428855][293 ms][DEBUG] targetPkg: running [2025-09-09 14:46:10][350616255428855][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 14:46:10][350616255428855][293 ms][DEBUG] START check_boot_completed [2025-09-09 14:46:10][350616255428855][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:46:11][350616255428855][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:46:11][350616255428855][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:46:11][350616255428855][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:46:11][350616255428855][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:46:11][350616255428855][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:46:11][350616255428855][481 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 981\nsuccessfulTxPacketsPerSecond: 1.364052770278178\nretriedTxPackets: 175\nretriedTxPacketsPerSecond: 0.2623178404381111\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 1.2631612931865968\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:46:11][350616255428855][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:46:11][350616255428855][793 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.281/217.281/217.281/0.000 ms\n [2025-09-09 14:46:11][350616255428855][793 ms][DEBUG] check_internet: online [2025-09-09 14:46:11][350616255428855][793 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:46:11][350616255428855][793 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255428855\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9393\"}'\'' -e'"" [2025-09-09 14:46:11][350616255428855][794 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:46:11][350616255428855][794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255428855\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9393\"}'\'' -e'"" [2025-09-09 14:46:16][350616255428855][6292 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db13cb4f-dac2-4bef-9102-076abc3fa625","id":"QR_db13cb4f-dac2-4bef-9102-076abc3fa625","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:46:17][350616255428855][6448 ms][DEBUG] proc_open done in 5654 ms; code=255; res.len=3343 [2025-09-09 14:46:17][350616255428855][6448 ms][DEBUG] END runCmdUntilRes#1 in 5654 ms [2025-09-09 14:46:17][350616255428855][6448 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:49:30][351997880419595][1 ms][INFO] === Request start === [2025-09-09 14:49:30][351997880419595][1 ms][DEBUG] START check_scloud [2025-09-09 14:49:30][351997880419595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:49:31][351997880419595][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 17168 4970 24061460 148980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:49:31][351997880419595][276 ms][DEBUG] targetPkg: running [2025-09-09 14:49:31][351997880419595][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-09 14:49:31][351997880419595][276 ms][DEBUG] START check_boot_completed [2025-09-09 14:49:31][351997880419595][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:49:31][351997880419595][307 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:49:31][351997880419595][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:49:31][351997880419595][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:49:31][351997880419595][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:49:31][351997880419595][354 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:49:31][351997880419595][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351997880419595\",\"model\":\"SM-S916U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1955\"}'\'' -e'"" [2025-09-09 14:49:31][351997880419595][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:49:31][351997880419595][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351997880419595\",\"model\":\"SM-S916U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1955\"}'\'' -e'"" [2025-09-09 14:49:36][351997880419595][5618 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3554a50-bd16-4077-8b04-ccf809d366a0","id":"QR_a3554a50-bd16-4077-8b04-ccf809d366a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:49:36][351997880419595][5775 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-09 14:49:36][351997880419595][5775 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-09 14:49:36][351997880419595][5775 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:50:03][357962506373141][0 ms][INFO] === Request start === [2025-09-09 14:50:03][357962506373141][1 ms][DEBUG] START check_scloud [2025-09-09 14:50:03][357962506373141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:50:03][357962506373141][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 17168 4970 24164792 159892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:50:03][357962506373141][292 ms][DEBUG] targetPkg: running [2025-09-09 14:50:03][357962506373141][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 14:50:03][357962506373141][292 ms][DEBUG] START check_boot_completed [2025-09-09 14:50:03][357962506373141][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:50:03][357962506373141][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:50:03][357962506373141][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:50:03][357962506373141][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:50:03][357962506373141][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:50:03][357962506373141][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:50:03][357962506373141][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1287\nsuccessfulTxPacketsPerSecond: 1.0160576961389807\nretriedTxPackets: 263\nretriedTxPacketsPerSecond: 0.29219959888964153\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1254\nsuccessfulRxPacketsPerSecond: 0.8599965467320131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:50:03][357962506373141][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:50:05][357962506373141][1979 ms][DEBUG] SU: done in 1469 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=402 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 402.830/402.830/402.830/0.000 ms\n [2025-09-09 14:50:05][357962506373141][1979 ms][DEBUG] check_internet: online [2025-09-09 14:50:05][357962506373141][1979 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:50:05][357962506373141][1979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506373141\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4637\"}'\'' -e'"" [2025-09-09 14:50:05][357962506373141][1979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:50:05][357962506373141][1979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506373141\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4637\"}'\'' -e'"" [2025-09-09 14:50:09][357962506373141][6118 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b201eb7e-4f70-492b-a519-5c3cf38e1d2f","id":"QR_b201eb7e-4f70-492b-a519-5c3cf38e1d2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:50:09][357962506373141][6274 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-09 14:50:09][357962506373141][6274 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-09 14:50:09][357962506373141][6275 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:50:12][357962506373141][0 ms][INFO] === Request start === [2025-09-09 14:50:12][357962506373141][1 ms][DEBUG] START check_scloud [2025-09-09 14:50:12][357962506373141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:50:12][357962506373141][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 17168 4970 24311488 170880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:50:12][357962506373141][285 ms][DEBUG] targetPkg: running [2025-09-09 14:50:12][357962506373141][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-09 14:50:12][357962506373141][285 ms][DEBUG] START check_boot_completed [2025-09-09 14:50:12][357962506373141][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:50:12][357962506373141][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:50:12][357962506373141][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:50:12][357962506373141][379 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:50:12][357962506373141][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:50:12][357962506373141][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:50:12][357962506373141][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1287\nsuccessfulTxPacketsPerSecond: 1.0160576961389807\nretriedTxPackets: 263\nretriedTxPacketsPerSecond: 0.29219959888964153\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1254\nsuccessfulRxPacketsPerSecond: 0.8599965467320131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:50:12][357962506373141][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:50:12][357962506373141][941 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.006/319.006/319.006/0.000 ms\n [2025-09-09 14:50:12][357962506373141][941 ms][DEBUG] check_internet: online [2025-09-09 14:50:12][357962506373141][941 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:50:12][357962506373141][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506373141\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8024\"}'\'' -e'"" [2025-09-09 14:50:12][357962506373141][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:50:12][357962506373141][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506373141\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8024\"}'\'' -e'"" [2025-09-09 14:50:17][357962506373141][5580 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7756e2b-e6de-48ec-9156-6583b17daab0","id":"QR_d7756e2b-e6de-48ec-9156-6583b17daab0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:50:17][357962506373141][5737 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-09 14:50:17][357962506373141][5737 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-09 14:50:17][357962506373141][5737 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:51:05][352967354042594][0 ms][INFO] === Request start === [2025-09-09 14:51:05][352967354042594][1 ms][DEBUG] START check_scloud [2025-09-09 14:51:05][352967354042594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:51:05][352967354042594][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 17168 4970 24455068 182376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:51:05][352967354042594][281 ms][DEBUG] targetPkg: running [2025-09-09 14:51:05][352967354042594][281 ms][DEBUG] END check_scloud in 281 ms [2025-09-09 14:51:05][352967354042594][282 ms][DEBUG] START check_boot_completed [2025-09-09 14:51:05][352967354042594][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:51:05][352967354042594][328 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:51:05][352967354042594][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:51:05][352967354042594][391 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:51:05][352967354042594][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:51:05][352967354042594][391 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:51:05][352967354042594][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354042594\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4000\"}'\'' -e'"" [2025-09-09 14:51:05][352967354042594][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:51:05][352967354042594][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354042594\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4000\"}'\'' -e'"" [2025-09-09 14:51:12][352967354042594][7201 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ce237c6-ebb3-43a1-a980-ecc0a063369c","id":"QR_4ce237c6-ebb3-43a1-a980-ecc0a063369c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:51:12][352967354042594][7358 ms][DEBUG] proc_open done in 6966 ms; code=255; res.len=3343 [2025-09-09 14:51:12][352967354042594][7358 ms][DEBUG] END runCmdUntilRes#1 in 6967 ms [2025-09-09 14:51:12][352967354042594][7358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:51:16][352967354042594][0 ms][INFO] === Request start === [2025-09-09 14:51:16][352967354042594][1 ms][DEBUG] START check_scloud [2025-09-09 14:51:16][352967354042594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:51:16][352967354042594][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 17168 4970 24601636 193192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:51:16][352967354042594][295 ms][DEBUG] targetPkg: running [2025-09-09 14:51:16][352967354042594][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 14:51:16][352967354042594][295 ms][DEBUG] START check_boot_completed [2025-09-09 14:51:16][352967354042594][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:51:16][352967354042594][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:51:16][352967354042594][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:51:16][352967354042594][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:51:16][352967354042594][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:51:16][352967354042594][389 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:51:16][352967354042594][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354042594\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3495\"}'\'' -e'"" [2025-09-09 14:51:16][352967354042594][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:51:16][352967354042594][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354042594\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3495\"}'\'' -e'"" [2025-09-09 14:51:20][352967354042594][4591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb7c34ea-966f-428c-8732-0c813781a16d","id":"QR_eb7c34ea-966f-428c-8732-0c813781a16d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:51:20][352967354042594][4747 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-09-09 14:51:20][352967354042594][4747 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-09-09 14:51:20][352967354042594][4747 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:53:05][350091124118048][1 ms][INFO] === Request start === [2025-09-09 14:53:05][350091124118048][1 ms][DEBUG] START check_scloud [2025-09-09 14:53:05][350091124118048][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:53:05][350091124118048][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 17168 4970 24727588 205676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:53:05][350091124118048][263 ms][DEBUG] targetPkg: running [2025-09-09 14:53:05][350091124118048][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 14:53:05][350091124118048][263 ms][DEBUG] START check_boot_completed [2025-09-09 14:53:05][350091124118048][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:53:05][350091124118048][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:53:05][350091124118048][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:53:05][350091124118048][358 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:53:05][350091124118048][358 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:53:05][350091124118048][358 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:53:05][350091124118048][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124118048\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YT90L49EV\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2722\"}'\'' -e'"" [2025-09-09 14:53:05][350091124118048][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:53:05][350091124118048][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124118048\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YT90L49EV\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2722\"}'\'' -e'"" [2025-09-09 14:53:10][350091124118048][4918 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3a36c71-e032-4f2a-a546-55ee0888ec31","id":"QR_a3a36c71-e032-4f2a-a546-55ee0888ec31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:53:10][350091124118048][5074 ms][DEBUG] proc_open done in 4716 ms; code=255; res.len=3343 [2025-09-09 14:53:10][350091124118048][5074 ms][DEBUG] END runCmdUntilRes#1 in 4716 ms [2025-09-09 14:53:10][350091124118048][5074 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:53:12][357211248207575][0 ms][INFO] === Request start === [2025-09-09 14:53:12][357211248207575][1 ms][DEBUG] START check_scloud [2025-09-09 14:53:12][357211248207575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:53:12][357211248207575][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 17168 4970 24909100 215972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:53:12][357211248207575][277 ms][DEBUG] targetPkg: running [2025-09-09 14:53:12][357211248207575][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 14:53:12][357211248207575][277 ms][DEBUG] START check_boot_completed [2025-09-09 14:53:12][357211248207575][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:53:12][357211248207575][323 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:53:12][357211248207575][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:53:12][357211248207575][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:53:12][357211248207575][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:53:12][357211248207575][370 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:53:12][357211248207575][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248207575\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3770\"}'\'' -e'"" [2025-09-09 14:53:12][357211248207575][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:53:12][357211248207575][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248207575\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3770\"}'\'' -e'"" [2025-09-09 14:53:16][357211248207575][3916 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b761f2f6-7ddd-4de8-b25a-ae5611c314c6","id":"QR_b761f2f6-7ddd-4de8-b25a-ae5611c314c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:53:16][357211248207575][4072 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-09 14:53:16][357211248207575][4072 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-09 14:53:16][357211248207575][4073 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:53:18][357211248207575][0 ms][INFO] === Request start === [2025-09-09 14:53:18][357211248207575][1 ms][DEBUG] START check_scloud [2025-09-09 14:53:18][357211248207575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:53:18][357211248207575][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 17168 4970 25077172 227232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:53:18][357211248207575][272 ms][DEBUG] targetPkg: running [2025-09-09 14:53:18][357211248207575][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 14:53:18][357211248207575][272 ms][DEBUG] START check_boot_completed [2025-09-09 14:53:18][357211248207575][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:53:18][357211248207575][303 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 14:53:18][357211248207575][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:53:18][357211248207575][365 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:53:18][357211248207575][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:53:18][357211248207575][365 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:53:18][357211248207575][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248207575\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4305\"}'\'' -e'"" [2025-09-09 14:53:18][357211248207575][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:53:18][357211248207575][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248207575\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4305\"}'\'' -e'"" [2025-09-09 14:53:23][357211248207575][5223 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58d885de-2b2c-4db1-93bf-e80db2d4670d","id":"QR_58d885de-2b2c-4db1-93bf-e80db2d4670d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:53:23][357211248207575][5379 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-09 14:53:23][357211248207575][5379 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-09 14:53:23][357211248207575][5380 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:54:03][357962503807307][0 ms][INFO] === Request start === [2025-09-09 14:54:03][357962503807307][1 ms][DEBUG] START check_scloud [2025-09-09 14:54:03][357962503807307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:54:03][357962503807307][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17168 4970 25152084 238524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:54:03][357962503807307][308 ms][DEBUG] targetPkg: running [2025-09-09 14:54:03][357962503807307][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 14:54:03][357962503807307][308 ms][DEBUG] START check_boot_completed [2025-09-09 14:54:03][357962503807307][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:54:03][357962503807307][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:54:03][357962503807307][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:54:03][357962503807307][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:54:03][357962503807307][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:54:03][357962503807307][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:54:03][357962503807307][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1540\nsuccessfulTxPacketsPerSecond: 0.8397336749799195\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.20910364238630405\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.7202458793306028\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:54:03][357962503807307][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:54:05][357962503807307][1901 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.712/305.712/305.712/0.000 ms\n [2025-09-09 14:54:05][357962503807307][1901 ms][DEBUG] check_internet: online [2025-09-09 14:54:05][357962503807307][1901 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:54:05][357962503807307][1901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503807307\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8626\"}'\'' -e'"" [2025-09-09 14:54:05][357962503807307][1901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:54:05][357962503807307][1901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503807307\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8626\"}'\'' -e'"" [2025-09-09 14:54:09][357962503807307][5916 ms][DEBUG] proc_open done in 4015 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:54:09][357962503807307][5916 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-09 14:54:09][357962503807307][5916 ms][WARN] Detected error: Process with pid 17168 either refused to load frida-agent, or terminated during injectionProcess with pid 17168 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:54:09][357962503807307][5916 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:54:09][357962503807307][6213 ms][DEBUG] SU: done in 296 ms; outsystem 5392 4970 12601776 246636 ep_poll 0 S system_server\n [2025-09-09 14:54:09][357962503807307][6213 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:54:09][357962503807307][6353 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:54:09][357962503807307][6353 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:54:09][357962503807307][6353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:54:09][357962503807307][6478 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:54:09][357962503807307][6478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:54:09][357962503807307][6634 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:54:11][357962503807307][8649 ms][DEBUG] START check_boot_completed [2025-09-09 14:54:11][357962503807307][8649 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:54:12][357962503807307][8696 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:54:12][357962503807307][8696 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:54:12][357962503807307][8743 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:54:12][357962503807307][8743 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:54:15][357962503807307][11758 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:54:15][357962503807307][11758 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503807307\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8626\"}'\'' -e'"" [2025-09-09 14:54:18][357962503807307][15351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68b8c5c1-ec94-4ca5-9d34-6b4073ba8bf2","id":"QR_68b8c5c1-ec94-4ca5-9d34-6b4073ba8bf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:54:18][357962503807307][15507 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-09 14:54:18][357962503807307][15507 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-09-09 14:54:18][357962503807307][15507 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:54:21][357962503807307][0 ms][INFO] === Request start === [2025-09-09 14:54:21][357962503807307][1 ms][DEBUG] START check_scloud [2025-09-09 14:54:21][357962503807307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:54:21][357962503807307][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 18737 4970 23846076 123992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:54:21][357962503807307][246 ms][DEBUG] targetPkg: running [2025-09-09 14:54:21][357962503807307][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 14:54:21][357962503807307][246 ms][DEBUG] START check_boot_completed [2025-09-09 14:54:21][357962503807307][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:54:21][357962503807307][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:54:21][357962503807307][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:54:21][357962503807307][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:54:21][357962503807307][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:54:21][357962503807307][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:54:21][357962503807307][449 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1540\nsuccessfulTxPacketsPerSecond: 0.8397336749799195\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.20910364238630405\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.7202458793306028\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:54:21][357962503807307][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:54:22][357962503807307][855 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.104/299.104/299.104/0.000 ms\n [2025-09-09 14:54:22][357962503807307][855 ms][DEBUG] check_internet: online [2025-09-09 14:54:22][357962503807307][855 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:54:22][357962503807307][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503807307\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1679\"}'\'' -e'"" [2025-09-09 14:54:22][357962503807307][855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:54:22][357962503807307][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503807307\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1679\"}'\'' -e'"" [2025-09-09 14:54:26][357962503807307][5479 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cf337f9-e238-46b6-992f-0c91c9c4b8c7","id":"QR_4cf337f9-e238-46b6-992f-0c91c9c4b8c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:54:26][357962503807307][5635 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-09 14:54:26][357962503807307][5635 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-09 14:54:26][357962503807307][5635 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:54:31][357866606801267][0 ms][INFO] === Request start === [2025-09-09 14:54:31][357866606801267][1 ms][DEBUG] START check_scloud [2025-09-09 14:54:31][357866606801267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:54:31][357866606801267][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 18737 4970 24040592 137140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:54:31][357866606801267][254 ms][DEBUG] targetPkg: running [2025-09-09 14:54:31][357866606801267][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 14:54:31][357866606801267][254 ms][DEBUG] START check_boot_completed [2025-09-09 14:54:31][357866606801267][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:54:31][357866606801267][299 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 14:54:31][357866606801267][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:54:31][357866606801267][348 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:54:31][357866606801267][348 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:54:31][357866606801267][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:54:31][357866606801267][473 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1540\nsuccessfulTxPacketsPerSecond: 0.8397336749799195\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.20910364238630405\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.7202458793306028\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:54:31][357866606801267][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:54:31][357866606801267][846 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.782/257.782/257.782/0.000 ms\n [2025-09-09 14:54:31][357866606801267][846 ms][DEBUG] check_internet: online [2025-09-09 14:54:31][357866606801267][846 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:54:31][357866606801267][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866606801267\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1949\"}'\'' -e'"" [2025-09-09 14:54:31][357866606801267][847 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:54:31][357866606801267][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866606801267\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1949\"}'\'' -e'"" [2025-09-09 14:54:35][357866606801267][4205 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_651c19e3-db6f-4f3e-b16a-b730db23e8ad","id":"QR_651c19e3-db6f-4f3e-b16a-b730db23e8ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:54:35][357866606801267][4361 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-09 14:54:35][357866606801267][4361 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-09 14:54:35][357866606801267][4361 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:54:37][357866606801267][0 ms][INFO] === Request start === [2025-09-09 14:54:37][357866606801267][1 ms][DEBUG] START check_scloud [2025-09-09 14:54:37][357866606801267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:54:37][357866606801267][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 18737 4970 24188340 148968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:54:37][357866606801267][296 ms][DEBUG] targetPkg: running [2025-09-09 14:54:37][357866606801267][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 14:54:37][357866606801267][296 ms][DEBUG] START check_boot_completed [2025-09-09 14:54:37][357866606801267][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:54:38][357866606801267][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:54:38][357866606801267][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:54:38][357866606801267][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:54:38][357866606801267][405 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 14:54:38][357866606801267][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:54:38][357866606801267][531 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1540\nsuccessfulTxPacketsPerSecond: 0.8397336749799195\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.20910364238630405\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.7202458793306028\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:54:38][357866606801267][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:54:38][357866606801267][920 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.785/275.785/275.785/0.000 ms\n [2025-09-09 14:54:38][357866606801267][920 ms][DEBUG] check_internet: online [2025-09-09 14:54:38][357866606801267][921 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:54:38][357866606801267][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866606801267\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7321\"}'\'' -e'"" [2025-09-09 14:54:38][357866606801267][921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:54:38][357866606801267][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866606801267\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7321\"}'\'' -e'"" [2025-09-09 14:54:43][357866606801267][5575 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86955acd-cc38-4d0b-bc98-c63d079db5d4","id":"QR_86955acd-cc38-4d0b-bc98-c63d079db5d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:54:43][357866606801267][5731 ms][DEBUG] proc_open done in 4810 ms; code=255; res.len=3343 [2025-09-09 14:54:43][357866606801267][5731 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 14:54:43][357866606801267][5731 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:55:03][353403930912190][0 ms][INFO] === Request start === [2025-09-09 14:55:03][353403930912190][1 ms][DEBUG] START check_scloud [2025-09-09 14:55:03][353403930912190][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:55:04][353403930912190][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 18737 4970 24215712 160612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:55:04][353403930912190][327 ms][DEBUG] targetPkg: running [2025-09-09 14:55:04][353403930912190][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-09 14:55:04][353403930912190][327 ms][DEBUG] START check_boot_completed [2025-09-09 14:55:04][353403930912190][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:55:04][353403930912190][374 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:55:04][353403930912190][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:55:04][353403930912190][422 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 14:55:04][353403930912190][422 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:55:04][353403930912190][423 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:55:04][353403930912190][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930912190\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2796\"}'\'' -e'"" [2025-09-09 14:55:04][353403930912190][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:55:04][353403930912190][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930912190\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2796\"}'\'' -e'"" [2025-09-09 14:55:07][353403930912190][3967 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2fd7914-8a9d-48a5-9219-74f85118a520","id":"QR_f2fd7914-8a9d-48a5-9219-74f85118a520","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:55:08][353403930912190][4123 ms][DEBUG] proc_open done in 3700 ms; code=255; res.len=3343 [2025-09-09 14:55:08][353403930912190][4123 ms][DEBUG] END runCmdUntilRes#1 in 3700 ms [2025-09-09 14:55:08][353403930912190][4123 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:55:10][353403930912190][1 ms][INFO] === Request start === [2025-09-09 14:55:10][353403930912190][1 ms][DEBUG] START check_scloud [2025-09-09 14:55:10][353403930912190][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:55:10][353403930912190][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 18737 4970 24368296 170960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:55:10][353403930912190][278 ms][DEBUG] targetPkg: running [2025-09-09 14:55:10][353403930912190][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 14:55:10][353403930912190][278 ms][DEBUG] START check_boot_completed [2025-09-09 14:55:10][353403930912190][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:55:10][353403930912190][324 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:55:10][353403930912190][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:55:10][353403930912190][387 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:55:10][353403930912190][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:55:10][353403930912190][387 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:55:10][353403930912190][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930912190\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3110\"}'\'' -e'"" [2025-09-09 14:55:10][353403930912190][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:55:10][353403930912190][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930912190\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3110\"}'\'' -e'"" [2025-09-09 14:55:15][353403930912190][4839 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc0382ee-61ad-4b3b-83e0-734f5e2b369d","id":"QR_fc0382ee-61ad-4b3b-83e0-734f5e2b369d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:55:15][353403930912190][4995 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-09 14:55:15][353403930912190][4995 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-09 14:55:15][353403930912190][4995 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:56:03][352397453344370][0 ms][INFO] === Request start === [2025-09-09 14:56:03][352397453344370][1 ms][DEBUG] START check_scloud [2025-09-09 14:56:03][352397453344370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:56:03][352397453344370][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 18737 4970 24497476 183124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:56:03][352397453344370][268 ms][DEBUG] targetPkg: running [2025-09-09 14:56:03][352397453344370][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 14:56:03][352397453344370][268 ms][DEBUG] START check_boot_completed [2025-09-09 14:56:03][352397453344370][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:56:03][352397453344370][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:56:03][352397453344370][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:56:03][352397453344370][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:56:03][352397453344370][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:56:03][352397453344370][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:56:03][352397453344370][471 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 1.2765302983697324\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.3768071362657644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1614\nsuccessfulRxPacketsPerSecond: 1.0996616425715164\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:56:03][352397453344370][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:56:04][352397453344370][861 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.610/291.610/291.610/0.000 ms\n [2025-09-09 14:56:04][352397453344370][861 ms][DEBUG] check_internet: online [2025-09-09 14:56:04][352397453344370][862 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:56:04][352397453344370][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453344370\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2331\"}'\'' -e'"" [2025-09-09 14:56:04][352397453344370][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:56:04][352397453344370][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453344370\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2331\"}'\'' -e'"" [2025-09-09 14:56:07][352397453344370][4579 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8354810d-9768-4397-b820-77c4f025cbf2","id":"QR_8354810d-9768-4397-b820-77c4f025cbf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:56:07][352397453344370][4735 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 14:56:07][352397453344370][4735 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 14:56:07][352397453344370][4736 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:56:10][352397453344370][0 ms][INFO] === Request start === [2025-09-09 14:56:10][352397453344370][1 ms][DEBUG] START check_scloud [2025-09-09 14:56:10][352397453344370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:56:10][352397453344370][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 18737 4970 24611448 194368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:56:10][352397453344370][273 ms][DEBUG] targetPkg: running [2025-09-09 14:56:10][352397453344370][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 14:56:10][352397453344370][273 ms][DEBUG] START check_boot_completed [2025-09-09 14:56:10][352397453344370][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:56:10][352397453344370][318 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 14:56:10][352397453344370][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:56:10][352397453344370][381 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:56:10][352397453344370][381 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 14:56:10][352397453344370][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:56:10][352397453344370][490 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 1.2765302983697324\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.3768071362657644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1614\nsuccessfulRxPacketsPerSecond: 1.0996616425715164\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:56:10][352397453344370][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:56:11][352397453344370][896 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.298/288.298/288.298/0.000 ms\n [2025-09-09 14:56:11][352397453344370][897 ms][DEBUG] check_internet: online [2025-09-09 14:56:11][352397453344370][897 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:56:11][352397453344370][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453344370\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8291\"}'\'' -e'"" [2025-09-09 14:56:11][352397453344370][897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:56:11][352397453344370][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453344370\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8291\"}'\'' -e'"" [2025-09-09 14:56:16][352397453344370][5942 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ae1a397-731e-479e-b863-b4ea1e48cd6e","id":"QR_2ae1a397-731e-479e-b863-b4ea1e48cd6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:56:16][352397453344370][6098 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 14:56:16][352397453344370][6098 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 14:56:16][352397453344370][6098 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:58:03][351062772392036][1 ms][INFO] === Request start === [2025-09-09 14:58:03][351062772392036][1 ms][DEBUG] START check_scloud [2025-09-09 14:58:03][351062772392036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:58:03][351062772392036][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 18737 4970 24708920 206544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:58:03][351062772392036][300 ms][DEBUG] targetPkg: running [2025-09-09 14:58:03][351062772392036][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 14:58:03][351062772392036][300 ms][DEBUG] START check_boot_completed [2025-09-09 14:58:03][351062772392036][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:58:03][351062772392036][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:58:03][351062772392036][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:58:04][351062772392036][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 14:58:04][351062772392036][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:58:04][351062772392036][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:58:04][351062772392036][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 1.2765302983697324\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.3768071362657644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1614\nsuccessfulRxPacketsPerSecond: 1.0996616425715164\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:58:04][351062772392036][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:58:05][351062772392036][1909 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.578/299.578/299.578/0.000 ms\n [2025-09-09 14:58:05][351062772392036][1909 ms][DEBUG] check_internet: online [2025-09-09 14:58:05][351062772392036][1909 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:58:05][351062772392036][1909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062772392036\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6800\"}'\'' -e'"" [2025-09-09 14:58:05][351062772392036][1909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:58:05][351062772392036][1909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062772392036\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6800\"}'\'' -e'"" [2025-09-09 14:58:09][351062772392036][6048 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c94503ee-91b8-4d38-9833-f534ae05b25c","id":"QR_c94503ee-91b8-4d38-9833-f534ae05b25c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:58:09][351062772392036][6205 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-09-09 14:58:09][351062772392036][6205 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-09 14:58:09][351062772392036][6205 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:58:12][351062772392036][0 ms][INFO] === Request start === [2025-09-09 14:58:12][351062772392036][1 ms][DEBUG] START check_scloud [2025-09-09 14:58:12][351062772392036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:58:12][351062772392036][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18737 4970 24835136 217080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:58:12][351062772392036][296 ms][DEBUG] targetPkg: running [2025-09-09 14:58:12][351062772392036][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 14:58:12][351062772392036][296 ms][DEBUG] START check_boot_completed [2025-09-09 14:58:12][351062772392036][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:58:12][351062772392036][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:58:12][351062772392036][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:58:12][351062772392036][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 14:58:12][351062772392036][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 14:58:12][351062772392036][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:58:12][351062772392036][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 1.2765302983697324\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.3768071362657644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1614\nsuccessfulRxPacketsPerSecond: 1.0996616425715164\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:58:12][351062772392036][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:58:13][351062772392036][951 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.618/292.618/292.618/0.000 ms\n [2025-09-09 14:58:13][351062772392036][951 ms][DEBUG] check_internet: online [2025-09-09 14:58:13][351062772392036][951 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:58:13][351062772392036][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062772392036\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1110\"}'\'' -e'"" [2025-09-09 14:58:13][351062772392036][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:58:13][351062772392036][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062772392036\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1110\"}'\'' -e'"" [2025-09-09 14:58:17][351062772392036][5403 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66f5506d-f283-4122-9aa8-9da5030f6fe0","id":"QR_66f5506d-f283-4122-9aa8-9da5030f6fe0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:58:17][351062772392036][5559 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-09 14:58:17][351062772392036][5560 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-09 14:58:17][351062772392036][5560 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:58:21][350726020044158][0 ms][INFO] === Request start === [2025-09-09 14:58:21][350726020044158][1 ms][DEBUG] START check_scloud [2025-09-09 14:58:21][350726020044158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:58:22][350726020044158][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 18737 4970 24966856 228792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:58:22][350726020044158][321 ms][DEBUG] targetPkg: running [2025-09-09 14:58:22][350726020044158][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 14:58:22][350726020044158][321 ms][DEBUG] START check_boot_completed [2025-09-09 14:58:22][350726020044158][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:58:22][350726020044158][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:58:22][350726020044158][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:58:22][350726020044158][416 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:58:22][350726020044158][416 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 14:58:22][350726020044158][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:58:22][350726020044158][540 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 1.2765302983697324\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.3768071362657644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1614\nsuccessfulRxPacketsPerSecond: 1.0996616425715164\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:58:22][350726020044158][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:58:22][350726020044158][899 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.177/248.177/248.177/0.000 ms\n [2025-09-09 14:58:22][350726020044158][899 ms][DEBUG] check_internet: online [2025-09-09 14:58:22][350726020044158][899 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:58:22][350726020044158][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020044158\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1973\"}'\'' -e'"" [2025-09-09 14:58:22][350726020044158][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:58:22][350726020044158][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020044158\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1973\"}'\'' -e'"" [2025-09-09 14:58:26][350726020044158][4320 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75f4dea5-71ef-4aed-87bb-4dab6b123fec","id":"QR_75f4dea5-71ef-4aed-87bb-4dab6b123fec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:58:26][350726020044158][4476 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-09 14:58:26][350726020044158][4476 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 14:58:26][350726020044158][4476 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:58:28][350726020044158][0 ms][INFO] === Request start === [2025-09-09 14:58:28][350726020044158][1 ms][DEBUG] START check_scloud [2025-09-09 14:58:28][350726020044158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:58:28][350726020044158][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18737 4970 25101232 239864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:58:28][350726020044158][307 ms][DEBUG] targetPkg: running [2025-09-09 14:58:28][350726020044158][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 14:58:28][350726020044158][307 ms][DEBUG] START check_boot_completed [2025-09-09 14:58:28][350726020044158][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:58:29][350726020044158][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:58:29][350726020044158][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:58:29][350726020044158][386 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 14:58:29][350726020044158][387 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 14:58:29][350726020044158][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 14:58:29][350726020044158][494 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 1.2765302983697324\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.3768071362657644\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1614\nsuccessfulRxPacketsPerSecond: 1.0996616425715164\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 14:58:29][350726020044158][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 14:58:29][350726020044158][854 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.131/261.131/261.131/0.000 ms\n [2025-09-09 14:58:29][350726020044158][854 ms][DEBUG] check_internet: online [2025-09-09 14:58:29][350726020044158][854 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:58:29][350726020044158][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020044158\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3680\"}'\'' -e'"" [2025-09-09 14:58:29][350726020044158][854 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:58:29][350726020044158][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020044158\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3680\"}'\'' -e'"" [2025-09-09 14:58:33][350726020044158][4650 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 14:58:33][350726020044158][4650 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-09 14:58:33][350726020044158][4650 ms][WARN] Detected error: Process with pid 18737 either refused to load frida-agent, or terminated during injectionProcess with pid 18737 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 14:58:33][350726020044158][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 14:58:33][350726020044158][4900 ms][DEBUG] SU: done in 250 ms; outsystem 5392 4970 12710124 211900 ep_poll 0 S system_server\n [2025-09-09 14:58:33][350726020044158][4900 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 14:58:33][350726020044158][5040 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 14:58:33][350726020044158][5040 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 14:58:33][350726020044158][5040 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 14:58:33][350726020044158][5165 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 14:58:33][350726020044158][5165 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 14:58:33][350726020044158][5337 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 14:58:36][350726020044158][7352 ms][DEBUG] START check_boot_completed [2025-09-09 14:58:36][350726020044158][7352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:58:36][350726020044158][7399 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:58:36][350726020044158][7399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:58:36][350726020044158][7446 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:58:36][350726020044158][7446 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 14:58:39][350726020044158][10461 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 14:58:39][350726020044158][10461 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020044158\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3680\"}'\'' -e'"" [2025-09-09 14:58:43][350726020044158][15006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ebf095b-c6cc-442e-b9fe-38d59240c581","id":"QR_7ebf095b-c6cc-442e-b9fe-38d59240c581","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:58:43][350726020044158][15163 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 14:58:43][350726020044158][15163 ms][DEBUG] END runCmdUntilRes#2 in 4702 ms [2025-09-09 14:58:43][350726020044158][15163 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:59:03][350331805750895][0 ms][INFO] === Request start === [2025-09-09 14:59:03][350331805750895][1 ms][DEBUG] START check_scloud [2025-09-09 14:59:03][350331805750895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:59:03][350331805750895][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 20383 4970 23803564 126188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:59:03][350331805750895][313 ms][DEBUG] targetPkg: running [2025-09-09 14:59:03][350331805750895][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 14:59:03][350331805750895][313 ms][DEBUG] START check_boot_completed [2025-09-09 14:59:03][350331805750895][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:59:03][350331805750895][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 14:59:03][350331805750895][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:59:03][350331805750895][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:59:03][350331805750895][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:59:03][350331805750895][406 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:59:03][350331805750895][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331805750895\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2994\"}'\'' -e'"" [2025-09-09 14:59:03][350331805750895][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:59:03][350331805750895][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331805750895\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2994\"}'\'' -e'"" [2025-09-09 14:59:07][350331805750895][3765 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d95d67d4-8893-4f15-a693-13b0394b3aba","id":"QR_d95d67d4-8893-4f15-a693-13b0394b3aba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:59:07][350331805750895][3921 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-09 14:59:07][350331805750895][3921 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-09 14:59:07][350331805750895][3921 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:59:09][350331805750895][0 ms][INFO] === Request start === [2025-09-09 14:59:09][350331805750895][1 ms][DEBUG] START check_scloud [2025-09-09 14:59:09][350331805750895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:59:09][350331805750895][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 20383 4970 23867844 137256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:59:09][350331805750895][270 ms][DEBUG] targetPkg: running [2025-09-09 14:59:09][350331805750895][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 14:59:09][350331805750895][270 ms][DEBUG] START check_boot_completed [2025-09-09 14:59:09][350331805750895][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:59:09][350331805750895][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:59:09][350331805750895][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:59:09][350331805750895][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:59:09][350331805750895][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:59:09][350331805750895][363 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:59:09][350331805750895][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331805750895\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6493\"}'\'' -e'"" [2025-09-09 14:59:09][350331805750895][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:59:09][350331805750895][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331805750895\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6493\"}'\'' -e'"" [2025-09-09 14:59:14][350331805750895][4628 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9adaba9a-64d1-47c8-9291-45c6847aa6b2","id":"QR_9adaba9a-64d1-47c8-9291-45c6847aa6b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:59:14][350331805750895][4784 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-09-09 14:59:14][350331805750895][4784 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-09-09 14:59:14][350331805750895][4784 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:59:18][356663765877753][0 ms][INFO] === Request start === [2025-09-09 14:59:18][356663765877753][1 ms][DEBUG] START check_scloud [2025-09-09 14:59:18][356663765877753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:59:18][356663765877753][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 20383 4970 24016396 148908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:59:18][356663765877753][320 ms][DEBUG] targetPkg: running [2025-09-09 14:59:18][356663765877753][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 14:59:18][356663765877753][320 ms][DEBUG] START check_boot_completed [2025-09-09 14:59:18][356663765877753][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:59:18][356663765877753][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 14:59:18][356663765877753][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:59:18][356663765877753][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 14:59:18][356663765877753][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 14:59:18][356663765877753][398 ms][DEBUG] rawBody.length=1150 [2025-09-09 14:59:18][356663765877753][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765877753\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 14:59:18][356663765877753][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:59:18][356663765877753][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765877753\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-09 14:59:23][356663765877753][4725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f8e45c6-c979-4a82-8fa6-bf6939fcb037","id":"QR_3f8e45c6-c979-4a82-8fa6-bf6939fcb037","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:59:23][356663765877753][4881 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 14:59:23][356663765877753][4881 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 14:59:23][356663765877753][4881 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 14:59:25][356663765877753][0 ms][INFO] === Request start === [2025-09-09 14:59:25][356663765877753][1 ms][DEBUG] START check_scloud [2025-09-09 14:59:25][356663765877753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 14:59:26][356663765877753][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 20383 4970 24175152 159956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 14:59:26][356663765877753][262 ms][DEBUG] targetPkg: running [2025-09-09 14:59:26][356663765877753][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 14:59:26][356663765877753][262 ms][DEBUG] START check_boot_completed [2025-09-09 14:59:26][356663765877753][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 14:59:26][356663765877753][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 14:59:26][356663765877753][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 14:59:26][356663765877753][355 ms][DEBUG] SU: done in 46 ms; out [2025-09-09 14:59:26][356663765877753][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 14:59:26][356663765877753][355 ms][DEBUG] rawBody.length=1160 [2025-09-09 14:59:26][356663765877753][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765877753\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7407\"}'\'' -e'"" [2025-09-09 14:59:26][356663765877753][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 14:59:26][356663765877753][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765877753\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7407\"}'\'' -e'"" [2025-09-09 14:59:31][356663765877753][5354 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fff0451-4146-418f-bc72-f32a44aa8bf4","id":"QR_8fff0451-4146-418f-bc72-f32a44aa8bf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 14:59:31][356663765877753][5510 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-09 14:59:31][356663765877753][5510 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-09 14:59:31][356663765877753][5510 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:06:05][354291421346351][1 ms][INFO] === Request start === [2025-09-09 15:06:05][354291421346351][1 ms][DEBUG] START check_scloud [2025-09-09 15:06:05][354291421346351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:06:05][354291421346351][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 20383 4970 24282668 170952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:06:05][354291421346351][258 ms][DEBUG] targetPkg: running [2025-09-09 15:06:05][354291421346351][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 15:06:05][354291421346351][258 ms][DEBUG] START check_boot_completed [2025-09-09 15:06:05][354291421346351][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:06:05][354291421346351][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:06:05][354291421346351][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:06:05][354291421346351][337 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 15:06:05][354291421346351][337 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 15:06:05][354291421346351][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:06:05][354291421346351][461 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2224\nsuccessfulTxPacketsPerSecond: 0.1992382457736587\nretriedTxPackets: 490\nretriedTxPacketsPerSecond: 0.053130198872975654\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2037\nsuccessfulRxPacketsPerSecond: 0.16603187147804893\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:06:05][354291421346351][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:06:06][354291421346351][1742 ms][DEBUG] SU: done in 1280 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.295/287.295/287.295/0.000 ms\n [2025-09-09 15:06:06][354291421346351][1742 ms][DEBUG] check_internet: online [2025-09-09 15:06:06][354291421346351][1742 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:06:06][354291421346351][1742 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421346351\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2292\"}'\'' -e'"" [2025-09-09 15:06:06][354291421346351][1742 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:06:06][354291421346351][1742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421346351\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2292\"}'\'' -e'"" [2025-09-09 15:06:11][354291421346351][6788 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccfc6bf9-6d7e-4761-8417-b3b3f8371ab4","id":"QR_ccfc6bf9-6d7e-4761-8417-b3b3f8371ab4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:06:12][354291421346351][6944 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 15:06:12][354291421346351][6944 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 15:06:12][354291421346351][6944 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:06:15][354291421346351][0 ms][INFO] === Request start === [2025-09-09 15:06:15][354291421346351][0 ms][DEBUG] START check_scloud [2025-09-09 15:06:15][354291421346351][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:06:15][354291421346351][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 20383 4970 24422272 182696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:06:15][354291421346351][297 ms][DEBUG] targetPkg: running [2025-09-09 15:06:15][354291421346351][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 15:06:15][354291421346351][297 ms][DEBUG] START check_boot_completed [2025-09-09 15:06:15][354291421346351][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:06:15][354291421346351][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:06:15][354291421346351][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:06:15][354291421346351][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:06:15][354291421346351][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:06:15][354291421346351][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:06:16][354291421346351][546 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2224\nsuccessfulTxPacketsPerSecond: 0.1992382457736587\nretriedTxPackets: 490\nretriedTxPacketsPerSecond: 0.053130198872975654\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2037\nsuccessfulRxPacketsPerSecond: 0.16603187147804893\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:06:16][354291421346351][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:06:16][354291421346351][968 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.331/326.331/326.331/0.000 ms\n [2025-09-09 15:06:16][354291421346351][968 ms][DEBUG] check_internet: online [2025-09-09 15:06:16][354291421346351][968 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:06:16][354291421346351][968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421346351\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2145\"}'\'' -e'"" [2025-09-09 15:06:16][354291421346351][968 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:06:16][354291421346351][968 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421346351\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2145\"}'\'' -e'"" [2025-09-09 15:06:20][354291421346351][4717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66c97374-a277-4fff-872f-30db4fdaa895","id":"QR_66c97374-a277-4fff-872f-30db4fdaa895","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:06:20][354291421346351][4873 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-09 15:06:20][354291421346351][4873 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-09 15:06:20][354291421346351][4874 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:07:03][356019747949766][0 ms][INFO] === Request start === [2025-09-09 15:07:03][356019747949766][1 ms][DEBUG] START check_scloud [2025-09-09 15:07:03][356019747949766][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:07:03][356019747949766][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 20383 4970 24519744 193880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:07:03][356019747949766][296 ms][DEBUG] targetPkg: running [2025-09-09 15:07:03][356019747949766][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 15:07:03][356019747949766][296 ms][DEBUG] START check_boot_completed [2025-09-09 15:07:03][356019747949766][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:07:03][356019747949766][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:07:03][356019747949766][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:07:03][356019747949766][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:07:03][356019747949766][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:07:03][356019747949766][405 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:07:03][356019747949766][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019747949766\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8399\"}'\'' -e'"" [2025-09-09 15:07:03][356019747949766][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:07:03][356019747949766][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019747949766\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8399\"}'\'' -e'"" [2025-09-09 15:07:07][356019747949766][3763 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5970264-2502-442f-89ba-b0597a95d7f3","id":"QR_a5970264-2502-442f-89ba-b0597a95d7f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:07:07][356019747949766][3920 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-09 15:07:07][356019747949766][3920 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-09 15:07:07][356019747949766][3920 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:07:09][356019747949766][0 ms][INFO] === Request start === [2025-09-09 15:07:09][356019747949766][1 ms][DEBUG] START check_scloud [2025-09-09 15:07:09][356019747949766][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:07:09][356019747949766][240 ms][DEBUG] SU: done in 240 ms; outu0_a118 20383 4970 24660296 205744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:07:09][356019747949766][241 ms][DEBUG] targetPkg: running [2025-09-09 15:07:09][356019747949766][241 ms][DEBUG] END check_scloud in 240 ms [2025-09-09 15:07:09][356019747949766][241 ms][DEBUG] START check_boot_completed [2025-09-09 15:07:09][356019747949766][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:07:09][356019747949766][287 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:07:09][356019747949766][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:07:10][356019747949766][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:07:10][356019747949766][334 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:07:10][356019747949766][334 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:07:10][356019747949766][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019747949766\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2821\"}'\'' -e'"" [2025-09-09 15:07:10][356019747949766][334 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:07:10][356019747949766][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019747949766\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2821\"}'\'' -e'"" [2025-09-09 15:07:15][356019747949766][5989 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f1d1da9-847c-43c5-a36c-2a64e09a4674","id":"QR_9f1d1da9-847c-43c5-a36c-2a64e09a4674","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:07:15][356019747949766][6145 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-09 15:07:15][356019747949766][6145 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-09 15:07:15][356019747949766][6146 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:15:03][358141430502450][1 ms][INFO] === Request start === [2025-09-09 15:15:03][358141430502450][1 ms][DEBUG] START check_scloud [2025-09-09 15:15:03][358141430502450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:15:03][358141430502450][280 ms][DEBUG] SU: done in 278 ms; outu0_a118 20383 4970 24734012 213708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:15:03][358141430502450][280 ms][DEBUG] targetPkg: running [2025-09-09 15:15:03][358141430502450][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 15:15:03][358141430502450][280 ms][DEBUG] START check_boot_completed [2025-09-09 15:15:03][358141430502450][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:15:03][358141430502450][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:15:03][358141430502450][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:15:03][358141430502450][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:15:03][358141430502450][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:15:03][358141430502450][373 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:15:03][358141430502450][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430502450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-09-09 15:15:03][358141430502450][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:15:03][358141430502450][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430502450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-09-09 15:15:08][358141430502450][5325 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2ef43c3-035a-45a9-888f-5954fd84c4a3","id":"QR_d2ef43c3-035a-45a9-888f-5954fd84c4a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:15:08][358141430502450][5481 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 15:15:08][358141430502450][5481 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 15:15:08][358141430502450][5481 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:15:11][358141430502450][0 ms][INFO] === Request start === [2025-09-09 15:15:11][358141430502450][1 ms][DEBUG] START check_scloud [2025-09-09 15:15:11][358141430502450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:15:11][358141430502450][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 20383 4970 24871568 224888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:15:11][358141430502450][263 ms][DEBUG] targetPkg: running [2025-09-09 15:15:11][358141430502450][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 15:15:11][358141430502450][263 ms][DEBUG] START check_boot_completed [2025-09-09 15:15:11][358141430502450][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:15:11][358141430502450][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:15:11][358141430502450][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:15:11][358141430502450][357 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 15:15:11][358141430502450][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 15:15:11][358141430502450][357 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:15:11][358141430502450][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430502450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3125\"}'\'' -e'"" [2025-09-09 15:15:11][358141430502450][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:15:11][358141430502450][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430502450\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3125\"}'\'' -e'"" [2025-09-09 15:15:17][358141430502450][5684 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b37c082c-9d2e-45f7-990d-cdab3ee8c300","id":"QR_b37c082c-9d2e-45f7-990d-cdab3ee8c300","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:15:17][358141430502450][5840 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-09-09 15:15:17][358141430502450][5840 ms][DEBUG] END runCmdUntilRes#1 in 5482 ms [2025-09-09 15:15:17][358141430502450][5840 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:15:22][358997699918202][0 ms][INFO] === Request start === [2025-09-09 15:15:22][358997699918202][1 ms][DEBUG] START check_scloud [2025-09-09 15:15:22][358997699918202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:15:22][358997699918202][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 20383 4970 25042524 205068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:15:22][358997699918202][270 ms][DEBUG] targetPkg: running [2025-09-09 15:15:22][358997699918202][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 15:15:22][358997699918202][270 ms][DEBUG] START check_boot_completed [2025-09-09 15:15:22][358997699918202][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:15:22][358997699918202][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:15:22][358997699918202][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:15:22][358997699918202][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:15:22][358997699918202][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:15:22][358997699918202][364 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:15:22][358997699918202][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997699918202\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3815\"}'\'' -e'"" [2025-09-09 15:15:22][358997699918202][364 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:15:22][358997699918202][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997699918202\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3815\"}'\'' -e'"" [2025-09-09 15:15:26][358997699918202][4410 ms][DEBUG] proc_open done in 4046 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 15:15:26][358997699918202][4410 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-09 15:15:26][358997699918202][4410 ms][WARN] Detected error: Process with pid 20383 either refused to load frida-agent, or terminated during injectionProcess with pid 20383 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 15:15:26][358997699918202][4410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:15:27][358997699918202][4706 ms][DEBUG] SU: done in 297 ms; outsystem 5392 4970 12672784 194344 ep_poll 0 S system_server\n [2025-09-09 15:15:27][358997699918202][4707 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 15:15:27][358997699918202][4863 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 15:15:27][358997699918202][4863 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 15:15:27][358997699918202][4863 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:15:27][358997699918202][5003 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 15:15:27][358997699918202][5003 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:15:27][358997699918202][5159 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:15:29][358997699918202][7174 ms][DEBUG] START check_boot_completed [2025-09-09 15:15:29][358997699918202][7174 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:15:29][358997699918202][7206 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:15:29][358997699918202][7206 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:15:29][358997699918202][7253 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:15:29][358997699918202][7253 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:15:32][358997699918202][10267 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 15:15:32][358997699918202][10267 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997699918202\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3815\"}'\'' -e'"" [2025-09-09 15:15:37][358997699918202][14907 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1fb21db-66d3-4910-8db3-387f4e70676f","id":"QR_e1fb21db-66d3-4910-8db3-387f4e70676f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:15:37][358997699918202][15063 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-09 15:15:37][358997699918202][15063 ms][DEBUG] END runCmdUntilRes#2 in 4796 ms [2025-09-09 15:15:37][358997699918202][15063 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:15:41][358997699918202][0 ms][INFO] === Request start === [2025-09-09 15:15:41][358997699918202][1 ms][DEBUG] START check_scloud [2025-09-09 15:15:41][358997699918202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:15:41][358997699918202][238 ms][DEBUG] SU: done in 237 ms; outu0_a118 22606 4970 23849184 124304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:15:41][358997699918202][238 ms][DEBUG] targetPkg: running [2025-09-09 15:15:41][358997699918202][238 ms][DEBUG] END check_scloud in 237 ms [2025-09-09 15:15:41][358997699918202][238 ms][DEBUG] START check_boot_completed [2025-09-09 15:15:41][358997699918202][238 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:15:41][358997699918202][284 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:15:41][358997699918202][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:15:41][358997699918202][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:15:41][358997699918202][331 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:15:41][358997699918202][331 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:15:41][358997699918202][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997699918202\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5538\"}'\'' -e'"" [2025-09-09 15:15:41][358997699918202][331 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:15:41][358997699918202][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997699918202\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5538\"}'\'' -e'"" [2025-09-09 15:15:44][358997699918202][3612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e01c16e2-2873-4b78-bda1-61ed08009091","id":"QR_e01c16e2-2873-4b78-bda1-61ed08009091","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:15:44][358997699918202][3768 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=3343 [2025-09-09 15:15:44][358997699918202][3768 ms][DEBUG] END runCmdUntilRes#1 in 3437 ms [2025-09-09 15:15:44][358997699918202][3768 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:16:04][358592102641556][0 ms][INFO] === Request start === [2025-09-09 15:16:04][358592102641556][0 ms][DEBUG] START check_scloud [2025-09-09 15:16:04][358592102641556][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:16:04][358592102641556][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 22606 4970 23904060 137992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:16:04][358592102641556][312 ms][DEBUG] targetPkg: running [2025-09-09 15:16:04][358592102641556][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 15:16:04][358592102641556][312 ms][DEBUG] START check_boot_completed [2025-09-09 15:16:04][358592102641556][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:16:04][358592102641556][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:16:04][358592102641556][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:16:04][358592102641556][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:16:04][358592102641556][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:16:04][358592102641556][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:16:04][358592102641556][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2413\nsuccessfulTxPacketsPerSecond: 0.1431613607487339\nretriedTxPackets: 534\nretriedTxPacketsPerSecond: 0.01789517009359174\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.1431613607487339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:16:04][358592102641556][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:16:05][358592102641556][1858 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.775/304.775/304.775/0.000 ms\n [2025-09-09 15:16:05][358592102641556][1858 ms][DEBUG] check_internet: online [2025-09-09 15:16:05][358592102641556][1858 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:16:05][358592102641556][1858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592102641556\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9625\"}'\'' -e'"" [2025-09-09 15:16:05][358592102641556][1858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:16:05][358592102641556][1858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592102641556\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9625\"}'\'' -e'"" [2025-09-09 15:16:09][358592102641556][5826 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de271587-0279-4356-ad57-39a0ae44145b","id":"QR_de271587-0279-4356-ad57-39a0ae44145b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:16:10][358592102641556][5982 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-09-09 15:16:10][358592102641556][5982 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-09 15:16:10][358592102641556][5982 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:16:12][358592102641556][0 ms][INFO] === Request start === [2025-09-09 15:16:12][358592102641556][1 ms][DEBUG] START check_scloud [2025-09-09 15:16:12][358592102641556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:16:12][358592102641556][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 22606 4970 24032132 149568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:16:12][358592102641556][311 ms][DEBUG] targetPkg: running [2025-09-09 15:16:12][358592102641556][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 15:16:12][358592102641556][311 ms][DEBUG] START check_boot_completed [2025-09-09 15:16:12][358592102641556][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:16:12][358592102641556][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:16:12][358592102641556][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:16:12][358592102641556][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:16:12][358592102641556][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:16:12][358592102641556][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:16:12][358592102641556][529 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2413\nsuccessfulTxPacketsPerSecond: 0.1431613607487339\nretriedTxPackets: 534\nretriedTxPacketsPerSecond: 0.01789517009359174\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.1431613607487339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:16:12][358592102641556][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:16:13][358592102641556][935 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.976/270.976/270.976/0.000 ms\n [2025-09-09 15:16:13][358592102641556][935 ms][DEBUG] check_internet: online [2025-09-09 15:16:13][358592102641556][935 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:16:13][358592102641556][935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592102641556\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9187\"}'\'' -e'"" [2025-09-09 15:16:13][358592102641556][935 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:16:13][358592102641556][935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592102641556\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9187\"}'\'' -e'"" [2025-09-09 15:16:18][358592102641556][6293 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad31e9ab-3b8e-437e-bd49-dff4a3f8e0d4","id":"QR_ad31e9ab-3b8e-437e-bd49-dff4a3f8e0d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:16:18][358592102641556][6450 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-09 15:16:18][358592102641556][6450 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-09 15:16:18][358592102641556][6450 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:18:03][353310803046156][1 ms][INFO] === Request start === [2025-09-09 15:18:03][353310803046156][1 ms][DEBUG] START check_scloud [2025-09-09 15:18:03][353310803046156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:18:03][353310803046156][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22606 4970 24127224 160124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:18:03][353310803046156][305 ms][DEBUG] targetPkg: running [2025-09-09 15:18:03][353310803046156][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 15:18:03][353310803046156][305 ms][DEBUG] START check_boot_completed [2025-09-09 15:18:03][353310803046156][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:18:03][353310803046156][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:18:03][353310803046156][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:18:03][353310803046156][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:18:03][353310803046156][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:18:03][353310803046156][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:18:03][353310803046156][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2413\nsuccessfulTxPacketsPerSecond: 0.1431613607487339\nretriedTxPackets: 534\nretriedTxPacketsPerSecond: 0.01789517009359174\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.1431613607487339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:18:03][353310803046156][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:18:05][353310803046156][1836 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.886/304.886/304.886/0.000 ms\n [2025-09-09 15:18:05][353310803046156][1836 ms][DEBUG] check_internet: online [2025-09-09 15:18:05][353310803046156][1836 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:18:05][353310803046156][1836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803046156\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2790\"}'\'' -e'"" [2025-09-09 15:18:05][353310803046156][1836 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:18:05][353310803046156][1836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803046156\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2790\"}'\'' -e'"" [2025-09-09 15:18:09][353310803046156][6210 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fdc9963-9c4d-41a3-9395-369c0584f279","id":"QR_3fdc9963-9c4d-41a3-9395-369c0584f279","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:18:09][353310803046156][6366 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-09 15:18:09][353310803046156][6366 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-09 15:18:09][353310803046156][6366 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:18:11][350501453838248][0 ms][INFO] === Request start === [2025-09-09 15:18:11][350501453838248][1 ms][DEBUG] START check_scloud [2025-09-09 15:18:11][350501453838248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:18:12][350501453838248][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 22606 4970 24265728 171028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:18:12][350501453838248][297 ms][DEBUG] targetPkg: running [2025-09-09 15:18:12][350501453838248][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 15:18:12][350501453838248][297 ms][DEBUG] START check_boot_completed [2025-09-09 15:18:12][350501453838248][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:18:12][350501453838248][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:18:12][350501453838248][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:18:12][350501453838248][406 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:18:12][350501453838248][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:18:12][350501453838248][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:18:12][350501453838248][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2413\nsuccessfulTxPacketsPerSecond: 0.1431613607487339\nretriedTxPackets: 534\nretriedTxPacketsPerSecond: 0.01789517009359174\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.1431613607487339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:18:12][350501453838248][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:18:12][350501453838248][922 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.408/309.408/309.408/0.000 ms\n [2025-09-09 15:18:12][350501453838248][922 ms][DEBUG] check_internet: online [2025-09-09 15:18:12][350501453838248][922 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:18:12][350501453838248][922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501453838248\",\"model\":\"SM-M236L\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8933\"}'\'' -e'"" [2025-09-09 15:18:12][350501453838248][922 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:18:12][350501453838248][922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501453838248\",\"model\":\"SM-M236L\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8933\"}'\'' -e'"" [2025-09-09 15:18:15][350501453838248][4202 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31c1437d-6e72-4db2-8606-60db202941da","id":"QR_31c1437d-6e72-4db2-8606-60db202941da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:18:16][350501453838248][4358 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-09 15:18:16][350501453838248][4358 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-09 15:18:16][350501453838248][4358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:18:19][359259108206425][0 ms][INFO] === Request start === [2025-09-09 15:18:19][359259108206425][1 ms][DEBUG] START check_scloud [2025-09-09 15:18:19][359259108206425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:18:19][359259108206425][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 22606 4970 24387656 182712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:18:19][359259108206425][275 ms][DEBUG] targetPkg: running [2025-09-09 15:18:19][359259108206425][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 15:18:19][359259108206425][275 ms][DEBUG] START check_boot_completed [2025-09-09 15:18:19][359259108206425][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:18:19][359259108206425][322 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:18:19][359259108206425][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:18:19][359259108206425][415 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 15:18:19][359259108206425][415 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 15:18:19][359259108206425][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:18:19][359259108206425][556 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2413\nsuccessfulTxPacketsPerSecond: 0.1431613607487339\nretriedTxPackets: 534\nretriedTxPacketsPerSecond: 0.01789517009359174\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.1431613607487339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:18:19][359259108206425][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:18:20][359259108206425][899 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.196/245.196/245.196/0.000 ms\n [2025-09-09 15:18:20][359259108206425][899 ms][DEBUG] check_internet: online [2025-09-09 15:18:20][359259108206425][899 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:18:20][359259108206425][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259108206425\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6546\"}'\'' -e'"" [2025-09-09 15:18:20][359259108206425][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:18:20][359259108206425][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259108206425\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6546\"}'\'' -e'"" [2025-09-09 15:18:25][359259108206425][5945 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f61afd07-e933-4ca1-9245-7d78c2b9615e","id":"QR_f61afd07-e933-4ca1-9245-7d78c2b9615e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:18:25][359259108206425][6101 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 15:18:25][359259108206425][6101 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 15:18:25][359259108206425][6101 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:18:31][352838654472379][0 ms][INFO] === Request start === [2025-09-09 15:18:31][352838654472379][1 ms][DEBUG] START check_scloud [2025-09-09 15:18:31][352838654472379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:18:31][352838654472379][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 22606 4970 24530220 193916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:18:31][352838654472379][307 ms][DEBUG] targetPkg: running [2025-09-09 15:18:31][352838654472379][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 15:18:31][352838654472379][307 ms][DEBUG] START check_boot_completed [2025-09-09 15:18:31][352838654472379][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:18:31][352838654472379][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:18:31][352838654472379][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:18:31][352838654472379][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:18:31][352838654472379][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:18:31][352838654472379][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:18:31][352838654472379][510 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30669 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2413\nsuccessfulTxPacketsPerSecond: 0.1431613607487339\nretriedTxPackets: 534\nretriedTxPacketsPerSecond: 0.01789517009359174\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.1431613607487339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:18:31][352838654472379][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:18:32][352838654472379][947 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.530/292.530/292.530/0.000 ms\n [2025-09-09 15:18:32][352838654472379][948 ms][DEBUG] check_internet: online [2025-09-09 15:18:32][352838654472379][948 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:18:32][352838654472379][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838654472379\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1975\"}'\'' -e'"" [2025-09-09 15:18:32][352838654472379][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:18:32][352838654472379][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838654472379\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1975\"}'\'' -e'"" [2025-09-09 15:18:36][352838654472379][5274 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5fbed3c-2c63-49fa-9401-1316f2fc231d","id":"QR_e5fbed3c-2c63-49fa-9401-1316f2fc231d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:18:36][352838654472379][5431 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-09-09 15:18:36][352838654472379][5431 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 15:18:36][352838654472379][5431 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:19:03][352350272064117][0 ms][INFO] === Request start === [2025-09-09 15:19:03][352350272064117][1 ms][DEBUG] START check_scloud [2025-09-09 15:19:03][352350272064117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:19:03][352350272064117][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 22606 4970 24637896 206008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:19:03][352350272064117][300 ms][DEBUG] targetPkg: running [2025-09-09 15:19:03][352350272064117][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 15:19:03][352350272064117][300 ms][DEBUG] START check_boot_completed [2025-09-09 15:19:03][352350272064117][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:19:03][352350272064117][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:19:03][352350272064117][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:19:03][352350272064117][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:19:03][352350272064117][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:19:03][352350272064117][378 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:19:03][352350272064117][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350272064117\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5624\"}'\'' -e'"" [2025-09-09 15:19:03][352350272064117][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:19:03][352350272064117][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350272064117\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5624\"}'\'' -e'"" [2025-09-09 15:19:06][352350272064117][3721 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04ead097-047e-4276-812b-7e1622ad4ef1","id":"QR_04ead097-047e-4276-812b-7e1622ad4ef1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:19:07][352350272064117][3877 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 15:19:07][352350272064117][3877 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 15:19:07][352350272064117][3878 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:19:09][352350272064117][0 ms][INFO] === Request start === [2025-09-09 15:19:09][352350272064117][1 ms][DEBUG] START check_scloud [2025-09-09 15:19:09][352350272064117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:19:09][352350272064117][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 22606 4970 24768080 216840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:19:09][352350272064117][288 ms][DEBUG] targetPkg: running [2025-09-09 15:19:09][352350272064117][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 15:19:09][352350272064117][288 ms][DEBUG] START check_boot_completed [2025-09-09 15:19:09][352350272064117][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:19:09][352350272064117][333 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 15:19:09][352350272064117][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:19:09][352350272064117][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:19:09][352350272064117][380 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 15:19:09][352350272064117][380 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:19:09][352350272064117][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350272064117\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4612\"}'\'' -e'"" [2025-09-09 15:19:09][352350272064117][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:19:09][352350272064117][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350272064117\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4612\"}'\'' -e'"" [2025-09-09 15:19:14][352350272064117][4691 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_881ae971-00bf-47ce-bd2c-19813609b4b2","id":"QR_881ae971-00bf-47ce-bd2c-19813609b4b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:19:14][352350272064117][4847 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-09-09 15:19:14][352350272064117][4847 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-09 15:19:14][352350272064117][4847 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:19:18][350013901755263][0 ms][INFO] === Request start === [2025-09-09 15:19:18][350013901755263][1 ms][DEBUG] START check_scloud [2025-09-09 15:19:18][350013901755263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:19:18][350013901755263][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 22606 4970 24900440 228732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:19:18][350013901755263][308 ms][DEBUG] targetPkg: running [2025-09-09 15:19:18][350013901755263][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 15:19:18][350013901755263][309 ms][DEBUG] START check_boot_completed [2025-09-09 15:19:18][350013901755263][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:19:18][350013901755263][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:19:18][350013901755263][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:19:18][350013901755263][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:19:18][350013901755263][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:19:18][350013901755263][402 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:19:18][350013901755263][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013901755263\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3364\"}'\'' -e'"" [2025-09-09 15:19:18][350013901755263][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:19:18][350013901755263][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013901755263\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3364\"}'\'' -e'"" [2025-09-09 15:19:23][350013901755263][5041 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d594119-3cd5-45ca-aaa4-8e53a2afd4f3","id":"QR_2d594119-3cd5-45ca-aaa4-8e53a2afd4f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:19:23][350013901755263][5198 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-09 15:19:23][350013901755263][5198 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-09 15:19:23][350013901755263][5198 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:19:25][357712350137476][0 ms][INFO] === Request start === [2025-09-09 15:19:25][357712350137476][1 ms][DEBUG] START check_scloud [2025-09-09 15:19:25][357712350137476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:19:26][357712350137476][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 22606 4970 25043004 240712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:19:26][357712350137476][308 ms][DEBUG] targetPkg: running [2025-09-09 15:19:26][357712350137476][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 15:19:26][357712350137476][308 ms][DEBUG] START check_boot_completed [2025-09-09 15:19:26][357712350137476][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:19:26][357712350137476][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:19:26][357712350137476][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:19:26][357712350137476][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:19:26][357712350137476][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:19:26][357712350137476][417 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:19:26][357712350137476][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712350137476\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4570\"}'\'' -e'"" [2025-09-09 15:19:26][357712350137476][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:19:26][357712350137476][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712350137476\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4570\"}'\'' -e'"" [2025-09-09 15:19:33][357712350137476][8103 ms][DEBUG] proc_open done in 7686 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 15:19:33][357712350137476][8103 ms][DEBUG] END runCmdUntilRes#1 in 7686 ms [2025-09-09 15:19:33][357712350137476][8103 ms][WARN] Detected error: Process with pid 22606 either refused to load frida-agent, or terminated during injectionProcess with pid 22606 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 15:19:33][357712350137476][8103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:19:34][357712350137476][8463 ms][DEBUG] SU: done in 360 ms; out [2025-09-09 15:19:34][357712350137476][8463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 15:19:34][357712350137476][8868 ms][DEBUG] SU: done in 405 ms; out [2025-09-09 15:19:34][357712350137476][8868 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 15:19:34][357712350137476][8868 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:19:34][357712350137476][9133 ms][DEBUG] SU: done in 265 ms; out [2025-09-09 15:19:34][357712350137476][9133 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:19:35][357712350137476][9338 ms][DEBUG] SU: done in 205 ms; out [2025-09-09 15:19:37][357712350137476][11351 ms][DEBUG] START check_boot_completed [2025-09-09 15:19:37][357712350137476][11352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:19:37][357712350137476][11398 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:19:37][357712350137476][11398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:19:37][357712350137476][11461 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:19:37][357712350137476][11461 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 15:19:40][357712350137476][14476 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 15:19:40][357712350137476][14476 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712350137476\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4570\"}'\'' -e'"" [2025-09-09 15:19:41][357712350137476][15929 ms][DEBUG] proc_open done in 1454 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 15:19:41][357712350137476][15930 ms][DEBUG] END runCmdUntilRes#2 in 1454 ms [2025-09-09 15:19:41][357712350137476][15930 ms][WARN] Detected error 2; Reboot the device [2025-09-09 15:19:41][357712350137476][15930 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:19:41][357712350137476][16179 ms][DEBUG] SU: done in 250 ms; outsystem 24344 24005 7327824 124140 0 0 D system_server\n [2025-09-09 15:19:41][357712350137476][16179 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 15:19:42][357712350137476][16881 ms][DEBUG] SU: done in 702 ms; out [2025-09-09 15:20:03][357712350137476][1 ms][INFO] === Request start === [2025-09-09 15:20:03][357712350137476][1 ms][DEBUG] START check_scloud [2025-09-09 15:20:03][357712350137476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:20:03][357712350137476][38 ms][DEBUG] SU: done in 36 ms; out [2025-09-09 15:20:03][357712350137476][38 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:20:03][357712350137476][69 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 15:20:03][357712350137476][69 ms][WARN] check_devices: no device [2025-09-09 15:20:03][357712350137476][69 ms][WARN] check_devices: no device [2025-09-09 15:20:03][357712350137476][69 ms][DEBUG] END check_scloud in 68 ms [2025-09-09 15:20:06][357962505005678][0 ms][INFO] === Request start === [2025-09-09 15:20:06][357962505005678][1 ms][DEBUG] START check_scloud [2025-09-09 15:20:06][357962505005678][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:20:07][357962505005678][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-09 15:20:07][357962505005678][43 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:20:07][357962505005678][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 15:20:07][357962505005678][74 ms][WARN] check_devices: no device [2025-09-09 15:20:07][357962505005678][74 ms][WARN] check_devices: no device [2025-09-09 15:20:07][357962505005678][74 ms][DEBUG] END check_scloud in 74 ms [2025-09-09 15:21:03][357712350137476][0 ms][INFO] === Request start === [2025-09-09 15:21:03][357712350137476][1 ms][DEBUG] START check_scloud [2025-09-09 15:21:03][357712350137476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:21:03][357712350137476][438 ms][DEBUG] SU: done in 438 ms; out [2025-09-09 15:21:03][357712350137476][439 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:21:04][357712350137476][485 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 15:21:04][357712350137476][485 ms][DEBUG] check_devices: device found [2025-09-09 15:21:04][357712350137476][485 ms][WARN] targetPkg: not running, restarting [2025-09-09 15:21:04][357712350137476][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:21:04][357712350137476][626 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 15:21:04][357712350137476][626 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:21:04][357712350137476][876 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:21:06][357712350137476][2891 ms][DEBUG] END check_scloud in 2890 ms [2025-09-09 15:21:06][357712350137476][2891 ms][DEBUG] START check_boot_completed [2025-09-09 15:21:06][357712350137476][2891 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:21:06][357712350137476][2938 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:21:06][357712350137476][2938 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:21:06][357712350137476][3000 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:21:06][357712350137476][3000 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:21:06][357712350137476][3000 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:21:06][357712350137476][3001 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712350137476\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8056\"}'\'' -e'"" [2025-09-09 15:21:06][357712350137476][3001 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:21:06][357712350137476][3001 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712350137476\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8056\"}'\'' -e'"" [2025-09-09 15:21:12][357712350137476][8952 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e6da740-8585-4653-83ed-3a4512743f0c","id":"QR_1e6da740-8585-4653-83ed-3a4512743f0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:21:12][357712350137476][9108 ms][DEBUG] proc_open done in 6107 ms; code=255; res.len=3343 [2025-09-09 15:21:12][357712350137476][9108 ms][DEBUG] END runCmdUntilRes#1 in 6108 ms [2025-09-09 15:21:12][357712350137476][9108 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:21:15][357712350137476][0 ms][INFO] === Request start === [2025-09-09 15:21:15][357712350137476][1 ms][DEBUG] START check_scloud [2025-09-09 15:21:15][357712350137476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:21:15][357712350137476][353 ms][DEBUG] SU: done in 353 ms; outu0_a118 9446 5014 23743204 104756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:21:15][357712350137476][354 ms][DEBUG] targetPkg: running [2025-09-09 15:21:15][357712350137476][354 ms][DEBUG] END check_scloud in 353 ms [2025-09-09 15:21:15][357712350137476][354 ms][DEBUG] START check_boot_completed [2025-09-09 15:21:15][357712350137476][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:21:15][357712350137476][400 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:21:15][357712350137476][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:21:15][357712350137476][447 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:21:15][357712350137476][447 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:21:15][357712350137476][447 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:21:15][357712350137476][447 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712350137476\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4045\"}'\'' -e'"" [2025-09-09 15:21:15][357712350137476][447 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:21:15][357712350137476][447 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712350137476\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4045\"}'\'' -e'"" [2025-09-09 15:21:21][357712350137476][6274 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d861cfce-5777-4c98-a951-c1037a08ae44","id":"QR_d861cfce-5777-4c98-a951-c1037a08ae44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:21:21][357712350137476][6430 ms][DEBUG] proc_open done in 5983 ms; code=255; res.len=3343 [2025-09-09 15:21:21][357712350137476][6430 ms][DEBUG] END runCmdUntilRes#1 in 5983 ms [2025-09-09 15:21:21][357712350137476][6430 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:21:25][357962505005678][1 ms][INFO] === Request start === [2025-09-09 15:21:25][357962505005678][1 ms][DEBUG] START check_scloud [2025-09-09 15:21:25][357962505005678][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:21:25][357962505005678][373 ms][DEBUG] SU: done in 371 ms; outu0_a118 9446 5014 23928880 88996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:21:25][357962505005678][373 ms][DEBUG] targetPkg: running [2025-09-09 15:21:25][357962505005678][373 ms][DEBUG] END check_scloud in 372 ms [2025-09-09 15:21:25][357962505005678][373 ms][DEBUG] START check_boot_completed [2025-09-09 15:21:25][357962505005678][373 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:21:26][357962505005678][418 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 15:21:26][357962505005678][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:21:26][357962505005678][481 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:21:26][357962505005678][481 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 15:21:26][357962505005678][481 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:21:26][357962505005678][481 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505005678\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6247\"}'\'' -e'"" [2025-09-09 15:21:26][357962505005678][481 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:21:26][357962505005678][481 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505005678\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6247\"}'\'' -e'"" [2025-09-09 15:21:30][357962505005678][5120 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a9328d3-d6e2-4bc1-a326-9263ee4278d7","id":"QR_7a9328d3-d6e2-4bc1-a326-9263ee4278d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:21:30][357962505005678][5276 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 15:21:30][357962505005678][5276 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 15:21:30][357962505005678][5276 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:21:33][357962505005678][0 ms][INFO] === Request start === [2025-09-09 15:21:33][357962505005678][0 ms][DEBUG] START check_scloud [2025-09-09 15:21:33][357962505005678][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:21:33][357962505005678][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 9446 5014 24055124 82256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:21:33][357962505005678][309 ms][DEBUG] targetPkg: running [2025-09-09 15:21:33][357962505005678][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 15:21:33][357962505005678][309 ms][DEBUG] START check_boot_completed [2025-09-09 15:21:33][357962505005678][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:21:33][357962505005678][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:21:33][357962505005678][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:21:33][357962505005678][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:21:33][357962505005678][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:21:33][357962505005678][387 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:21:33][357962505005678][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505005678\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9371\"}'\'' -e'"" [2025-09-09 15:21:33][357962505005678][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:21:33][357962505005678][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505005678\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9371\"}'\'' -e'"" [2025-09-09 15:21:39][357962505005678][6088 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d578dad-877b-4af3-8d34-d43256a52d23","id":"QR_1d578dad-877b-4af3-8d34-d43256a52d23","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:21:39][357962505005678][6245 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3343 [2025-09-09 15:21:39][357962505005678][6245 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-09-09 15:21:39][357962505005678][6245 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:22:03][357450476817818][0 ms][INFO] === Request start === [2025-09-09 15:22:03][357450476817818][1 ms][DEBUG] START check_scloud [2025-09-09 15:22:03][357450476817818][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:22:04][357450476817818][371 ms][DEBUG] SU: done in 371 ms; outu0_a118 9446 5014 24082432 64800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:22:04][357450476817818][372 ms][DEBUG] targetPkg: running [2025-09-09 15:22:04][357450476817818][372 ms][DEBUG] END check_scloud in 371 ms [2025-09-09 15:22:04][357450476817818][372 ms][DEBUG] START check_boot_completed [2025-09-09 15:22:04][357450476817818][372 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:22:04][357450476817818][418 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:22:04][357450476817818][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:22:04][357450476817818][481 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:22:04][357450476817818][481 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:22:04][357450476817818][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:22:04][357450476817818][606 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 802\nsuccessfulTxPacketsPerSecond: 6.731769446454316\nretriedTxPackets: 90\nretriedTxPacketsPerSecond: 0.8735946764024889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 863\nsuccessfulRxPacketsPerSecond: 6.260427516073925\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:22:04][357450476817818][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:22:05][357450476817818][1480 ms][DEBUG] SU: done in 875 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.901/219.901/219.901/0.000 ms\n [2025-09-09 15:22:05][357450476817818][1481 ms][DEBUG] check_internet: online [2025-09-09 15:22:05][357450476817818][1481 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:22:05][357450476817818][1481 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476817818\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5629\"}'\'' -e'"" [2025-09-09 15:22:05][357450476817818][1481 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:22:05][357450476817818][1481 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476817818\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5629\"}'\'' -e'"" [2025-09-09 15:22:09][357450476817818][5698 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eadb22e7-91e8-490e-9708-ac2653d4ce16","id":"QR_eadb22e7-91e8-490e-9708-ac2653d4ce16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:22:09][357450476817818][5854 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-09-09 15:22:09][357450476817818][5854 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-09-09 15:22:09][357450476817818][5854 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:22:12][357450476817818][0 ms][INFO] === Request start === [2025-09-09 15:22:12][357450476817818][1 ms][DEBUG] START check_scloud [2025-09-09 15:22:12][357450476817818][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:22:12][357450476817818][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 9446 5014 24227144 88444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:22:12][357450476817818][332 ms][DEBUG] targetPkg: running [2025-09-09 15:22:12][357450476817818][332 ms][DEBUG] END check_scloud in 332 ms [2025-09-09 15:22:12][357450476817818][332 ms][DEBUG] START check_boot_completed [2025-09-09 15:22:12][357450476817818][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:22:12][357450476817818][379 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:22:12][357450476817818][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:22:12][357450476817818][426 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:22:12][357450476817818][426 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:22:12][357450476817818][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:22:12][357450476817818][535 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 802\nsuccessfulTxPacketsPerSecond: 6.731769446454316\nretriedTxPackets: 90\nretriedTxPacketsPerSecond: 0.8735946764024889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 863\nsuccessfulRxPacketsPerSecond: 6.260427516073925\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:22:12][357450476817818][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:22:12][357450476817818][941 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.381/266.381/266.381/0.000 ms\n [2025-09-09 15:22:12][357450476817818][941 ms][DEBUG] check_internet: online [2025-09-09 15:22:12][357450476817818][942 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:22:12][357450476817818][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476817818\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9833\"}'\'' -e'"" [2025-09-09 15:22:12][357450476817818][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:22:12][357450476817818][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476817818\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9833\"}'\'' -e'"" [2025-09-09 15:22:17][357450476817818][5674 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c10599d-6871-4599-9217-e73ceea3c9c5","id":"QR_2c10599d-6871-4599-9217-e73ceea3c9c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:22:17][357450476817818][5831 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 15:22:17][357450476817818][5831 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-09 15:22:17][357450476817818][5831 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:22:23][352686598425445][0 ms][INFO] === Request start === [2025-09-09 15:22:23][352686598425445][1 ms][DEBUG] START check_scloud [2025-09-09 15:22:23][352686598425445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:22:23][352686598425445][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 9446 5014 24351312 100636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:22:23][352686598425445][289 ms][DEBUG] targetPkg: running [2025-09-09 15:22:23][352686598425445][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 15:22:23][352686598425445][290 ms][DEBUG] START check_boot_completed [2025-09-09 15:22:23][352686598425445][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:22:23][352686598425445][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:22:23][352686598425445][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:22:23][352686598425445][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:22:23][352686598425445][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:22:23][352686598425445][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:22:23][352686598425445][508 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 802\nsuccessfulTxPacketsPerSecond: 6.731769446454316\nretriedTxPackets: 90\nretriedTxPacketsPerSecond: 0.8735946764024889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 863\nsuccessfulRxPacketsPerSecond: 6.260427516073925\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:22:23][352686598425445][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:22:24][352686598425445][899 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.423/287.423/287.423/0.000 ms\n [2025-09-09 15:22:24][352686598425445][899 ms][DEBUG] check_internet: online [2025-09-09 15:22:24][352686598425445][899 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:22:24][352686598425445][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686598425445\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7006\"}'\'' -e'"" [2025-09-09 15:22:24][352686598425445][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:22:24][352686598425445][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686598425445\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7006\"}'\'' -e'"" [2025-09-09 15:22:29][352686598425445][5975 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c14f34ff-f63d-4f3e-bff3-1ac42bb955d4","id":"QR_c14f34ff-f63d-4f3e-bff3-1ac42bb955d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:22:29][352686598425445][6131 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-09 15:22:29][352686598425445][6132 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-09 15:22:29][352686598425445][6132 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:22:32][352686598425445][0 ms][INFO] === Request start === [2025-09-09 15:22:32][352686598425445][1 ms][DEBUG] START check_scloud [2025-09-09 15:22:32][352686598425445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:22:33][352686598425445][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 9446 5014 24495796 111748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:22:33][352686598425445][322 ms][DEBUG] targetPkg: running [2025-09-09 15:22:33][352686598425445][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 15:22:33][352686598425445][322 ms][DEBUG] START check_boot_completed [2025-09-09 15:22:33][352686598425445][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:22:33][352686598425445][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:22:33][352686598425445][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:22:33][352686598425445][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:22:33][352686598425445][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:22:33][352686598425445][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:22:33][352686598425445][525 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 802\nsuccessfulTxPacketsPerSecond: 6.731769446454316\nretriedTxPackets: 90\nretriedTxPacketsPerSecond: 0.8735946764024889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 863\nsuccessfulRxPacketsPerSecond: 6.260427516073925\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:22:33][352686598425445][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:22:33][352686598425445][962 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.923/302.923/302.923/0.000 ms\n [2025-09-09 15:22:33][352686598425445][962 ms][DEBUG] check_internet: online [2025-09-09 15:22:33][352686598425445][962 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:22:33][352686598425445][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686598425445\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4926\"}'\'' -e'"" [2025-09-09 15:22:33][352686598425445][962 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:22:33][352686598425445][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686598425445\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4926\"}'\'' -e'"" [2025-09-09 15:22:38][352686598425445][5086 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2513e738-68a1-4bbc-bde5-75bd6bd59ea7","id":"QR_2513e738-68a1-4bbc-bde5-75bd6bd59ea7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:22:38][352686598425445][5242 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-09-09 15:22:38][352686598425445][5242 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-09 15:22:38][352686598425445][5242 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:23:04][356550755300724][1 ms][INFO] === Request start === [2025-09-09 15:23:04][356550755300724][1 ms][DEBUG] START check_scloud [2025-09-09 15:23:04][356550755300724][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:23:04][356550755300724][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 9446 5014 24595152 126120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:23:04][356550755300724][298 ms][DEBUG] targetPkg: running [2025-09-09 15:23:04][356550755300724][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 15:23:04][356550755300724][298 ms][DEBUG] START check_boot_completed [2025-09-09 15:23:04][356550755300724][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:23:04][356550755300724][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:23:04][356550755300724][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:23:04][356550755300724][407 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:23:04][356550755300724][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:23:04][356550755300724][407 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:23:04][356550755300724][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356550755300724\",\"model\":\"SM-T220\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R83W814PV8X\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3946\"}'\'' -e'"" [2025-09-09 15:23:04][356550755300724][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:23:04][356550755300724][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356550755300724\",\"model\":\"SM-T220\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R83W814PV8X\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3946\"}'\'' -e'"" [2025-09-09 15:23:08][356550755300724][3859 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ba1496e-2666-494b-9752-6d89bbd36885","id":"QR_0ba1496e-2666-494b-9752-6d89bbd36885","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:23:08][356550755300724][4015 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-09 15:23:08][356550755300724][4015 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-09 15:23:08][356550755300724][4015 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:28:03][358184572102267][1 ms][INFO] === Request start === [2025-09-09 15:28:03][358184572102267][1 ms][DEBUG] START check_scloud [2025-09-09 15:28:03][358184572102267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:28:04][358184572102267][260 ms][DEBUG] SU: done in 258 ms; outu0_a118 9446 5014 24740200 133852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:28:04][358184572102267][260 ms][DEBUG] targetPkg: running [2025-09-09 15:28:04][358184572102267][260 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 15:28:04][358184572102267][260 ms][DEBUG] START check_boot_completed [2025-09-09 15:28:04][358184572102267][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:28:04][358184572102267][291 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:28:04][358184572102267][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:28:04][358184572102267][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:28:04][358184572102267][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:28:04][358184572102267][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:28:04][358184572102267][432 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1147\nsuccessfulTxPacketsPerSecond: 1.4304134931526729\nretriedTxPackets: 158\nretriedTxPacketsPerSecond: 0.28193657256342536\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1167\nsuccessfulRxPacketsPerSecond: 1.2604223244011958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:28:04][358184572102267][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:28:05][358184572102267][1806 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.236/301.236/301.236/0.000 ms\n [2025-09-09 15:28:05][358184572102267][1806 ms][DEBUG] check_internet: online [2025-09-09 15:28:05][358184572102267][1807 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:28:05][358184572102267][1807 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184572102267\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3976\"}'\'' -e'"" [2025-09-09 15:28:05][358184572102267][1807 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:28:05][358184572102267][1807 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184572102267\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3976\"}'\'' -e'"" [2025-09-09 15:28:09][358184572102267][6055 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_189b9603-c0b3-408b-8668-eeb2221b932a","id":"QR_189b9603-c0b3-408b-8668-eeb2221b932a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:28:10][358184572102267][6211 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-09 15:28:10][358184572102267][6211 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-09 15:28:10][358184572102267][6211 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:28:12][358184572102267][0 ms][INFO] === Request start === [2025-09-09 15:28:12][358184572102267][1 ms][DEBUG] START check_scloud [2025-09-09 15:28:12][358184572102267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:28:12][358184572102267][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 9446 5014 24892852 142676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:28:12][358184572102267][327 ms][DEBUG] targetPkg: running [2025-09-09 15:28:12][358184572102267][327 ms][DEBUG] END check_scloud in 327 ms [2025-09-09 15:28:12][358184572102267][327 ms][DEBUG] START check_boot_completed [2025-09-09 15:28:12][358184572102267][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:28:12][358184572102267][374 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:28:12][358184572102267][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:28:12][358184572102267][423 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 15:28:12][358184572102267][423 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 15:28:12][358184572102267][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:28:12][358184572102267][531 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1147\nsuccessfulTxPacketsPerSecond: 1.4304134931526729\nretriedTxPackets: 158\nretriedTxPacketsPerSecond: 0.28193657256342536\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1167\nsuccessfulRxPacketsPerSecond: 1.2604223244011958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:28:12][358184572102267][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:28:13][358184572102267][952 ms][DEBUG] SU: done in 420 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.492/294.492/294.492/0.000 ms\n [2025-09-09 15:28:13][358184572102267][952 ms][DEBUG] check_internet: online [2025-09-09 15:28:13][358184572102267][952 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:28:13][358184572102267][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184572102267\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8111\"}'\'' -e'"" [2025-09-09 15:28:13][358184572102267][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:28:13][358184572102267][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184572102267\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8111\"}'\'' -e'"" [2025-09-09 15:28:18][358184572102267][5748 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d22873c4-2eec-4856-ba02-98dae48afce5","id":"QR_d22873c4-2eec-4856-ba02-98dae48afce5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:28:18][358184572102267][5904 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-09 15:28:18][358184572102267][5904 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-09 15:28:18][358184572102267][5904 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:28:23][353600810119503][0 ms][INFO] === Request start === [2025-09-09 15:28:23][353600810119503][1 ms][DEBUG] START check_scloud [2025-09-09 15:28:23][353600810119503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:28:23][353600810119503][278 ms][DEBUG] SU: done in 278 ms; outu0_a118 9446 5014 25055868 153240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:28:23][353600810119503][278 ms][DEBUG] targetPkg: running [2025-09-09 15:28:23][353600810119503][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 15:28:23][353600810119503][279 ms][DEBUG] START check_boot_completed [2025-09-09 15:28:23][353600810119503][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:28:23][353600810119503][324 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 15:28:23][353600810119503][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:28:23][353600810119503][387 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:28:23][353600810119503][387 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 15:28:23][353600810119503][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:28:24][353600810119503][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1147\nsuccessfulTxPacketsPerSecond: 1.4304134931526729\nretriedTxPackets: 158\nretriedTxPacketsPerSecond: 0.28193657256342536\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1167\nsuccessfulRxPacketsPerSecond: 1.2604223244011958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:28:24][353600810119503][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:28:24][353600810119503][918 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.794/288.794/288.794/0.000 ms\n [2025-09-09 15:28:24][353600810119503][918 ms][DEBUG] check_internet: online [2025-09-09 15:28:24][353600810119503][918 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:28:24][353600810119503][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810119503\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3333\"}'\'' -e'"" [2025-09-09 15:28:24][353600810119503][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:28:24][353600810119503][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810119503\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3333\"}'\'' -e'"" [2025-09-09 15:28:28][353600810119503][5292 ms][DEBUG] proc_open done in 4373 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 15:28:28][353600810119503][5292 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-09-09 15:28:28][353600810119503][5292 ms][WARN] Detected error: Process with pid 9446 either refused to load frida-agent, or terminated during injectionProcess with pid 9446 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 15:28:28][353600810119503][5292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:28:29][353600810119503][5588 ms][DEBUG] SU: done in 297 ms; outsystem 5430 5014 13001604 585800 ep_poll 0 S system_server\n [2025-09-09 15:28:29][353600810119503][5588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 15:28:29][353600810119503][5713 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 15:28:29][353600810119503][5714 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 15:28:29][353600810119503][5714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:28:29][353600810119503][5838 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 15:28:29][353600810119503][5838 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:28:29][353600810119503][6026 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:28:31][353600810119503][8041 ms][DEBUG] START check_boot_completed [2025-09-09 15:28:31][353600810119503][8041 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:28:31][353600810119503][8088 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:28:31][353600810119503][8088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:28:31][353600810119503][8134 ms][DEBUG] SU: done in 46 ms; out [2025-09-09 15:28:31][353600810119503][8134 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 15:28:34][353600810119503][11149 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 15:28:34][353600810119503][11150 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810119503\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3333\"}'\'' -e'"" [2025-09-09 15:28:39][353600810119503][15883 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9907637-0fa2-43c8-b2d8-110993e2faff","id":"QR_a9907637-0fa2-43c8-b2d8-110993e2faff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:28:39][353600810119503][16039 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 15:28:39][353600810119503][16039 ms][DEBUG] END runCmdUntilRes#2 in 4890 ms [2025-09-09 15:28:39][353600810119503][16039 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:28:43][353600810119503][0 ms][INFO] === Request start === [2025-09-09 15:28:43][353600810119503][1 ms][DEBUG] START check_scloud [2025-09-09 15:28:43][353600810119503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:28:43][353600810119503][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 18727 5014 23619360 125044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:28:43][353600810119503][250 ms][DEBUG] targetPkg: running [2025-09-09 15:28:43][353600810119503][250 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 15:28:43][353600810119503][250 ms][DEBUG] START check_boot_completed [2025-09-09 15:28:43][353600810119503][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:28:43][353600810119503][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:28:43][353600810119503][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:28:43][353600810119503][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:28:43][353600810119503][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:28:43][353600810119503][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:28:43][353600810119503][453 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1147\nsuccessfulTxPacketsPerSecond: 1.4304134931526729\nretriedTxPackets: 158\nretriedTxPacketsPerSecond: 0.28193657256342536\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1167\nsuccessfulRxPacketsPerSecond: 1.2604223244011958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:28:43][353600810119503][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:28:44][353600810119503][875 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.320/309.320/309.320/0.000 ms\n [2025-09-09 15:28:44][353600810119503][875 ms][DEBUG] check_internet: online [2025-09-09 15:28:44][353600810119503][875 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:28:44][353600810119503][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810119503\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9760\"}'\'' -e'"" [2025-09-09 15:28:44][353600810119503][875 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:28:44][353600810119503][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810119503\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9760\"}'\'' -e'"" [2025-09-09 15:28:47][353600810119503][4296 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c70cb859-111f-40d5-97a5-8aad6da1157d","id":"QR_c70cb859-111f-40d5-97a5-8aad6da1157d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:28:47][353600810119503][4452 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-09 15:28:47][353600810119503][4452 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 15:28:47][353600810119503][4452 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:29:05][350229400812930][0 ms][INFO] === Request start === [2025-09-09 15:29:05][350229400812930][1 ms][DEBUG] START check_scloud [2025-09-09 15:29:05][350229400812930][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:29:05][350229400812930][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 18727 5014 23719732 139180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:29:05][350229400812930][309 ms][DEBUG] targetPkg: running [2025-09-09 15:29:05][350229400812930][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 15:29:05][350229400812930][309 ms][DEBUG] START check_boot_completed [2025-09-09 15:29:05][350229400812930][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:29:05][350229400812930][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:29:05][350229400812930][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:29:05][350229400812930][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:29:05][350229400812930][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:29:05][350229400812930][417 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:29:05][350229400812930][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350229400812930\",\"model\":\"SM-S928W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1297\"}'\'' -e'"" [2025-09-09 15:29:05][350229400812930][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:29:05][350229400812930][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350229400812930\",\"model\":\"SM-S928W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1297\"}'\'' -e'"" [2025-09-09 15:29:10][350229400812930][4978 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ffaef9e-5bcb-452d-9e82-ac3ba3a7822d","id":"QR_0ffaef9e-5bcb-452d-9e82-ac3ba3a7822d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:29:10][350229400812930][5135 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-09 15:29:10][350229400812930][5135 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-09 15:29:10][350229400812930][5135 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:29:15][351250615180102][0 ms][INFO] === Request start === [2025-09-09 15:29:15][351250615180102][1 ms][DEBUG] START check_scloud [2025-09-09 15:29:15][351250615180102][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:29:15][351250615180102][250 ms][DEBUG] SU: done in 250 ms; outu0_a118 18727 5014 23888892 150968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:29:15][351250615180102][251 ms][DEBUG] targetPkg: running [2025-09-09 15:29:15][351250615180102][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 15:29:15][351250615180102][251 ms][DEBUG] START check_boot_completed [2025-09-09 15:29:15][351250615180102][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:29:16][351250615180102][297 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:29:16][351250615180102][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:29:16][351250615180102][360 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:29:16][351250615180102][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:29:16][351250615180102][360 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:29:16][351250615180102][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250615180102\",\"model\":\"SM-F741W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2286\"}'\'' -e'"" [2025-09-09 15:29:16][351250615180102][360 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:29:16][351250615180102][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250615180102\",\"model\":\"SM-F741W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2286\"}'\'' -e'"" [2025-09-09 15:29:22][351250615180102][6608 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f56d11c-1b25-4dda-a0be-7c7f8fbf8dd7","id":"QR_8f56d11c-1b25-4dda-a0be-7c7f8fbf8dd7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:29:22][351250615180102][6764 ms][DEBUG] proc_open done in 6404 ms; code=255; res.len=3343 [2025-09-09 15:29:22][351250615180102][6764 ms][DEBUG] END runCmdUntilRes#1 in 6404 ms [2025-09-09 15:29:22][351250615180102][6764 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:31:03][352502217485522][1 ms][INFO] === Request start === [2025-09-09 15:31:03][352502217485522][1 ms][DEBUG] START check_scloud [2025-09-09 15:31:03][352502217485522][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:31:03][352502217485522][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 18727 5014 23968944 161540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:31:03][352502217485522][313 ms][DEBUG] targetPkg: running [2025-09-09 15:31:03][352502217485522][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 15:31:03][352502217485522][313 ms][DEBUG] START check_boot_completed [2025-09-09 15:31:03][352502217485522][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:31:03][352502217485522][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:31:03][352502217485522][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:31:03][352502217485522][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:31:03][352502217485522][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:31:03][352502217485522][422 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:31:03][352502217485522][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502217485522\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1858\"}'\'' -e'"" [2025-09-09 15:31:03][352502217485522][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:31:03][352502217485522][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502217485522\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1858\"}'\'' -e'"" [2025-09-09 15:31:08][352502217485522][4827 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6770d04-3bc6-4805-bd0e-cd47e7701d79","id":"QR_d6770d04-3bc6-4805-bd0e-cd47e7701d79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:31:08][352502217485522][4983 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 15:31:08][352502217485522][4983 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 15:31:08][352502217485522][4983 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:31:11][352429896181299][0 ms][INFO] === Request start === [2025-09-09 15:31:11][352429896181299][1 ms][DEBUG] START check_scloud [2025-09-09 15:31:11][352429896181299][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:31:12][352429896181299][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18727 5014 24135864 172232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:31:12][352429896181299][302 ms][DEBUG] targetPkg: running [2025-09-09 15:31:12][352429896181299][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 15:31:12][352429896181299][302 ms][DEBUG] START check_boot_completed [2025-09-09 15:31:12][352429896181299][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:31:12][352429896181299][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:31:12][352429896181299][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:31:12][352429896181299][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:31:12][352429896181299][410 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 15:31:12][352429896181299][410 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:31:12][352429896181299][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429896181299\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1545\"}'\'' -e'"" [2025-09-09 15:31:12][352429896181299][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:31:12][352429896181299][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429896181299\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1545\"}'\'' -e'"" [2025-09-09 15:31:17][352429896181299][5800 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a663f1cb-65e0-4ccc-ad98-2caccc54e3fa","id":"QR_a663f1cb-65e0-4ccc-ad98-2caccc54e3fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:31:17][352429896181299][5956 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-09 15:31:17][352429896181299][5956 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-09 15:31:17][352429896181299][5956 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:31:23][351672491095262][0 ms][INFO] === Request start === [2025-09-09 15:31:23][351672491095262][1 ms][DEBUG] START check_scloud [2025-09-09 15:31:23][351672491095262][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:31:23][351672491095262][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 18727 5014 24266048 183888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:31:23][351672491095262][314 ms][DEBUG] targetPkg: running [2025-09-09 15:31:23][351672491095262][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 15:31:23][351672491095262][315 ms][DEBUG] START check_boot_completed [2025-09-09 15:31:23][351672491095262][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:31:23][351672491095262][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:31:23][351672491095262][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:31:23][351672491095262][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:31:23][351672491095262][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:31:23][351672491095262][408 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:31:23][351672491095262][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491095262\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2348\"}'\'' -e'"" [2025-09-09 15:31:23][351672491095262][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:31:23][351672491095262][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491095262\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2348\"}'\'' -e'"" [2025-09-09 15:31:28][351672491095262][4704 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1b30e17-b817-48d7-a596-86cc9ede9ed6","id":"QR_d1b30e17-b817-48d7-a596-86cc9ede9ed6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:31:28][351672491095262][4860 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-09 15:31:28][351672491095262][4860 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 15:31:28][351672491095262][4860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:31:33][353607431396394][0 ms][INFO] === Request start === [2025-09-09 15:31:33][353607431396394][1 ms][DEBUG] START check_scloud [2025-09-09 15:31:33][353607431396394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:31:33][353607431396394][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 18727 5014 24412544 194808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:31:33][353607431396394][264 ms][DEBUG] targetPkg: running [2025-09-09 15:31:33][353607431396394][264 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 15:31:33][353607431396394][264 ms][DEBUG] START check_boot_completed [2025-09-09 15:31:33][353607431396394][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:31:33][353607431396394][296 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:31:33][353607431396394][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:31:34][353607431396394][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:31:34][353607431396394][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:31:34][353607431396394][343 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:31:34][353607431396394][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607431396394\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8920\"}'\'' -e'"" [2025-09-09 15:31:34][353607431396394][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:31:34][353607431396394][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607431396394\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8920\"}'\'' -e'"" [2025-09-09 15:31:38][353607431396394][4670 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4847ea94-fbc1-445c-8471-b21dbfe0525d","id":"QR_4847ea94-fbc1-445c-8471-b21dbfe0525d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:31:38][353607431396394][4826 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 15:31:38][353607431396394][4826 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 15:31:38][353607431396394][4826 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:34:03][350287314925495][1 ms][INFO] === Request start === [2025-09-09 15:34:03][350287314925495][1 ms][DEBUG] START check_scloud [2025-09-09 15:34:03][350287314925495][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:34:03][350287314925495][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 18727 5014 24548800 206548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:34:03][350287314925495][293 ms][DEBUG] targetPkg: running [2025-09-09 15:34:03][350287314925495][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 15:34:03][350287314925495][293 ms][DEBUG] START check_boot_completed [2025-09-09 15:34:03][350287314925495][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:34:03][350287314925495][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:34:03][350287314925495][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:34:03][350287314925495][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:34:03][350287314925495][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:34:03][350287314925495][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:34:03][350287314925495][480 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1392\nsuccessfulTxPacketsPerSecond: 0.8133995119602928\nretriedTxPackets: 227\nretriedTxPacketsPerSecond: 0.22907986255208246\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1375\nsuccessfulRxPacketsPerSecond: 0.6905595856642486\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:34:03][350287314925495][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:34:05][350287314925495][1824 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.262/303.262/303.262/0.000 ms\n [2025-09-09 15:34:05][350287314925495][1824 ms][DEBUG] check_internet: online [2025-09-09 15:34:05][350287314925495][1824 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:34:05][350287314925495][1824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314925495\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6040\"}'\'' -e'"" [2025-09-09 15:34:05][350287314925495][1825 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:34:05][350287314925495][1825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314925495\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6040\"}'\'' -e'"" [2025-09-09 15:34:09][350287314925495][6245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1c461b7-47ab-45df-a321-08865d8ca4c2","id":"QR_d1c461b7-47ab-45df-a321-08865d8ca4c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:34:09][350287314925495][6401 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-09 15:34:09][350287314925495][6401 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-09-09 15:34:09][350287314925495][6401 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:34:12][350287314925495][0 ms][INFO] === Request start === [2025-09-09 15:34:12][350287314925495][1 ms][DEBUG] START check_scloud [2025-09-09 15:34:12][350287314925495][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:34:12][350287314925495][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 18727 5014 24683208 217420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:34:12][350287314925495][260 ms][DEBUG] targetPkg: running [2025-09-09 15:34:12][350287314925495][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 15:34:12][350287314925495][260 ms][DEBUG] START check_boot_completed [2025-09-09 15:34:12][350287314925495][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:34:12][350287314925495][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:34:12][350287314925495][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:34:12][350287314925495][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:34:12][350287314925495][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:34:12][350287314925495][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:34:12][350287314925495][463 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1392\nsuccessfulTxPacketsPerSecond: 0.8133995119602928\nretriedTxPackets: 227\nretriedTxPacketsPerSecond: 0.22907986255208246\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1375\nsuccessfulRxPacketsPerSecond: 0.6905595856642486\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:34:12][350287314925495][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:34:12][350287314925495][885 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.761/282.761/282.761/0.000 ms\n [2025-09-09 15:34:12][350287314925495][885 ms][DEBUG] check_internet: online [2025-09-09 15:34:12][350287314925495][885 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:34:12][350287314925495][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314925495\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1458\"}'\'' -e'"" [2025-09-09 15:34:12][350287314925495][885 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:34:12][350287314925495][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314925495\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1458\"}'\'' -e'"" [2025-09-09 15:34:17][350287314925495][5743 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_977e0317-1465-4691-bc1f-a4b4317fa61d","id":"QR_977e0317-1465-4691-bc1f-a4b4317fa61d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:34:17][350287314925495][5899 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-09 15:34:17][350287314925495][5899 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-09 15:34:17][350287314925495][5899 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:34:22][355036111779059][0 ms][INFO] === Request start === [2025-09-09 15:34:22][355036111779059][1 ms][DEBUG] START check_scloud [2025-09-09 15:34:22][355036111779059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:34:22][355036111779059][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 18727 5014 24823760 229480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:34:22][355036111779059][288 ms][DEBUG] targetPkg: running [2025-09-09 15:34:22][355036111779059][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 15:34:22][355036111779059][288 ms][DEBUG] START check_boot_completed [2025-09-09 15:34:22][355036111779059][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:34:22][355036111779059][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:34:22][355036111779059][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:34:22][355036111779059][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:34:22][355036111779059][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:34:22][355036111779059][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:34:22][355036111779059][554 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1392\nsuccessfulTxPacketsPerSecond: 0.8133995119602928\nretriedTxPackets: 227\nretriedTxPacketsPerSecond: 0.22907986255208246\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1375\nsuccessfulRxPacketsPerSecond: 0.6905595856642486\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:34:22][355036111779059][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:34:23][355036111779059][960 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.969/302.969/302.969/0.000 ms\n [2025-09-09 15:34:23][355036111779059][960 ms][DEBUG] check_internet: online [2025-09-09 15:34:23][355036111779059][960 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:34:23][355036111779059][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355036111779059\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7982\"}'\'' -e'"" [2025-09-09 15:34:23][355036111779059][960 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:34:23][355036111779059][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355036111779059\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7982\"}'\'' -e'"" [2025-09-09 15:34:26][355036111779059][4490 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40003bb3-50ff-4335-ab29-6f497a8bdf24","id":"QR_40003bb3-50ff-4335-ab29-6f497a8bdf24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:34:26][355036111779059][4646 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-09 15:34:26][355036111779059][4647 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-09 15:34:26][355036111779059][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:34:29][355036111779059][0 ms][INFO] === Request start === [2025-09-09 15:34:29][355036111779059][1 ms][DEBUG] START check_scloud [2025-09-09 15:34:29][355036111779059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:34:29][355036111779059][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 18727 5014 24973496 241520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:34:29][355036111779059][262 ms][DEBUG] targetPkg: running [2025-09-09 15:34:29][355036111779059][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 15:34:29][355036111779059][262 ms][DEBUG] START check_boot_completed [2025-09-09 15:34:29][355036111779059][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:34:29][355036111779059][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:34:29][355036111779059][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:34:29][355036111779059][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:34:29][355036111779059][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:34:29][355036111779059][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:34:29][355036111779059][496 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30719 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1392\nsuccessfulTxPacketsPerSecond: 0.8133995119602928\nretriedTxPackets: 227\nretriedTxPacketsPerSecond: 0.22907986255208246\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1375\nsuccessfulRxPacketsPerSecond: 0.6905595856642486\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:34:29][355036111779059][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:34:30][355036111779059][949 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.593/329.593/329.593/0.000 ms\n [2025-09-09 15:34:30][355036111779059][949 ms][DEBUG] check_internet: online [2025-09-09 15:34:30][355036111779059][949 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:34:30][355036111779059][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355036111779059\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2299\"}'\'' -e'"" [2025-09-09 15:34:30][355036111779059][949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:34:30][355036111779059][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355036111779059\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2299\"}'\'' -e'"" [2025-09-09 15:34:34][355036111779059][4932 ms][DEBUG] proc_open done in 3983 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 15:34:34][355036111779059][4933 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-09 15:34:34][355036111779059][4933 ms][WARN] Detected error: Process with pid 18727 either refused to load frida-agent, or terminated during injectionProcess with pid 18727 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 15:34:34][355036111779059][4933 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:34:34][355036111779059][5229 ms][DEBUG] SU: done in 296 ms; outsystem 5430 5014 12643168 261380 ep_poll 0 S system_server\nsystem 20068 1 12442544 120724 ptrace_stop 0 t system_server\n [2025-09-09 15:34:34][355036111779059][5229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 15:34:34][355036111779059][5356 ms][DEBUG] SU: done in 127 ms; out [2025-09-09 15:34:34][355036111779059][5356 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 15:34:34][355036111779059][5356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:34:34][355036111779059][5479 ms][DEBUG] SU: done in 123 ms; out [2025-09-09 15:34:34][355036111779059][5479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:34:34][355036111779059][5651 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:34:36][355036111779059][7666 ms][DEBUG] START check_boot_completed [2025-09-09 15:34:36][355036111779059][7666 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:34:36][355036111779059][7713 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:34:36][355036111779059][7713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:34:36][355036111779059][7775 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:34:36][355036111779059][7775 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:34:39][355036111779059][10790 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 15:34:39][355036111779059][10790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355036111779059\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2299\"}'\'' -e'"" [2025-09-09 15:34:40][355036111779059][11274 ms][DEBUG] proc_open done in 484 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-09 15:34:40][355036111779059][11274 ms][DEBUG] END runCmdUntilRes#2 in 484 ms [2025-09-09 15:34:40][355036111779059][11274 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-09 15:34:40][355036111779059][11274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:34:40][355036111779059][11571 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 15:35:03][357822611516838][0 ms][INFO] === Request start === [2025-09-09 15:35:03][357822611516838][1 ms][DEBUG] START check_scloud [2025-09-09 15:35:03][357822611516838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:35:04][357822611516838][507 ms][DEBUG] SU: done in 506 ms; out [2025-09-09 15:35:04][357822611516838][507 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:35:04][357822611516838][538 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 15:35:04][357822611516838][539 ms][DEBUG] check_devices: device found [2025-09-09 15:35:04][357822611516838][539 ms][WARN] targetPkg: not running, restarting [2025-09-09 15:35:04][357822611516838][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:35:04][357822611516838][835 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 15:35:04][357822611516838][836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:35:04][357822611516838][1070 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:35:06][357822611516838][3085 ms][DEBUG] END check_scloud in 3084 ms [2025-09-09 15:35:06][357822611516838][3085 ms][DEBUG] START check_boot_completed [2025-09-09 15:35:06][357822611516838][3085 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:35:06][357822611516838][3132 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:35:06][357822611516838][3132 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:35:06][357822611516838][3194 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:35:06][357822611516838][3194 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:35:06][357822611516838][3194 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:35:06][357822611516838][3194 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822611516838\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8474\"}'\'' -e'"" [2025-09-09 15:35:06][357822611516838][3194 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:35:06][357822611516838][3194 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822611516838\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8474\"}'\'' -e'"" [2025-09-09 15:35:09][357822611516838][5834 ms][DEBUG] proc_open done in 2640 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-09 15:35:09][357822611516838][5834 ms][DEBUG] END runCmdUntilRes#1 in 2640 ms [2025-09-09 15:35:09][357822611516838][5835 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-09 15:35:09][357822611516838][5835 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:35:09][357822611516838][6178 ms][DEBUG] SU: done in 343 ms; outsystem 20595 20336 11639816 318572 ep_poll 0 S system_server\n [2025-09-09 15:35:09][357822611516838][6178 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 15:35:09][357822611516838][6334 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 15:35:09][357822611516838][6334 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 15:35:09][357822611516838][6334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:35:09][357822611516838][6460 ms][DEBUG] SU: done in 126 ms; out [2025-09-09 15:35:09][357822611516838][6460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:35:10][357822611516838][6693 ms][DEBUG] SU: done in 233 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:35:12][357822611516838][8708 ms][DEBUG] START check_boot_completed [2025-09-09 15:35:12][357822611516838][8708 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:35:12][357822611516838][8755 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:35:12][357822611516838][8755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:35:12][357822611516838][8818 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:35:12][357822611516838][8818 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 15:35:15][357822611516838][11833 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 15:35:15][357822611516838][11833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822611516838\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8474\"}'\'' -e'"" [2025-09-09 15:35:25][357822611516838][21893 ms][DEBUG] proc_open done in 10060 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-09 15:35:25][357822611516838][21893 ms][DEBUG] END runCmdUntilRes#2 in 10061 ms [2025-09-09 15:35:25][357822611516838][21893 ms][WARN] Detected error 2; Reboot the device [2025-09-09 15:35:25][357822611516838][21893 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:35:25][357822611516838][22299 ms][DEBUG] SU: done in 406 ms; out [2025-09-09 15:35:25][357822611516838][22299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 15:35:27][357822611516838][24080 ms][DEBUG] SU: done in 1781 ms; out [2025-09-09 15:36:03][357822611516838][0 ms][INFO] === Request start === [2025-09-09 15:36:03][357822611516838][1 ms][DEBUG] START check_scloud [2025-09-09 15:36:03][357822611516838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:36:03][357822611516838][41 ms][DEBUG] SU: done in 40 ms; out [2025-09-09 15:36:03][357822611516838][41 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:36:03][357822611516838][72 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 15:36:03][357822611516838][72 ms][WARN] check_devices: no device [2025-09-09 15:36:03][357822611516838][72 ms][WARN] check_devices: no device [2025-09-09 15:36:03][357822611516838][72 ms][DEBUG] END check_scloud in 71 ms [2025-09-09 15:36:06][351684404218972][1 ms][INFO] === Request start === [2025-09-09 15:36:06][351684404218972][1 ms][DEBUG] START check_scloud [2025-09-09 15:36:06][351684404218972][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:36:06][351684404218972][40 ms][DEBUG] SU: done in 39 ms; out [2025-09-09 15:36:06][351684404218972][40 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:36:06][351684404218972][71 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 15:36:06][351684404218972][71 ms][WARN] check_devices: no device [2025-09-09 15:36:06][351684404218972][71 ms][WARN] check_devices: no device [2025-09-09 15:36:06][351684404218972][71 ms][DEBUG] END check_scloud in 70 ms [2025-09-09 15:37:03][357822611516838][0 ms][INFO] === Request start === [2025-09-09 15:37:03][357822611516838][1 ms][DEBUG] START check_scloud [2025-09-09 15:37:03][357822611516838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:37:03][357822611516838][422 ms][DEBUG] SU: done in 421 ms; out [2025-09-09 15:37:03][357822611516838][422 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:37:03][357822611516838][468 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 15:37:03][357822611516838][469 ms][DEBUG] check_devices: device found [2025-09-09 15:37:03][357822611516838][469 ms][WARN] targetPkg: not running, restarting [2025-09-09 15:37:03][357822611516838][469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:37:03][357822611516838][625 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 15:37:03][357822611516838][625 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:37:04][357822611516838][922 ms][DEBUG] SU: done in 297 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:37:06][357822611516838][2937 ms][DEBUG] END check_scloud in 2936 ms [2025-09-09 15:37:06][357822611516838][2937 ms][DEBUG] START check_boot_completed [2025-09-09 15:37:06][357822611516838][2937 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:37:06][357822611516838][2983 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:37:06][357822611516838][2983 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:37:06][357822611516838][3046 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:37:06][357822611516838][3046 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:37:06][357822611516838][3046 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:37:06][357822611516838][3046 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822611516838\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4450\"}'\'' -e'"" [2025-09-09 15:37:06][357822611516838][3046 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:37:06][357822611516838][3046 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822611516838\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4450\"}'\'' -e'"" [2025-09-09 15:37:11][357822611516838][8654 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f70cddb-4531-4d2f-8128-ea7fcd08a828","id":"QR_3f70cddb-4531-4d2f-8128-ea7fcd08a828","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:37:12][357822611516838][8810 ms][DEBUG] proc_open done in 5763 ms; code=255; res.len=3343 [2025-09-09 15:37:12][357822611516838][8810 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-09-09 15:37:12][357822611516838][8810 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:37:14][357822611516838][0 ms][INFO] === Request start === [2025-09-09 15:37:14][357822611516838][1 ms][DEBUG] START check_scloud [2025-09-09 15:37:14][357822611516838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:37:14][357822611516838][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 11140 4974 23834176 116888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:37:14][357822611516838][334 ms][DEBUG] targetPkg: running [2025-09-09 15:37:14][357822611516838][334 ms][DEBUG] END check_scloud in 334 ms [2025-09-09 15:37:14][357822611516838][334 ms][DEBUG] START check_boot_completed [2025-09-09 15:37:14][357822611516838][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:37:14][357822611516838][381 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:37:14][357822611516838][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:37:14][357822611516838][459 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 15:37:14][357822611516838][459 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 15:37:14][357822611516838][459 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:37:14][357822611516838][459 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822611516838\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3385\"}'\'' -e'"" [2025-09-09 15:37:14][357822611516838][459 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:37:14][357822611516838][459 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822611516838\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3385\"}'\'' -e'"" [2025-09-09 15:37:20][357822611516838][6379 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65cdb9cc-19dc-46a8-a191-31de1b4acf86","id":"QR_65cdb9cc-19dc-46a8-a191-31de1b4acf86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:37:20][357822611516838][6535 ms][DEBUG] proc_open done in 6076 ms; code=255; res.len=3343 [2025-09-09 15:37:20][357822611516838][6535 ms][DEBUG] END runCmdUntilRes#1 in 6076 ms [2025-09-09 15:37:20][357822611516838][6535 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:37:25][351684404218972][0 ms][INFO] === Request start === [2025-09-09 15:37:25][351684404218972][1 ms][DEBUG] START check_scloud [2025-09-09 15:37:25][351684404218972][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:37:25][351684404218972][285 ms][DEBUG] SU: done in 284 ms; out [2025-09-09 15:37:25][351684404218972][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:37:25][351684404218972][330 ms][DEBUG] ADB: done in 45 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 15:37:25][351684404218972][330 ms][DEBUG] check_devices: device found [2025-09-09 15:37:25][351684404218972][330 ms][WARN] targetPkg: not running, restarting [2025-09-09 15:37:25][351684404218972][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:37:25][351684404218972][533 ms][DEBUG] SU: done in 203 ms; out [2025-09-09 15:37:25][351684404218972][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:37:26][351684404218972][799 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:37:28][351684404218972][2814 ms][DEBUG] END check_scloud in 2813 ms [2025-09-09 15:37:28][351684404218972][2814 ms][DEBUG] START check_boot_completed [2025-09-09 15:37:28][351684404218972][2814 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:37:28][351684404218972][2860 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:37:28][351684404218972][2860 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:37:28][351684404218972][2907 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:37:28][351684404218972][2907 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 15:37:28][351684404218972][2907 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:37:28][351684404218972][2907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684404218972\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1492\"}'\'' -e'"" [2025-09-09 15:37:28][351684404218972][2907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:37:28][351684404218972][2907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684404218972\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1492\"}'\'' -e'"" [2025-09-09 15:37:31][351684404218972][6578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_255d0283-79f2-4771-a210-4dba725cea32","id":"QR_255d0283-79f2-4771-a210-4dba725cea32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:37:32][351684404218972][6735 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-09-09 15:37:32][351684404218972][6735 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-09 15:37:32][351684404218972][6735 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:37:34][351684404218972][0 ms][INFO] === Request start === [2025-09-09 15:37:34][351684404218972][1 ms][DEBUG] START check_scloud [2025-09-09 15:37:34][351684404218972][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:37:34][351684404218972][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 13847 4974 23849628 123560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:37:34][351684404218972][319 ms][DEBUG] targetPkg: running [2025-09-09 15:37:34][351684404218972][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 15:37:34][351684404218972][320 ms][DEBUG] START check_boot_completed [2025-09-09 15:37:34][351684404218972][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:37:34][351684404218972][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:37:34][351684404218972][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:37:34][351684404218972][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:37:34][351684404218972][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:37:34][351684404218972][429 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:37:34][351684404218972][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684404218972\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7391\"}'\'' -e'"" [2025-09-09 15:37:34][351684404218972][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:37:34][351684404218972][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684404218972\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7391\"}'\'' -e'"" [2025-09-09 15:37:39][351684404218972][5334 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea4da748-0610-4012-98f0-6629e9a51a42","id":"QR_ea4da748-0610-4012-98f0-6629e9a51a42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:37:39][351684404218972][5490 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-09 15:37:39][351684404218972][5490 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-09 15:37:39][351684404218972][5490 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:38:03][357674438204076][0 ms][INFO] === Request start === [2025-09-09 15:38:03][357674438204076][1 ms][DEBUG] START check_scloud [2025-09-09 15:38:03][357674438204076][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:38:03][357674438204076][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 13847 4974 23919160 111204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:38:03][357674438204076][332 ms][DEBUG] targetPkg: running [2025-09-09 15:38:03][357674438204076][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-09 15:38:03][357674438204076][332 ms][DEBUG] START check_boot_completed [2025-09-09 15:38:03][357674438204076][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:38:03][357674438204076][363 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:38:03][357674438204076][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:38:03][357674438204076][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:38:03][357674438204076][410 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:38:03][357674438204076][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:38:03][357674438204076][535 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:38:03][357674438204076][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:38:04][357674438204076][1488 ms][DEBUG] SU: done in 953 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.153/303.153/303.153/0.000 ms\n [2025-09-09 15:38:04][357674438204076][1488 ms][DEBUG] check_internet: online [2025-09-09 15:38:04][357674438204076][1488 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:38:04][357674438204076][1488 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438204076\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2676\"}'\'' -e'"" [2025-09-09 15:38:04][357674438204076][1488 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:38:04][357674438204076][1488 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438204076\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2676\"}'\'' -e'"" [2025-09-09 15:38:08][357674438204076][5143 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c4b7e0c-7ef6-4de3-b18c-2fa0de123e2a","id":"QR_5c4b7e0c-7ef6-4de3-b18c-2fa0de123e2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:38:08][357674438204076][5299 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-09 15:38:08][357674438204076][5299 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-09 15:38:08][357674438204076][5299 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:38:10][357674438204076][1 ms][INFO] === Request start === [2025-09-09 15:38:10][357674438204076][1 ms][DEBUG] START check_scloud [2025-09-09 15:38:10][357674438204076][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:38:11][357674438204076][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 13847 4974 24071424 114400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:38:11][357674438204076][263 ms][DEBUG] targetPkg: running [2025-09-09 15:38:11][357674438204076][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 15:38:11][357674438204076][263 ms][DEBUG] START check_boot_completed [2025-09-09 15:38:11][357674438204076][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:38:11][357674438204076][294 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:38:11][357674438204076][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:38:11][357674438204076][342 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 15:38:11][357674438204076][342 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 15:38:11][357674438204076][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:38:11][357674438204076][498 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:38:11][357674438204076][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:38:11][357674438204076][826 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.506/225.506/225.506/0.000 ms\n [2025-09-09 15:38:11][357674438204076][826 ms][DEBUG] check_internet: online [2025-09-09 15:38:11][357674438204076][826 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:38:11][357674438204076][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438204076\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2016\"}'\'' -e'"" [2025-09-09 15:38:11][357674438204076][826 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:38:11][357674438204076][826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438204076\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2016\"}'\'' -e'"" [2025-09-09 15:38:16][357674438204076][5606 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fbc9fe8-22ba-4df6-9d73-3d0e3b2095f8","id":"QR_6fbc9fe8-22ba-4df6-9d73-3d0e3b2095f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:38:16][357674438204076][5762 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-09 15:38:16][357674438204076][5762 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-09 15:38:16][357674438204076][5762 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:38:20][350414100424141][0 ms][INFO] === Request start === [2025-09-09 15:38:20][350414100424141][1 ms][DEBUG] START check_scloud [2025-09-09 15:38:20][350414100424141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:38:21][350414100424141][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 13847 4974 24211848 114996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:38:21][350414100424141][287 ms][DEBUG] targetPkg: running [2025-09-09 15:38:21][350414100424141][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-09 15:38:21][350414100424141][287 ms][DEBUG] START check_boot_completed [2025-09-09 15:38:21][350414100424141][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:38:21][350414100424141][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:38:21][350414100424141][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:38:21][350414100424141][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:38:21][350414100424141][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 15:38:21][350414100424141][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:38:21][350414100424141][521 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:38:21][350414100424141][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:38:21][350414100424141][974 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.198/341.198/341.198/0.000 ms\n [2025-09-09 15:38:21][350414100424141][975 ms][DEBUG] check_internet: online [2025-09-09 15:38:21][350414100424141][975 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:38:21][350414100424141][975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350414100424141\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-09-09 15:38:21][350414100424141][975 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:38:21][350414100424141][975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350414100424141\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-09-09 15:38:25][350414100424141][4739 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17757bef-3b93-46dd-99cb-a46c79963fe1","id":"QR_17757bef-3b93-46dd-99cb-a46c79963fe1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:38:25][350414100424141][4895 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-09-09 15:38:25][350414100424141][4895 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-09 15:38:25][350414100424141][4895 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:38:27][350414100424141][0 ms][INFO] === Request start === [2025-09-09 15:38:27][350414100424141][1 ms][DEBUG] START check_scloud [2025-09-09 15:38:27][350414100424141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:38:28][350414100424141][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 13847 4974 24338028 128492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:38:28][350414100424141][305 ms][DEBUG] targetPkg: running [2025-09-09 15:38:28][350414100424141][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 15:38:28][350414100424141][306 ms][DEBUG] START check_boot_completed [2025-09-09 15:38:28][350414100424141][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:38:28][350414100424141][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:38:28][350414100424141][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:38:28][350414100424141][461 ms][DEBUG] SU: done in 109 ms; out [2025-09-09 15:38:28][350414100424141][462 ms][DEBUG] END check_boot_completed in 156 ms [2025-09-09 15:38:28][350414100424141][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:38:28][350414100424141][633 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:38:28][350414100424141][634 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:38:28][350414100424141][1071 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.714/301.714/301.714/0.000 ms\n [2025-09-09 15:38:28][350414100424141][1071 ms][DEBUG] check_internet: online [2025-09-09 15:38:28][350414100424141][1071 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:38:28][350414100424141][1071 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350414100424141\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1649\"}'\'' -e'"" [2025-09-09 15:38:28][350414100424141][1071 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:38:28][350414100424141][1071 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350414100424141\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1649\"}'\'' -e'"" [2025-09-09 15:38:34][350414100424141][6132 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_316aae1c-8b87-4047-905d-475c3bb141d4","id":"QR_316aae1c-8b87-4047-905d-475c3bb141d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:38:34][350414100424141][6288 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 15:38:34][350414100424141][6288 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-09 15:38:34][350414100424141][6288 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:40:04][351663702136441][1 ms][INFO] === Request start === [2025-09-09 15:40:04][351663702136441][1 ms][DEBUG] START check_scloud [2025-09-09 15:40:04][351663702136441][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:40:05][351663702136441][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 13847 4974 24395324 141464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:40:05][351663702136441][300 ms][DEBUG] targetPkg: running [2025-09-09 15:40:05][351663702136441][300 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 15:40:05][351663702136441][300 ms][DEBUG] START check_boot_completed [2025-09-09 15:40:05][351663702136441][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:40:05][351663702136441][344 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 15:40:05][351663702136441][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:40:05][351663702136441][393 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 15:40:05][351663702136441][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 15:40:05][351663702136441][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:40:05][351663702136441][516 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:40:05][351663702136441][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:40:05][351663702136441][907 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.931/277.931/277.931/0.000 ms\n [2025-09-09 15:40:05][351663702136441][907 ms][DEBUG] check_internet: online [2025-09-09 15:40:05][351663702136441][907 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:40:05][351663702136441][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663702136441\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4027\"}'\'' -e'"" [2025-09-09 15:40:05][351663702136441][907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:40:05][351663702136441][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663702136441\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4027\"}'\'' -e'"" [2025-09-09 15:40:11][351663702136441][6780 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16b1f200-7312-4da1-a612-13c1f0d9bc39","id":"QR_16b1f200-7312-4da1-a612-13c1f0d9bc39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:40:11][351663702136441][6937 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-09-09 15:40:11][351663702136441][6937 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-09-09 15:40:11][351663702136441][6937 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:40:15][351663702136441][0 ms][INFO] === Request start === [2025-09-09 15:40:15][351663702136441][1 ms][DEBUG] START check_scloud [2025-09-09 15:40:15][351663702136441][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:40:15][351663702136441][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 13847 4974 24566468 150500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:40:15][351663702136441][308 ms][DEBUG] targetPkg: running [2025-09-09 15:40:15][351663702136441][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 15:40:15][351663702136441][308 ms][DEBUG] START check_boot_completed [2025-09-09 15:40:15][351663702136441][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:40:15][351663702136441][353 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 15:40:15][351663702136441][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:40:15][351663702136441][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:40:15][351663702136441][399 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 15:40:15][351663702136441][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:40:15][351663702136441][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:40:15][351663702136441][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:40:16][351663702136441][899 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.393/277.393/277.393/0.000 ms\n [2025-09-09 15:40:16][351663702136441][899 ms][DEBUG] check_internet: online [2025-09-09 15:40:16][351663702136441][899 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:40:16][351663702136441][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663702136441\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8412\"}'\'' -e'"" [2025-09-09 15:40:16][351663702136441][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:40:16][351663702136441][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663702136441\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8412\"}'\'' -e'"" [2025-09-09 15:40:20][351663702136441][5039 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb38d0e0-b8ab-43b6-8793-afc349fbcf68","id":"QR_bb38d0e0-b8ab-43b6-8793-afc349fbcf68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:40:20][351663702136441][5195 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-09-09 15:40:20][351663702136441][5195 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-09 15:40:20][351663702136441][5195 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:40:22][358709893641989][0 ms][INFO] === Request start === [2025-09-09 15:40:22][358709893641989][1 ms][DEBUG] START check_scloud [2025-09-09 15:40:22][358709893641989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:40:22][358709893641989][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 13847 4974 24735628 162220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:40:22][358709893641989][319 ms][DEBUG] targetPkg: running [2025-09-09 15:40:22][358709893641989][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 15:40:22][358709893641989][319 ms][DEBUG] START check_boot_completed [2025-09-09 15:40:22][358709893641989][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:40:22][358709893641989][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:40:22][358709893641989][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:40:22][358709893641989][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:40:22][358709893641989][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:40:22][358709893641989][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:40:22][358709893641989][539 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:40:22][358709893641989][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:40:23][358709893641989][881 ms][DEBUG] SU: done in 341 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.866/249.866/249.866/0.000 ms\n [2025-09-09 15:40:23][358709893641989][881 ms][DEBUG] check_internet: online [2025-09-09 15:40:23][358709893641989][881 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:40:23][358709893641989][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709893641989\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3309\"}'\'' -e'"" [2025-09-09 15:40:23][358709893641989][881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:40:23][358709893641989][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709893641989\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3309\"}'\'' -e'"" [2025-09-09 15:40:26][358709893641989][4286 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efc81364-868d-4add-9e69-16d041e6dd9c","id":"QR_efc81364-868d-4add-9e69-16d041e6dd9c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:40:26][358709893641989][4442 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-09 15:40:26][358709893641989][4442 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-09 15:40:26][358709893641989][4442 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:40:29][358709893641989][0 ms][INFO] === Request start === [2025-09-09 15:40:29][358709893641989][1 ms][DEBUG] START check_scloud [2025-09-09 15:40:29][358709893641989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:40:29][358709893641989][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 13847 4974 24891504 172564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:40:29][358709893641989][302 ms][DEBUG] targetPkg: running [2025-09-09 15:40:29][358709893641989][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 15:40:29][358709893641989][302 ms][DEBUG] START check_boot_completed [2025-09-09 15:40:29][358709893641989][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:40:29][358709893641989][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:40:29][358709893641989][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:40:29][358709893641989][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:40:29][358709893641989][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:40:29][358709893641989][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:40:29][358709893641989][522 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30806 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 275\nsuccessfulTxPacketsPerSecond: 7.72017746346847\nretriedTxPackets: 30\nretriedTxPacketsPerSecond: 1.1080065886478616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 252\nsuccessfulRxPacketsPerSecond: 5.030067514947737\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:40:29][358709893641989][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:40:30][358709893641989][911 ms][DEBUG] SU: done in 388 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.270/286.270/286.270/0.000 ms\n [2025-09-09 15:40:30][358709893641989][911 ms][DEBUG] check_internet: online [2025-09-09 15:40:30][358709893641989][911 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:40:30][358709893641989][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709893641989\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7492\"}'\'' -e'"" [2025-09-09 15:40:30][358709893641989][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:40:30][358709893641989][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709893641989\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7492\"}'\'' -e'"" [2025-09-09 15:40:34][358709893641989][5144 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54342be7-dfe1-47ad-8f3e-87dd44944953","id":"QR_54342be7-dfe1-47ad-8f3e-87dd44944953","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:40:34][358709893641989][5300 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 15:40:34][358709893641989][5300 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 15:40:34][358709893641989][5300 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:41:04][357382101191394][0 ms][INFO] === Request start === [2025-09-09 15:41:04][357382101191394][1 ms][DEBUG] START check_scloud [2025-09-09 15:41:04][357382101191394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:41:05][357382101191394][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 13847 4974 25007244 184488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:41:05][357382101191394][321 ms][DEBUG] targetPkg: running [2025-09-09 15:41:05][357382101191394][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 15:41:05][357382101191394][321 ms][DEBUG] START check_boot_completed [2025-09-09 15:41:05][357382101191394][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:41:05][357382101191394][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:41:05][357382101191394][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:41:05][357382101191394][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:41:05][357382101191394][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:41:05][357382101191394][414 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:41:05][357382101191394][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357382101191394\",\"model\":\"SM-T517P\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3150\"}'\'' -e'"" [2025-09-09 15:41:05][357382101191394][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:41:05][357382101191394][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357382101191394\",\"model\":\"SM-T517P\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3150\"}'\'' -e'"" [2025-09-09 15:41:10][357382101191394][5273 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee4a6d08-e9c5-4e9e-ac67-3b7a54d592cc","id":"QR_ee4a6d08-e9c5-4e9e-ac67-3b7a54d592cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:41:10][357382101191394][5429 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-09 15:41:10][357382101191394][5429 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-09 15:41:10][357382101191394][5429 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:41:13][357382101191394][0 ms][INFO] === Request start === [2025-09-09 15:41:13][357382101191394][1 ms][DEBUG] START check_scloud [2025-09-09 15:41:13][357382101191394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:41:14][357382101191394][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 13847 4974 25151768 193920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:41:14][357382101191394][260 ms][DEBUG] targetPkg: running [2025-09-09 15:41:14][357382101191394][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 15:41:14][357382101191394][260 ms][DEBUG] START check_boot_completed [2025-09-09 15:41:14][357382101191394][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:41:14][357382101191394][291 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:41:14][357382101191394][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:41:14][357382101191394][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:41:14][357382101191394][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:41:14][357382101191394][338 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:41:14][357382101191394][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357382101191394\",\"model\":\"SM-T517P\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7632\"}'\'' -e'"" [2025-09-09 15:41:14][357382101191394][338 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:41:14][357382101191394][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357382101191394\",\"model\":\"SM-T517P\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7632\"}'\'' -e'"" [2025-09-09 15:41:23][357382101191394][9242 ms][DEBUG] proc_open done in 8904 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 15:41:23][357382101191394][9242 ms][DEBUG] END runCmdUntilRes#1 in 8904 ms [2025-09-09 15:41:23][357382101191394][9242 ms][WARN] Detected error: Process with pid 13847 either refused to load frida-agent, or terminated during injectionProcess with pid 13847 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 15:41:23][357382101191394][9242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:41:23][357382101191394][9570 ms][DEBUG] SU: done in 328 ms; out [2025-09-09 15:41:23][357382101191394][9570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 15:41:23][357382101191394][10039 ms][DEBUG] SU: done in 468 ms; out [2025-09-09 15:41:23][357382101191394][10039 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 15:41:23][357382101191394][10039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:41:24][357382101191394][10367 ms][DEBUG] SU: done in 328 ms; out [2025-09-09 15:41:24][357382101191394][10367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:41:24][357382101191394][10632 ms][DEBUG] SU: done in 265 ms; out [2025-09-09 15:41:26][357382101191394][12647 ms][DEBUG] START check_boot_completed [2025-09-09 15:41:26][357382101191394][12647 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:41:26][357382101191394][12694 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:41:26][357382101191394][12694 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:41:26][357382101191394][12757 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:41:26][357382101191394][12757 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 15:41:29][357382101191394][15772 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 15:41:29][357382101191394][15772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357382101191394\",\"model\":\"SM-T517P\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7632\"}'\'' -e'"" [2025-09-09 15:41:31][357382101191394][17397 ms][DEBUG] proc_open done in 1624 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 15:41:31][357382101191394][17397 ms][DEBUG] END runCmdUntilRes#2 in 1625 ms [2025-09-09 15:41:31][357382101191394][17397 ms][WARN] Detected error 2; Reboot the device [2025-09-09 15:41:31][357382101191394][17397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:41:31][357382101191394][17678 ms][DEBUG] SU: done in 281 ms; outsystem 18996 18654 7700224 159256 futex_wait_queue_me 0 S system_server\n [2025-09-09 15:41:31][357382101191394][17678 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 15:41:32][357382101191394][18396 ms][DEBUG] SU: done in 718 ms; out [2025-09-09 15:42:03][350042792277798][0 ms][INFO] === Request start === [2025-09-09 15:42:03][350042792277798][1 ms][DEBUG] START check_scloud [2025-09-09 15:42:03][350042792277798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:42:03][350042792277798][36 ms][DEBUG] SU: done in 36 ms; out [2025-09-09 15:42:03][350042792277798][36 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:42:03][350042792277798][68 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 15:42:03][350042792277798][68 ms][WARN] check_devices: no device [2025-09-09 15:42:03][350042792277798][68 ms][WARN] check_devices: no device [2025-09-09 15:42:03][350042792277798][68 ms][DEBUG] END check_scloud in 67 ms [2025-09-09 15:43:03][350042792277798][1 ms][INFO] === Request start === [2025-09-09 15:43:03][350042792277798][1 ms][DEBUG] START check_scloud [2025-09-09 15:43:03][350042792277798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:43:03][350042792277798][384 ms][DEBUG] SU: done in 383 ms; out [2025-09-09 15:43:03][350042792277798][384 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:43:03][350042792277798][431 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 15:43:03][350042792277798][431 ms][DEBUG] check_devices: device found [2025-09-09 15:43:03][350042792277798][431 ms][WARN] targetPkg: not running, restarting [2025-09-09 15:43:03][350042792277798][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:43:03][350042792277798][571 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 15:43:03][350042792277798][571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:43:04][350042792277798][774 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:43:06][350042792277798][2789 ms][DEBUG] END check_scloud in 2788 ms [2025-09-09 15:43:06][350042792277798][2789 ms][DEBUG] START check_boot_completed [2025-09-09 15:43:06][350042792277798][2789 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:43:06][350042792277798][2836 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:43:06][350042792277798][2836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:43:06][350042792277798][2899 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:43:06][350042792277798][2899 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:43:06][350042792277798][2899 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:43:06][350042792277798][2899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042792277798\",\"model\":\"SM-A176B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9491\"}'\'' -e'"" [2025-09-09 15:43:06][350042792277798][2899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:43:06][350042792277798][2899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042792277798\",\"model\":\"SM-A176B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9491\"}'\'' -e'"" [2025-09-09 15:43:12][350042792277798][8757 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_216d90c5-5ae3-4268-8967-5b2ff38f9c45","id":"QR_216d90c5-5ae3-4268-8967-5b2ff38f9c45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:43:12][350042792277798][8913 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-09-09 15:43:12][350042792277798][8913 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-09-09 15:43:12][350042792277798][8913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:43:14][350042792277798][0 ms][INFO] === Request start === [2025-09-09 15:43:14][350042792277798][1 ms][DEBUG] START check_scloud [2025-09-09 15:43:14][350042792277798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:43:15][350042792277798][388 ms][DEBUG] SU: done in 387 ms; outu0_a118 10336 4973 23555932 110428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:43:15][350042792277798][388 ms][DEBUG] targetPkg: running [2025-09-09 15:43:15][350042792277798][388 ms][DEBUG] END check_scloud in 387 ms [2025-09-09 15:43:15][350042792277798][388 ms][DEBUG] START check_boot_completed [2025-09-09 15:43:15][350042792277798][388 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:43:15][350042792277798][435 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:43:15][350042792277798][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:43:15][350042792277798][497 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:43:15][350042792277798][497 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:43:15][350042792277798][497 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:43:15][350042792277798][497 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042792277798\",\"model\":\"SM-A176B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4151\"}'\'' -e'"" [2025-09-09 15:43:15][350042792277798][497 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:43:15][350042792277798][498 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042792277798\",\"model\":\"SM-A176B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4151\"}'\'' -e'"" [2025-09-09 15:43:20][350042792277798][5652 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a264a372-46f6-4520-a1fd-ae49c52f3392","id":"QR_a264a372-46f6-4520-a1fd-ae49c52f3392","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:43:20][350042792277798][5808 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 15:43:20][350042792277798][5808 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 15:43:20][350042792277798][5808 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:44:03][358799699171349][0 ms][INFO] === Request start === [2025-09-09 15:44:03][358799699171349][1 ms][DEBUG] START check_scloud [2025-09-09 15:44:03][358799699171349][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:44:04][358799699171349][461 ms][DEBUG] SU: done in 460 ms; out [2025-09-09 15:44:04][358799699171349][461 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:44:04][358799699171349][507 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 15:44:04][358799699171349][508 ms][DEBUG] check_devices: device found [2025-09-09 15:44:04][358799699171349][508 ms][WARN] targetPkg: not running, restarting [2025-09-09 15:44:04][358799699171349][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:44:04][358799699171349][664 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 15:44:04][358799699171349][664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:44:05][358799699171349][1039 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:44:07][358799699171349][3054 ms][DEBUG] END check_scloud in 3053 ms [2025-09-09 15:44:07][358799699171349][3054 ms][DEBUG] START check_boot_completed [2025-09-09 15:44:07][358799699171349][3054 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:44:07][358799699171349][3101 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:44:07][358799699171349][3101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:44:07][358799699171349][3163 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:44:07][358799699171349][3163 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:44:07][358799699171349][3163 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:44:07][358799699171349][3319 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=109056 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 80\nsuccessfulTxPacketsPerSecond: 8.188841262768078\nretriedTxPackets: 4\nretriedTxPacketsPerSecond: 0.2735321208653508\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 73\nsuccessfulRxPacketsPerSecond: 8.17762756676452\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:44:07][358799699171349][3320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:44:08][358799699171349][4350 ms][DEBUG] SU: done in 1031 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.910/299.910/299.910/0.000 ms\n [2025-09-09 15:44:08][358799699171349][4351 ms][DEBUG] check_internet: online [2025-09-09 15:44:08][358799699171349][4351 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:44:08][358799699171349][4351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699171349\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9221\"}'\'' -e'"" [2025-09-09 15:44:08][358799699171349][4351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:44:08][358799699171349][4351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699171349\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9221\"}'\'' -e'"" [2025-09-09 15:44:14][358799699171349][10177 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_317ff8d6-2fd3-486f-8d85-87fe9135082a","id":"QR_317ff8d6-2fd3-486f-8d85-87fe9135082a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:44:14][358799699171349][10333 ms][DEBUG] proc_open done in 5982 ms; code=255; res.len=3343 [2025-09-09 15:44:14][358799699171349][10333 ms][DEBUG] END runCmdUntilRes#1 in 5982 ms [2025-09-09 15:44:14][358799699171349][10333 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:44:16][358799699171349][0 ms][INFO] === Request start === [2025-09-09 15:44:16][358799699171349][1 ms][DEBUG] START check_scloud [2025-09-09 15:44:16][358799699171349][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:44:17][358799699171349][407 ms][DEBUG] SU: done in 406 ms; outu0_a118 15897 12929 23990308 113380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:44:17][358799699171349][407 ms][DEBUG] targetPkg: running [2025-09-09 15:44:17][358799699171349][407 ms][DEBUG] END check_scloud in 406 ms [2025-09-09 15:44:17][358799699171349][407 ms][DEBUG] START check_boot_completed [2025-09-09 15:44:17][358799699171349][407 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:44:17][358799699171349][438 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:44:17][358799699171349][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:44:17][358799699171349][485 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:44:17][358799699171349][485 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:44:17][358799699171349][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:44:17][358799699171349][641 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=109056 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 177\nsuccessfulTxPacketsPerSecond: 16.733652966278616\nretriedTxPackets: 29\nretriedTxPacketsPerSecond: 4.020400060426482\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 165\nsuccessfulRxPacketsPerSecond: 15.467724236883678\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:44:17][358799699171349][642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:44:17][358799699171349][1016 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.031/216.031/216.031/0.000 ms\n [2025-09-09 15:44:17][358799699171349][1016 ms][DEBUG] check_internet: online [2025-09-09 15:44:17][358799699171349][1016 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:44:17][358799699171349][1016 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699171349\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1482\"}'\'' -e'"" [2025-09-09 15:44:17][358799699171349][1017 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:44:17][358799699171349][1017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799699171349\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1482\"}'\'' -e'"" [2025-09-09 15:44:23][358799699171349][6562 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44c49991-ffa1-4208-a735-2997ff92aa42","id":"QR_44c49991-ffa1-4208-a735-2997ff92aa42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:44:23][358799699171349][6718 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-09-09 15:44:23][358799699171349][6718 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-09-09 15:44:23][358799699171349][6718 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:45:03][352600221074827][0 ms][INFO] === Request start === [2025-09-09 15:45:03][352600221074827][1 ms][DEBUG] START check_scloud [2025-09-09 15:45:03][352600221074827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:45:04][352600221074827][330 ms][DEBUG] SU: done in 330 ms; outu0_a118 15897 12929 24045504 61476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:45:04][352600221074827][330 ms][DEBUG] targetPkg: running [2025-09-09 15:45:04][352600221074827][330 ms][DEBUG] END check_scloud in 330 ms [2025-09-09 15:45:04][352600221074827][330 ms][DEBUG] START check_boot_completed [2025-09-09 15:45:04][352600221074827][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:45:04][352600221074827][362 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:45:04][352600221074827][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:45:04][352600221074827][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:45:04][352600221074827][409 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:45:04][352600221074827][409 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:45:04][352600221074827][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600221074827\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1370\"}'\'' -e'"" [2025-09-09 15:45:04][352600221074827][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:45:04][352600221074827][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600221074827\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1370\"}'\'' -e'"" [2025-09-09 15:45:09][352600221074827][5766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_267b5f90-52b7-4e1e-8765-e74efd819d41","id":"QR_267b5f90-52b7-4e1e-8765-e74efd819d41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:45:09][352600221074827][5923 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-09 15:45:09][352600221074827][5923 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-09 15:45:09][352600221074827][5923 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:45:11][357281613649370][1 ms][INFO] === Request start === [2025-09-09 15:45:11][357281613649370][1 ms][DEBUG] START check_scloud [2025-09-09 15:45:11][357281613649370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:45:12][357281613649370][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 15897 12929 24214968 75728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:45:12][357281613649370][341 ms][DEBUG] targetPkg: running [2025-09-09 15:45:12][357281613649370][341 ms][DEBUG] END check_scloud in 340 ms [2025-09-09 15:45:12][357281613649370][341 ms][DEBUG] START check_boot_completed [2025-09-09 15:45:12][357281613649370][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:45:12][357281613649370][373 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:45:12][357281613649370][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:45:12][357281613649370][421 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 15:45:12][357281613649370][421 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 15:45:12][357281613649370][421 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:45:12][357281613649370][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357281613649370\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3015\"}'\'' -e'"" [2025-09-09 15:45:12][357281613649370][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:45:12][357281613649370][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357281613649370\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3015\"}'\'' -e'"" [2025-09-09 15:46:03][357281613649370][1 ms][INFO] === Request start === [2025-09-09 15:46:03][357281613649370][1 ms][DEBUG] START check_scloud [2025-09-09 15:46:03][357281613649370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:46:03][357281613649370][388 ms][DEBUG] SU: done in 386 ms; out [2025-09-09 15:46:03][357281613649370][388 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 15:46:03][357281613649370][434 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 15:46:03][357281613649370][435 ms][DEBUG] check_devices: device found [2025-09-09 15:46:03][357281613649370][435 ms][WARN] targetPkg: not running, restarting [2025-09-09 15:46:03][357281613649370][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:46:03][357281613649370][575 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 15:46:03][357281613649370][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:46:04][357281613649370][825 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:46:06][357281613649370][2840 ms][DEBUG] END check_scloud in 2839 ms [2025-09-09 15:46:06][357281613649370][2840 ms][DEBUG] START check_boot_completed [2025-09-09 15:46:06][357281613649370][2840 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:46:06][357281613649370][2887 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:46:06][357281613649370][2887 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:46:06][357281613649370][2949 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:46:06][357281613649370][2949 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 15:46:06][357281613649370][2950 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:46:06][357281613649370][3184 ms][DEBUG] SU: done in 234 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 191\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 31\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 181\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:46:06][357281613649370][3184 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:46:07][357281613649370][4496 ms][DEBUG] SU: done in 1312 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.939/215.939/215.939/0.000 ms\n [2025-09-09 15:46:07][357281613649370][4496 ms][DEBUG] check_internet: online [2025-09-09 15:46:07][357281613649370][4496 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:46:07][357281613649370][4496 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357281613649370\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2768\"}'\'' -e'"" [2025-09-09 15:46:07][357281613649370][4496 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:46:07][357281613649370][4496 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357281613649370\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2768\"}'\'' -e'"" [2025-09-09 15:46:13][357281613649370][9963 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e46f4f4c-35b2-4ab3-b06e-4b267f64a70c","id":"QR_e46f4f4c-35b2-4ab3-b06e-4b267f64a70c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:46:13][357281613649370][10119 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-09 15:46:13][357281613649370][10119 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-09 15:46:13][357281613649370][10119 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:46:15][357281613649370][0 ms][INFO] === Request start === [2025-09-09 15:46:15][357281613649370][1 ms][DEBUG] START check_scloud [2025-09-09 15:46:15][357281613649370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:46:16][357281613649370][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 29000 24419 23511012 112812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:46:16][357281613649370][319 ms][DEBUG] targetPkg: running [2025-09-09 15:46:16][357281613649370][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 15:46:16][357281613649370][319 ms][DEBUG] START check_boot_completed [2025-09-09 15:46:16][357281613649370][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:46:16][357281613649370][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:46:16][357281613649370][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:46:16][357281613649370][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:46:16][357281613649370][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:46:16][357281613649370][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:46:16][357281613649370][553 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 191\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 31\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 181\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:46:16][357281613649370][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:46:16][357281613649370][944 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.093/261.093/261.093/0.000 ms\n [2025-09-09 15:46:16][357281613649370][944 ms][DEBUG] check_internet: online [2025-09-09 15:46:16][357281613649370][944 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:46:16][357281613649370][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357281613649370\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6306\"}'\'' -e'"" [2025-09-09 15:46:16][357281613649370][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:46:16][357281613649370][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357281613649370\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6306\"}'\'' -e'"" [2025-09-09 15:46:22][357281613649370][6442 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29eae128-eda1-4184-b1ce-895e8eb030e4","id":"QR_29eae128-eda1-4184-b1ce-895e8eb030e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:46:22][357281613649370][6598 ms][DEBUG] proc_open done in 5654 ms; code=255; res.len=3343 [2025-09-09 15:46:22][357281613649370][6599 ms][DEBUG] END runCmdUntilRes#1 in 5654 ms [2025-09-09 15:46:22][357281613649370][6599 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:50:04][350274356963121][1 ms][INFO] === Request start === [2025-09-09 15:50:04][350274356963121][1 ms][DEBUG] START check_scloud [2025-09-09 15:50:04][350274356963121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:50:04][350274356963121][344 ms][DEBUG] SU: done in 343 ms; outu0_a118 29000 24419 23571252 68252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:50:04][350274356963121][344 ms][DEBUG] targetPkg: running [2025-09-09 15:50:04][350274356963121][344 ms][DEBUG] END check_scloud in 343 ms [2025-09-09 15:50:04][350274356963121][344 ms][DEBUG] START check_boot_completed [2025-09-09 15:50:04][350274356963121][344 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:50:04][350274356963121][376 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:50:04][350274356963121][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:50:04][350274356963121][423 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:50:04][350274356963121][423 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 15:50:04][350274356963121][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:50:05][350274356963121][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 842\nsuccessfulTxPacketsPerSecond: 7.8287380775664746\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 1.555897828087546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 876\nsuccessfulRxPacketsPerSecond: 8.174402738762579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:50:05][350274356963121][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:50:05][350274356963121][923 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.781/257.781/257.781/0.000 ms\n [2025-09-09 15:50:05][350274356963121][923 ms][DEBUG] check_internet: online [2025-09-09 15:50:05][350274356963121][923 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:50:05][350274356963121][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356963121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8126\"}'\'' -e'"" [2025-09-09 15:50:05][350274356963121][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:50:05][350274356963121][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356963121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8126\"}'\'' -e'"" [2025-09-09 15:50:12][350274356963121][8264 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f3bb56d-f1c7-4afb-af1a-23576f4035b6","id":"QR_2f3bb56d-f1c7-4afb-af1a-23576f4035b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:50:12][350274356963121][8421 ms][DEBUG] proc_open done in 7497 ms; code=255; res.len=3343 [2025-09-09 15:50:12][350274356963121][8421 ms][DEBUG] END runCmdUntilRes#1 in 7498 ms [2025-09-09 15:50:12][350274356963121][8421 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:50:16][350274356963121][0 ms][INFO] === Request start === [2025-09-09 15:50:16][350274356963121][1 ms][DEBUG] START check_scloud [2025-09-09 15:50:16][350274356963121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:50:16][350274356963121][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 29000 24419 23713532 82568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:50:16][350274356963121][285 ms][DEBUG] targetPkg: running [2025-09-09 15:50:16][350274356963121][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-09 15:50:16][350274356963121][285 ms][DEBUG] START check_boot_completed [2025-09-09 15:50:16][350274356963121][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:50:16][350274356963121][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:50:16][350274356963121][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:50:16][350274356963121][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 15:50:16][350274356963121][380 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 15:50:16][350274356963121][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:50:16][350274356963121][503 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 842\nsuccessfulTxPacketsPerSecond: 7.8287380775664746\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 1.555897828087546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 876\nsuccessfulRxPacketsPerSecond: 8.174402738762579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:50:16][350274356963121][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:50:17][350274356963121][909 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.167/261.167/261.167/0.000 ms\n [2025-09-09 15:50:17][350274356963121][909 ms][DEBUG] check_internet: online [2025-09-09 15:50:17][350274356963121][910 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:50:17][350274356963121][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356963121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2323\"}'\'' -e'"" [2025-09-09 15:50:17][350274356963121][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:50:17][350274356963121][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356963121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2323\"}'\'' -e'"" [2025-09-09 15:50:21][350274356963121][4939 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b01c6bad-9f33-44a2-897d-ffc08ef038ed","id":"QR_b01c6bad-9f33-44a2-897d-ffc08ef038ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:50:21][350274356963121][5096 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-09 15:50:21][350274356963121][5096 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-09 15:50:21][350274356963121][5096 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:54:07][352060487049122][1 ms][INFO] === Request start === [2025-09-09 15:54:07][352060487049122][1 ms][DEBUG] START check_scloud [2025-09-09 15:54:07][352060487049122][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:54:07][352060487049122][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 29000 24419 23810940 98276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:54:07][352060487049122][313 ms][DEBUG] targetPkg: running [2025-09-09 15:54:07][352060487049122][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 15:54:07][352060487049122][313 ms][DEBUG] START check_boot_completed [2025-09-09 15:54:07][352060487049122][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:54:07][352060487049122][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 15:54:07][352060487049122][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:54:07][352060487049122][392 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 15:54:07][352060487049122][392 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 15:54:07][352060487049122][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 15:54:07][352060487049122][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1242\nsuccessfulTxPacketsPerSecond: 1.667702031678\nretriedTxPackets: 222\nretriedTxPacketsPerSecond: 0.30018636570204\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1232\nsuccessfulRxPacketsPerSecond: 1.4842548081934201\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 15:54:07][352060487049122][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 15:54:09][352060487049122][1923 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.966/300.966/300.966/0.000 ms\n [2025-09-09 15:54:09][352060487049122][1923 ms][DEBUG] check_internet: online [2025-09-09 15:54:09][352060487049122][1923 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:54:09][352060487049122][1923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487049122\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5433\"}'\'' -e'"" [2025-09-09 15:54:09][352060487049122][1923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:54:09][352060487049122][1923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487049122\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5433\"}'\'' -e'"" [2025-09-09 15:54:13][352060487049122][6343 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c027321-0f7e-447d-80ab-d42a12936c71","id":"QR_6c027321-0f7e-447d-80ab-d42a12936c71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:54:13][352060487049122][6499 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-09 15:54:13][352060487049122][6500 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-09 15:54:13][352060487049122][6500 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:55:03][356191107785351][0 ms][INFO] === Request start === [2025-09-09 15:55:03][356191107785351][1 ms][DEBUG] START check_scloud [2025-09-09 15:55:03][356191107785351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:55:03][356191107785351][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 29000 24419 23953376 109520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:55:03][356191107785351][330 ms][DEBUG] targetPkg: running [2025-09-09 15:55:03][356191107785351][330 ms][DEBUG] END check_scloud in 330 ms [2025-09-09 15:55:03][356191107785351][330 ms][DEBUG] START check_boot_completed [2025-09-09 15:55:03][356191107785351][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:55:03][356191107785351][377 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:55:03][356191107785351][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:55:03][356191107785351][439 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:55:03][356191107785351][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:55:03][356191107785351][440 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:55:03][356191107785351][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356191107785351\",\"model\":\"SM-G970F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1818\"}'\'' -e'"" [2025-09-09 15:55:03][356191107785351][440 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:55:03][356191107785351][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356191107785351\",\"model\":\"SM-G970F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1818\"}'\'' -e'"" [2025-09-09 15:55:08][356191107785351][5204 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_359bae2a-1e76-41a9-8688-ebfd3146b62c","id":"QR_359bae2a-1e76-41a9-8688-ebfd3146b62c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:55:08][356191107785351][5360 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-09 15:55:08][356191107785351][5360 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-09 15:55:08][356191107785351][5360 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:55:10][356191107785351][0 ms][INFO] === Request start === [2025-09-09 15:55:10][356191107785351][1 ms][DEBUG] START check_scloud [2025-09-09 15:55:10][356191107785351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:55:11][356191107785351][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 29000 24419 24093864 120964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:55:11][356191107785351][314 ms][DEBUG] targetPkg: running [2025-09-09 15:55:11][356191107785351][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 15:55:11][356191107785351][314 ms][DEBUG] START check_boot_completed [2025-09-09 15:55:11][356191107785351][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:55:11][356191107785351][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:55:11][356191107785351][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:55:11][356191107785351][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:55:11][356191107785351][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:55:11][356191107785351][408 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:55:11][356191107785351][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356191107785351\",\"model\":\"SM-G970F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7991\"}'\'' -e'"" [2025-09-09 15:55:11][356191107785351][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:55:11][356191107785351][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356191107785351\",\"model\":\"SM-G970F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7991\"}'\'' -e'"" [2025-09-09 15:55:16][356191107785351][5531 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe66c363-2857-440c-9917-a83116fecc0d","id":"QR_fe66c363-2857-440c-9917-a83116fecc0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:55:16][356191107785351][5688 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-09 15:55:16][356191107785351][5688 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-09 15:55:16][356191107785351][5688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:55:22][358230100768069][0 ms][INFO] === Request start === [2025-09-09 15:55:22][358230100768069][1 ms][DEBUG] START check_scloud [2025-09-09 15:55:22][358230100768069][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:55:22][358230100768069][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 29000 24419 24258864 131784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:55:22][358230100768069][274 ms][DEBUG] targetPkg: running [2025-09-09 15:55:22][358230100768069][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 15:55:22][358230100768069][274 ms][DEBUG] START check_boot_completed [2025-09-09 15:55:22][358230100768069][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:55:22][358230100768069][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:55:22][358230100768069][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:55:22][358230100768069][399 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 15:55:22][358230100768069][399 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 15:55:22][358230100768069][399 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:55:22][358230100768069][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230100768069\",\"model\":\"SM-T510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M914E0JW\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7454\"}'\'' -e'"" [2025-09-09 15:55:22][358230100768069][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:55:22][358230100768069][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230100768069\",\"model\":\"SM-T510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M914E0JW\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7454\"}'\'' -e'"" [2025-09-09 15:55:25][358230100768069][3789 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a016abf6-378b-4a9f-9034-82541f52a285","id":"QR_a016abf6-378b-4a9f-9034-82541f52a285","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:55:26][358230100768069][3945 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-09 15:55:26][358230100768069][3945 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 15:55:26][358230100768069][3945 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:57:03][355497598051505][1 ms][INFO] === Request start === [2025-09-09 15:57:03][355497598051505][1 ms][DEBUG] START check_scloud [2025-09-09 15:57:03][355497598051505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:57:04][355497598051505][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 29000 24419 24391116 142912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:57:04][355497598051505][327 ms][DEBUG] targetPkg: running [2025-09-09 15:57:04][355497598051505][328 ms][DEBUG] END check_scloud in 326 ms [2025-09-09 15:57:04][355497598051505][328 ms][DEBUG] START check_boot_completed [2025-09-09 15:57:04][355497598051505][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:57:04][355497598051505][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:57:04][355497598051505][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:57:04][355497598051505][436 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:57:04][355497598051505][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:57:04][355497598051505][437 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:57:04][355497598051505][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497598051505\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8385\"}'\'' -e'"" [2025-09-09 15:57:04][355497598051505][437 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:57:04][355497598051505][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497598051505\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8385\"}'\'' -e'"" [2025-09-09 15:57:08][355497598051505][5154 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_065b919d-f994-4381-8d52-087fbeefd45f","id":"QR_065b919d-f994-4381-8d52-087fbeefd45f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:57:09][355497598051505][5310 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-09 15:57:09][355497598051505][5310 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-09 15:57:09][355497598051505][5310 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:57:11][355497598051505][0 ms][INFO] === Request start === [2025-09-09 15:57:11][355497598051505][1 ms][DEBUG] START check_scloud [2025-09-09 15:57:11][355497598051505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:57:11][355497598051505][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 29000 24419 24556116 153648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:57:11][355497598051505][312 ms][DEBUG] targetPkg: running [2025-09-09 15:57:11][355497598051505][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 15:57:11][355497598051505][312 ms][DEBUG] START check_boot_completed [2025-09-09 15:57:11][355497598051505][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:57:11][355497598051505][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:57:11][355497598051505][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:57:11][355497598051505][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:57:11][355497598051505][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 15:57:11][355497598051505][405 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:57:11][355497598051505][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497598051505\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4080\"}'\'' -e'"" [2025-09-09 15:57:11][355497598051505][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:57:11][355497598051505][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497598051505\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4080\"}'\'' -e'"" [2025-09-09 15:57:16][355497598051505][5264 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69877678-d023-4c64-adc2-916297d8b230","id":"QR_69877678-d023-4c64-adc2-916297d8b230","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:57:16][355497598051505][5420 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-09 15:57:16][355497598051505][5420 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-09 15:57:16][355497598051505][5420 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:59:03][352502218859493][0 ms][INFO] === Request start === [2025-09-09 15:59:03][352502218859493][1 ms][DEBUG] START check_scloud [2025-09-09 15:59:03][352502218859493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:59:04][352502218859493][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 29000 24419 24700692 165056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:59:04][352502218859493][298 ms][DEBUG] targetPkg: running [2025-09-09 15:59:04][352502218859493][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 15:59:04][352502218859493][298 ms][DEBUG] START check_boot_completed [2025-09-09 15:59:04][352502218859493][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:59:04][352502218859493][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:59:04][352502218859493][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:59:04][352502218859493][408 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 15:59:04][352502218859493][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:59:04][352502218859493][408 ms][DEBUG] rawBody.length=1150 [2025-09-09 15:59:04][352502218859493][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502218859493\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3578\"}'\'' -e'"" [2025-09-09 15:59:04][352502218859493][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:59:04][352502218859493][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502218859493\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3578\"}'\'' -e'"" [2025-09-09 15:59:09][352502218859493][5125 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36e4b200-8d96-4848-a54e-465f84e44475","id":"QR_36e4b200-8d96-4848-a54e-465f84e44475","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:59:09][352502218859493][5281 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-09 15:59:09][352502218859493][5281 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-09 15:59:09][352502218859493][5281 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 15:59:11][352502218859493][1 ms][INFO] === Request start === [2025-09-09 15:59:11][352502218859493][1 ms][DEBUG] START check_scloud [2025-09-09 15:59:11][352502218859493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 15:59:11][352502218859493][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 29000 24419 24826908 176056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 15:59:11][352502218859493][309 ms][DEBUG] targetPkg: running [2025-09-09 15:59:11][352502218859493][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 15:59:11][352502218859493][309 ms][DEBUG] START check_boot_completed [2025-09-09 15:59:11][352502218859493][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:59:11][352502218859493][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 15:59:11][352502218859493][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:59:11][352502218859493][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 15:59:11][352502218859493][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 15:59:11][352502218859493][418 ms][DEBUG] rawBody.length=1160 [2025-09-09 15:59:11][352502218859493][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502218859493\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9990\"}'\'' -e'"" [2025-09-09 15:59:11][352502218859493][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 15:59:11][352502218859493][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502218859493\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9990\"}'\'' -e'"" [2025-09-09 15:59:16][352502218859493][4620 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 15:59:16][352502218859493][4620 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-09 15:59:16][352502218859493][4621 ms][WARN] Detected error: Process with pid 29000 either refused to load frida-agent, or terminated during injectionProcess with pid 29000 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 15:59:16][352502218859493][4621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 15:59:16][352502218859493][4917 ms][DEBUG] SU: done in 296 ms; outsystem 24718 24419 12388760 270040 ep_poll 0 S system_server\n [2025-09-09 15:59:16][352502218859493][4917 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 15:59:16][352502218859493][5057 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 15:59:16][352502218859493][5057 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 15:59:16][352502218859493][5058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 15:59:16][352502218859493][5245 ms][DEBUG] SU: done in 187 ms; out [2025-09-09 15:59:16][352502218859493][5245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 15:59:16][352502218859493][5417 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 15:59:18][352502218859493][7432 ms][DEBUG] START check_boot_completed [2025-09-09 15:59:18][352502218859493][7432 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 15:59:19][352502218859493][7479 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 15:59:19][352502218859493][7479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 15:59:19][352502218859493][7526 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 15:59:19][352502218859493][7526 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 15:59:22][352502218859493][10540 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 15:59:22][352502218859493][10540 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502218859493\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9990\"}'\'' -e'"" [2025-09-09 15:59:26][352502218859493][15414 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac1d49f3-b4af-4a5d-b9c2-c115e20b0396","id":"QR_ac1d49f3-b4af-4a5d-b9c2-c115e20b0396","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 15:59:27][352502218859493][15571 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-09 15:59:27][352502218859493][15571 ms][DEBUG] END runCmdUntilRes#2 in 5030 ms [2025-09-09 15:59:27][352502218859493][15571 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:01:05][353313362221491][0 ms][INFO] === Request start === [2025-09-09 16:01:05][353313362221491][1 ms][DEBUG] START check_scloud [2025-09-09 16:01:05][353313362221491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:01:05][353313362221491][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 6066 24419 23418068 127000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:01:05][353313362221491][266 ms][DEBUG] targetPkg: running [2025-09-09 16:01:05][353313362221491][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 16:01:05][353313362221491][266 ms][DEBUG] START check_boot_completed [2025-09-09 16:01:05][353313362221491][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:01:05][353313362221491][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:01:05][353313362221491][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:01:05][353313362221491][375 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:01:05][353313362221491][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:01:05][353313362221491][375 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:01:05][353313362221491][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313362221491\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8361\"}'\'' -e'"" [2025-09-09 16:01:05][353313362221491][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:01:05][353313362221491][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313362221491\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8361\"}'\'' -e'"" [2025-09-09 16:01:11][353313362221491][6217 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbbec2df-2902-424d-8c9f-ef937a9744bc","id":"QR_fbbec2df-2902-424d-8c9f-ef937a9744bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:01:11][353313362221491][6373 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-09 16:01:11][353313362221491][6373 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-09 16:01:11][353313362221491][6373 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:03:03][357435840876012][1 ms][INFO] === Request start === [2025-09-09 16:03:03][357435840876012][1 ms][DEBUG] START check_scloud [2025-09-09 16:03:03][357435840876012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:03:03][357435840876012][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 6066 24419 23527660 138612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:03:03][357435840876012][329 ms][DEBUG] targetPkg: running [2025-09-09 16:03:03][357435840876012][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-09 16:03:03][357435840876012][329 ms][DEBUG] START check_boot_completed [2025-09-09 16:03:03][357435840876012][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:03:03][357435840876012][376 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:03:03][357435840876012][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:03:03][357435840876012][440 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 16:03:03][357435840876012][440 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 16:03:03][357435840876012][440 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:03:03][357435840876012][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840876012\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1283\"}'\'' -e'"" [2025-09-09 16:03:03][357435840876012][440 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:03:03][357435840876012][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840876012\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1283\"}'\'' -e'"" [2025-09-09 16:03:08][357435840876012][5109 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a75969dd-a668-4d95-9f45-f21421b1c5d1","id":"QR_a75969dd-a668-4d95-9f45-f21421b1c5d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:03:08][357435840876012][5265 ms][DEBUG] proc_open done in 4825 ms; code=255; res.len=3343 [2025-09-09 16:03:08][357435840876012][5265 ms][DEBUG] END runCmdUntilRes#1 in 4825 ms [2025-09-09 16:03:08][357435840876012][5265 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:03:11][357435840876012][0 ms][INFO] === Request start === [2025-09-09 16:03:11][357435840876012][1 ms][DEBUG] START check_scloud [2025-09-09 16:03:11][357435840876012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:03:11][357435840876012][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 6066 24419 23708148 144572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:03:11][357435840876012][328 ms][DEBUG] targetPkg: running [2025-09-09 16:03:11][357435840876012][328 ms][DEBUG] END check_scloud in 328 ms [2025-09-09 16:03:11][357435840876012][328 ms][DEBUG] START check_boot_completed [2025-09-09 16:03:11][357435840876012][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:03:11][357435840876012][375 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:03:11][357435840876012][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:03:11][357435840876012][424 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 16:03:11][357435840876012][424 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 16:03:11][357435840876012][424 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:03:11][357435840876012][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840876012\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6833\"}'\'' -e'"" [2025-09-09 16:03:11][357435840876012][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:03:11][357435840876012][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840876012\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6833\"}'\'' -e'"" [2025-09-09 16:03:16][357435840876012][5436 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db6f5e31-ba7f-4260-b416-4ccace36b033","id":"QR_db6f5e31-ba7f-4260-b416-4ccace36b033","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:03:16][357435840876012][5592 ms][DEBUG] proc_open done in 5168 ms; code=255; res.len=3343 [2025-09-09 16:03:16][357435840876012][5592 ms][DEBUG] END runCmdUntilRes#1 in 5168 ms [2025-09-09 16:03:16][357435840876012][5592 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:04:04][350792529866970][0 ms][INFO] === Request start === [2025-09-09 16:04:04][350792529866970][1 ms][DEBUG] START check_scloud [2025-09-09 16:04:04][350792529866970][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:04:05][350792529866970][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 6066 24419 23856756 154528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:04:05][350792529866970][305 ms][DEBUG] targetPkg: running [2025-09-09 16:04:05][350792529866970][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 16:04:05][350792529866970][305 ms][DEBUG] START check_boot_completed [2025-09-09 16:04:05][350792529866970][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:04:05][350792529866970][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:04:05][350792529866970][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:04:05][350792529866970][429 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 16:04:05][350792529866970][429 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 16:04:05][350792529866970][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:04:05][350792529866970][554 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1678\nsuccessfulTxPacketsPerSecond: 0.5230045070682521\nretriedTxPackets: 339\nretriedTxPacketsPerSecond: 0.12305988401605931\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1605\nsuccessfulRxPacketsPerSecond: 0.46916580781122613\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:04:05][350792529866970][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:04:06][350792529866970][2085 ms][DEBUG] SU: done in 1531 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.259/299.259/299.259/0.000 ms\n [2025-09-09 16:04:06][350792529866970][2085 ms][DEBUG] check_internet: online [2025-09-09 16:04:06][350792529866970][2085 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:04:06][350792529866970][2086 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529866970\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5222\"}'\'' -e'"" [2025-09-09 16:04:06][350792529866970][2086 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:04:06][350792529866970][2086 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529866970\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5222\"}'\'' -e'"" [2025-09-09 16:04:11][350792529866970][6615 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2cc9bdf2-bcb8-466e-9470-d4eed86b39bc","id":"QR_2cc9bdf2-bcb8-466e-9470-d4eed86b39bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:04:11][350792529866970][6771 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 16:04:11][350792529866970][6771 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 16:04:11][350792529866970][6771 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:04:15][350792529866970][0 ms][INFO] === Request start === [2025-09-09 16:04:15][350792529866970][1 ms][DEBUG] START check_scloud [2025-09-09 16:04:15][350792529866970][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:04:15][350792529866970][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 6066 24419 23993020 157976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:04:15][350792529866970][316 ms][DEBUG] targetPkg: running [2025-09-09 16:04:15][350792529866970][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 16:04:15][350792529866970][316 ms][DEBUG] START check_boot_completed [2025-09-09 16:04:15][350792529866970][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:04:15][350792529866970][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:04:15][350792529866970][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:04:15][350792529866970][410 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 16:04:15][350792529866970][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 16:04:15][350792529866970][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:04:15][350792529866970][534 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1678\nsuccessfulTxPacketsPerSecond: 0.5230045070682521\nretriedTxPackets: 339\nretriedTxPacketsPerSecond: 0.12305988401605931\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1605\nsuccessfulRxPacketsPerSecond: 0.46916580781122613\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:04:15][350792529866970][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:04:16][350792529866970][956 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.535/313.535/313.535/0.000 ms\n [2025-09-09 16:04:16][350792529866970][956 ms][DEBUG] check_internet: online [2025-09-09 16:04:16][350792529866970][956 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:04:16][350792529866970][956 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529866970\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9616\"}'\'' -e'"" [2025-09-09 16:04:16][350792529866970][956 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:04:16][350792529866970][956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529866970\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9616\"}'\'' -e'"" [2025-09-09 16:04:19][350792529866970][4642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d375ec3-3832-4cf8-af24-8ce1741a1507","id":"QR_9d375ec3-3832-4cf8-af24-8ce1741a1507","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:04:19][350792529866970][4799 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-09 16:04:19][350792529866970][4799 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-09 16:04:19][350792529866970][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:05:03][355490894263627][0 ms][INFO] === Request start === [2025-09-09 16:05:03][355490894263627][1 ms][DEBUG] START check_scloud [2025-09-09 16:05:03][355490894263627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:05:03][355490894263627][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 6066 24419 24106748 165628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:05:03][355490894263627][308 ms][DEBUG] targetPkg: running [2025-09-09 16:05:03][355490894263627][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 16:05:03][355490894263627][308 ms][DEBUG] START check_boot_completed [2025-09-09 16:05:03][355490894263627][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:05:03][355490894263627][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:05:03][355490894263627][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:05:03][355490894263627][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:05:03][355490894263627][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:05:03][355490894263627][386 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:05:03][355490894263627][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894263627\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4124\"}'\'' -e'"" [2025-09-09 16:05:03][355490894263627][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:05:03][355490894263627][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894263627\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4124\"}'\'' -e'"" [2025-09-09 16:05:06][355490894263627][3760 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39b0bc52-f89c-48b3-8d93-06e9c4214a7e","id":"QR_39b0bc52-f89c-48b3-8d93-06e9c4214a7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:05:07][355490894263627][3917 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 16:05:07][355490894263627][3917 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 16:05:07][355490894263627][3917 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:05:09][355490894263627][1 ms][INFO] === Request start === [2025-09-09 16:05:09][355490894263627][1 ms][DEBUG] START check_scloud [2025-09-09 16:05:09][355490894263627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:05:09][355490894263627][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 6066 24419 24284100 176544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:05:09][355490894263627][256 ms][DEBUG] targetPkg: running [2025-09-09 16:05:09][355490894263627][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-09 16:05:09][355490894263627][256 ms][DEBUG] START check_boot_completed [2025-09-09 16:05:09][355490894263627][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:05:09][355490894263627][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:05:09][355490894263627][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:05:09][355490894263627][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:05:09][355490894263627][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:05:09][355490894263627][349 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:05:09][355490894263627][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894263627\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7616\"}'\'' -e'"" [2025-09-09 16:05:09][355490894263627][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:05:09][355490894263627][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894263627\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7616\"}'\'' -e'"" [2025-09-09 16:05:15][355490894263627][6239 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6f6b31f-dba8-4564-b29d-4617d234766a","id":"QR_d6f6b31f-dba8-4564-b29d-4617d234766a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:05:15][355490894263627][6395 ms][DEBUG] proc_open done in 6045 ms; code=255; res.len=3343 [2025-09-09 16:05:15][355490894263627][6395 ms][DEBUG] END runCmdUntilRes#1 in 6045 ms [2025-09-09 16:05:15][355490894263627][6395 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:11:04][350792520898238][1 ms][INFO] === Request start === [2025-09-09 16:11:04][350792520898238][1 ms][DEBUG] START check_scloud [2025-09-09 16:11:04][350792520898238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:11:04][350792520898238][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 6066 24419 24397956 181400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:11:04][350792520898238][249 ms][DEBUG] targetPkg: running [2025-09-09 16:11:04][350792520898238][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-09 16:11:04][350792520898238][249 ms][DEBUG] START check_boot_completed [2025-09-09 16:11:04][350792520898238][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:11:04][350792520898238][280 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:11:04][350792520898238][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:11:05][350792520898238][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:11:05][350792520898238][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:11:05][350792520898238][327 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:11:05][350792520898238][327 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792520898238\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6827\"}'\'' -e'"" [2025-09-09 16:11:05][350792520898238][327 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:11:05][350792520898238][327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792520898238\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6827\"}'\'' -e'"" [2025-09-09 16:11:10][350792520898238][6091 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb155d16-3607-4f6a-850b-08c978b0faff","id":"QR_eb155d16-3607-4f6a-850b-08c978b0faff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:11:10][350792520898238][6247 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-09 16:11:10][350792520898238][6247 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-09 16:11:10][350792520898238][6247 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:11:14][350792520898238][0 ms][INFO] === Request start === [2025-09-09 16:11:14][350792520898238][1 ms][DEBUG] START check_scloud [2025-09-09 16:11:14][350792520898238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:11:14][350792520898238][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 6066 24419 24523268 191708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:11:14][350792520898238][320 ms][DEBUG] targetPkg: running [2025-09-09 16:11:14][350792520898238][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-09 16:11:14][350792520898238][320 ms][DEBUG] START check_boot_completed [2025-09-09 16:11:14][350792520898238][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:11:14][350792520898238][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:11:14][350792520898238][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:11:14][350792520898238][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:11:14][350792520898238][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:11:14][350792520898238][429 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:11:14][350792520898238][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792520898238\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3110\"}'\'' -e'"" [2025-09-09 16:11:14][350792520898238][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:11:14][350792520898238][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792520898238\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3110\"}'\'' -e'"" [2025-09-09 16:11:18][350792520898238][3975 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_508c2ce5-d9d0-4446-a4f1-1c5448e1c84d","id":"QR_508c2ce5-d9d0-4446-a4f1-1c5448e1c84d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:11:18][350792520898238][4131 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-09 16:11:18][350792520898238][4132 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-09 16:11:18][350792520898238][4132 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:11:20][355808988496755][0 ms][INFO] === Request start === [2025-09-09 16:11:20][355808988496755][1 ms][DEBUG] START check_scloud [2025-09-09 16:11:20][355808988496755][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:11:20][355808988496755][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 6066 24419 24652940 203412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:11:20][355808988496755][268 ms][DEBUG] targetPkg: running [2025-09-09 16:11:20][355808988496755][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 16:11:20][355808988496755][268 ms][DEBUG] START check_boot_completed [2025-09-09 16:11:20][355808988496755][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:11:20][355808988496755][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:11:20][355808988496755][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:11:20][355808988496755][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:11:20][355808988496755][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:11:20][355808988496755][377 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:11:20][355808988496755][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808988496755\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2216\"}'\'' -e'"" [2025-09-09 16:11:20][355808988496755][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:11:20][355808988496755][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808988496755\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2216\"}'\'' -e'"" [2025-09-09 16:11:24][355808988496755][3704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c0da9b0-da10-4417-a36c-8924bc6d1810","id":"QR_8c0da9b0-da10-4417-a36c-8924bc6d1810","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:11:24][355808988496755][3861 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-09 16:11:24][355808988496755][3861 ms][DEBUG] END runCmdUntilRes#1 in 3484 ms [2025-09-09 16:11:24][355808988496755][3861 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:11:26][355808988496755][1 ms][INFO] === Request start === [2025-09-09 16:11:26][355808988496755][1 ms][DEBUG] START check_scloud [2025-09-09 16:11:26][355808988496755][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:11:26][355808988496755][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 6066 24419 24791280 214004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:11:26][355808988496755][250 ms][DEBUG] targetPkg: running [2025-09-09 16:11:26][355808988496755][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-09 16:11:26][355808988496755][250 ms][DEBUG] START check_boot_completed [2025-09-09 16:11:26][355808988496755][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:11:26][355808988496755][281 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:11:26][355808988496755][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:11:26][355808988496755][344 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:11:26][355808988496755][344 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:11:26][355808988496755][344 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:11:26][355808988496755][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808988496755\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7642\"}'\'' -e'"" [2025-09-09 16:11:26][355808988496755][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:11:26][355808988496755][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808988496755\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7642\"}'\'' -e'"" [2025-09-09 16:11:30][355808988496755][4202 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 16:11:30][355808988496755][4202 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 16:11:30][355808988496755][4202 ms][WARN] Detected error: Process with pid 6066 either refused to load frida-agent, or terminated during injectionProcess with pid 6066 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 16:11:30][355808988496755][4202 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 16:11:31][355808988496755][4484 ms][DEBUG] SU: done in 281 ms; outsystem 24718 24419 12407316 213672 ep_poll 0 S system_server\n [2025-09-09 16:11:31][355808988496755][4484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 16:11:31][355808988496755][4624 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 16:11:31][355808988496755][4624 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 16:11:31][355808988496755][4624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 16:11:31][355808988496755][4749 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 16:11:31][355808988496755][4749 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 16:11:31][355808988496755][4952 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 16:11:33][355808988496755][6967 ms][DEBUG] START check_boot_completed [2025-09-09 16:11:33][355808988496755][6967 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:11:33][355808988496755][7014 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:11:33][355808988496755][7014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:11:33][355808988496755][7061 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:11:33][355808988496755][7061 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:11:36][355808988496755][10076 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 16:11:36][355808988496755][10076 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808988496755\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7642\"}'\'' -e'"" [2025-09-09 16:11:41][355808988496755][14778 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28dd24cd-1ef7-45a5-b0d9-af68cbe78e65","id":"QR_28dd24cd-1ef7-45a5-b0d9-af68cbe78e65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:11:41][355808988496755][14934 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-09 16:11:41][355808988496755][14934 ms][DEBUG] END runCmdUntilRes#2 in 4858 ms [2025-09-09 16:11:41][355808988496755][14934 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:12:04][350960050688804][1 ms][INFO] === Request start === [2025-09-09 16:12:04][350960050688804][1 ms][DEBUG] START check_scloud [2025-09-09 16:12:04][350960050688804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:12:04][350960050688804][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 8122 24419 23399928 127300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:12:04][350960050688804][311 ms][DEBUG] targetPkg: running [2025-09-09 16:12:04][350960050688804][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 16:12:04][350960050688804][311 ms][DEBUG] START check_boot_completed [2025-09-09 16:12:04][350960050688804][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:12:04][350960050688804][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:12:04][350960050688804][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:12:04][350960050688804][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:12:04][350960050688804][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:12:04][350960050688804][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:12:04][350960050688804][560 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2051\nsuccessfulTxPacketsPerSecond: 0.6070802907047335\nretriedTxPackets: 442\nretriedTxPacketsPerSecond: 0.19513295058366434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.4726553691915425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:12:04][350960050688804][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:12:05][350960050688804][1592 ms][DEBUG] SU: done in 1031 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.312/219.312/219.312/0.000 ms\n [2025-09-09 16:12:05][350960050688804][1592 ms][DEBUG] check_internet: online [2025-09-09 16:12:05][350960050688804][1592 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:12:05][350960050688804][1592 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350960050688804\",\"model\":\"SM-S901J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7150\"}'\'' -e'"" [2025-09-09 16:12:05][350960050688804][1592 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:12:05][350960050688804][1592 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350960050688804\",\"model\":\"SM-S901J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7150\"}'\'' -e'"" [2025-09-09 16:12:08][350960050688804][4872 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e2e2446-987f-47d5-850f-b243be8d794c","id":"QR_0e2e2446-987f-47d5-850f-b243be8d794c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:12:09][350960050688804][5028 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-09 16:12:09][350960050688804][5028 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-09 16:12:09][350960050688804][5028 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:12:11][350960050688804][0 ms][INFO] === Request start === [2025-09-09 16:12:11][350960050688804][1 ms][DEBUG] START check_scloud [2025-09-09 16:12:11][350960050688804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:12:11][350960050688804][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 8122 24419 23577344 138124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:12:11][350960050688804][311 ms][DEBUG] targetPkg: running [2025-09-09 16:12:11][350960050688804][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 16:12:11][350960050688804][311 ms][DEBUG] START check_boot_completed [2025-09-09 16:12:11][350960050688804][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:12:11][350960050688804][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:12:11][350960050688804][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:12:11][350960050688804][391 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 16:12:11][350960050688804][391 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 16:12:11][350960050688804][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:12:11][350960050688804][499 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2051\nsuccessfulTxPacketsPerSecond: 0.6070802907047335\nretriedTxPackets: 442\nretriedTxPacketsPerSecond: 0.19513295058366434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.4726553691915425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:12:11][350960050688804][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:12:12][350960050688804][936 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.167/341.167/341.167/0.000 ms\n [2025-09-09 16:12:12][350960050688804][936 ms][DEBUG] check_internet: online [2025-09-09 16:12:12][350960050688804][936 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:12:12][350960050688804][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350960050688804\",\"model\":\"SM-S901J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2343\"}'\'' -e'"" [2025-09-09 16:12:12][350960050688804][937 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:12:12][350960050688804][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350960050688804\",\"model\":\"SM-S901J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2343\"}'\'' -e'"" [2025-09-09 16:12:17][350960050688804][5794 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b98e7ac-7113-46e7-9a1d-425f8e3a5141","id":"QR_4b98e7ac-7113-46e7-9a1d-425f8e3a5141","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:12:17][350960050688804][5951 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-09 16:12:17][350960050688804][5951 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-09 16:12:17][350960050688804][5951 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:13:03][351017184471240][0 ms][INFO] === Request start === [2025-09-09 16:13:03][351017184471240][1 ms][DEBUG] START check_scloud [2025-09-09 16:13:03][351017184471240][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:13:03][351017184471240][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 8122 24419 23670464 149900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:13:03][351017184471240][318 ms][DEBUG] targetPkg: running [2025-09-09 16:13:03][351017184471240][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 16:13:03][351017184471240][318 ms][DEBUG] START check_boot_completed [2025-09-09 16:13:03][351017184471240][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:13:03][351017184471240][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:13:03][351017184471240][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:13:03][351017184471240][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:13:03][351017184471240][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:13:03][351017184471240][396 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:13:03][351017184471240][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351017184471240\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4394\"}'\'' -e'"" [2025-09-09 16:13:03][351017184471240][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:13:03][351017184471240][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351017184471240\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4394\"}'\'' -e'"" [2025-09-09 16:13:07][351017184471240][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_498ca30e-f095-4a27-8114-e5f0671bb8f9","id":"QR_498ca30e-f095-4a27-8114-e5f0671bb8f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:13:07][351017184471240][4879 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 16:13:07][351017184471240][4879 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 16:13:07][351017184471240][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:13:10][351017184471240][0 ms][INFO] === Request start === [2025-09-09 16:13:10][351017184471240][0 ms][DEBUG] START check_scloud [2025-09-09 16:13:10][351017184471240][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:13:10][351017184471240][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 8122 24419 23855080 160932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:13:10][351017184471240][310 ms][DEBUG] targetPkg: running [2025-09-09 16:13:10][351017184471240][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 16:13:10][351017184471240][310 ms][DEBUG] START check_boot_completed [2025-09-09 16:13:10][351017184471240][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:13:10][351017184471240][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:13:10][351017184471240][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:13:10][351017184471240][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:13:10][351017184471240][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:13:10][351017184471240][388 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:13:10][351017184471240][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351017184471240\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5265\"}'\'' -e'"" [2025-09-09 16:13:10][351017184471240][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:13:10][351017184471240][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351017184471240\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5265\"}'\'' -e'"" [2025-09-09 16:13:14][351017184471240][4559 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d790ddc2-df29-43f0-ba7d-a22b46d36c15","id":"QR_d790ddc2-df29-43f0-ba7d-a22b46d36c15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:13:14][351017184471240][4715 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-09-09 16:13:14][351017184471240][4715 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-09 16:13:14][351017184471240][4715 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:16:03][354230213018943][1 ms][INFO] === Request start === [2025-09-09 16:16:03][354230213018943][1 ms][DEBUG] START check_scloud [2025-09-09 16:16:03][354230213018943][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:16:03][354230213018943][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 8122 24419 23962232 172416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:16:03][354230213018943][258 ms][DEBUG] targetPkg: running [2025-09-09 16:16:03][354230213018943][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 16:16:03][354230213018943][258 ms][DEBUG] START check_boot_completed [2025-09-09 16:16:03][354230213018943][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:16:03][354230213018943][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:16:03][354230213018943][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:16:03][354230213018943][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:16:03][354230213018943][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:16:03][354230213018943][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:16:03][354230213018943][446 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2051\nsuccessfulTxPacketsPerSecond: 0.6070802907047335\nretriedTxPackets: 442\nretriedTxPacketsPerSecond: 0.19513295058366434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.4726553691915425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:16:03][354230213018943][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:16:04][354230213018943][836 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.794/288.794/288.794/0.000 ms\n [2025-09-09 16:16:04][354230213018943][836 ms][DEBUG] check_internet: online [2025-09-09 16:16:04][354230213018943][836 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:16:04][354230213018943][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230213018943\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9201\"}'\'' -e'"" [2025-09-09 16:16:04][354230213018943][836 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:16:04][354230213018943][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230213018943\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9201\"}'\'' -e'"" [2025-09-09 16:16:08][354230213018943][5288 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51fe37b5-8310-4787-96a2-0cc447c85460","id":"QR_51fe37b5-8310-4787-96a2-0cc447c85460","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:16:08][354230213018943][5444 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-09 16:16:08][354230213018943][5445 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-09 16:16:08][354230213018943][5445 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:16:11][354230213018943][0 ms][INFO] === Request start === [2025-09-09 16:16:11][354230213018943][1 ms][DEBUG] START check_scloud [2025-09-09 16:16:11][354230213018943][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:16:11][354230213018943][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 8122 24419 24108800 182500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:16:11][354230213018943][296 ms][DEBUG] targetPkg: running [2025-09-09 16:16:11][354230213018943][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 16:16:11][354230213018943][296 ms][DEBUG] START check_boot_completed [2025-09-09 16:16:11][354230213018943][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:16:11][354230213018943][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:16:11][354230213018943][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:16:11][354230213018943][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:16:11][354230213018943][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:16:11][354230213018943][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:16:11][354230213018943][546 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2051\nsuccessfulTxPacketsPerSecond: 0.6070802907047335\nretriedTxPackets: 442\nretriedTxPacketsPerSecond: 0.19513295058366434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.4726553691915425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:16:11][354230213018943][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:16:12][354230213018943][1014 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.848/318.848/318.848/0.000 ms\n [2025-09-09 16:16:12][354230213018943][1014 ms][DEBUG] check_internet: online [2025-09-09 16:16:12][354230213018943][1014 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:16:12][354230213018943][1015 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230213018943\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7798\"}'\'' -e'"" [2025-09-09 16:16:12][354230213018943][1015 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:16:12][354230213018943][1015 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230213018943\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7798\"}'\'' -e'"" [2025-09-09 16:16:17][354230213018943][6466 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f1945a4-acb6-47fe-980f-4bb8abca342d","id":"QR_1f1945a4-acb6-47fe-980f-4bb8abca342d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:16:17][354230213018943][6622 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-09 16:16:17][354230213018943][6622 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 16:16:17][354230213018943][6622 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:16:21][356019748514379][0 ms][INFO] === Request start === [2025-09-09 16:16:21][356019748514379][1 ms][DEBUG] START check_scloud [2025-09-09 16:16:21][356019748514379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:16:22][356019748514379][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 8122 24419 24265608 193404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:16:22][356019748514379][310 ms][DEBUG] targetPkg: running [2025-09-09 16:16:22][356019748514379][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 16:16:22][356019748514379][310 ms][DEBUG] START check_boot_completed [2025-09-09 16:16:22][356019748514379][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:16:22][356019748514379][355 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 16:16:22][356019748514379][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:16:22][356019748514379][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:16:22][356019748514379][402 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 16:16:22][356019748514379][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:16:22][356019748514379][512 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2051\nsuccessfulTxPacketsPerSecond: 0.6070802907047335\nretriedTxPackets: 442\nretriedTxPacketsPerSecond: 0.19513295058366434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.4726553691915425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:16:22][356019748514379][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:16:22][356019748514379][918 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.742/301.742/301.742/0.000 ms\n [2025-09-09 16:16:22][356019748514379][918 ms][DEBUG] check_internet: online [2025-09-09 16:16:22][356019748514379][918 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:16:22][356019748514379][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748514379\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3004\"}'\'' -e'"" [2025-09-09 16:16:22][356019748514379][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:16:22][356019748514379][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748514379\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3004\"}'\'' -e'"" [2025-09-09 16:16:26][356019748514379][4948 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_824020ed-7dd7-42da-a20e-a6fbff723c80","id":"QR_824020ed-7dd7-42da-a20e-a6fbff723c80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:16:27][356019748514379][5104 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-09 16:16:27][356019748514379][5104 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-09 16:16:27][356019748514379][5104 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:16:29][356019748514379][0 ms][INFO] === Request start === [2025-09-09 16:16:29][356019748514379][1 ms][DEBUG] START check_scloud [2025-09-09 16:16:29][356019748514379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:16:29][356019748514379][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 8122 24419 24376428 205392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:16:29][356019748514379][315 ms][DEBUG] targetPkg: running [2025-09-09 16:16:29][356019748514379][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 16:16:29][356019748514379][315 ms][DEBUG] START check_boot_completed [2025-09-09 16:16:29][356019748514379][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:16:29][356019748514379][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:16:29][356019748514379][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:16:29][356019748514379][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:16:29][356019748514379][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:16:29][356019748514379][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:16:29][356019748514379][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2051\nsuccessfulTxPacketsPerSecond: 0.6070802907047335\nretriedTxPackets: 442\nretriedTxPacketsPerSecond: 0.19513295058366434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.4726553691915425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:16:29][356019748514379][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:16:30][356019748514379][877 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.408/251.408/251.408/0.000 ms\n [2025-09-09 16:16:30][356019748514379][877 ms][DEBUG] check_internet: online [2025-09-09 16:16:30][356019748514379][877 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:16:30][356019748514379][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748514379\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7265\"}'\'' -e'"" [2025-09-09 16:16:30][356019748514379][877 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:16:30][356019748514379][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748514379\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7265\"}'\'' -e'"" [2025-09-09 16:16:34][356019748514379][5516 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52268970-312e-47cb-9781-7f8fc466de2e","id":"QR_52268970-312e-47cb-9781-7f8fc466de2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:16:35][356019748514379][5673 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 16:16:35][356019748514379][5673 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 16:16:35][356019748514379][5673 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:17:04][353454196278727][0 ms][INFO] === Request start === [2025-09-09 16:17:04][353454196278727][1 ms][DEBUG] START check_scloud [2025-09-09 16:17:04][353454196278727][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:17:05][353454196278727][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 8122 24419 24447240 216280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:17:05][353454196278727][261 ms][DEBUG] targetPkg: running [2025-09-09 16:17:05][353454196278727][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 16:17:05][353454196278727][261 ms][DEBUG] START check_boot_completed [2025-09-09 16:17:05][353454196278727][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:17:05][353454196278727][307 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:17:05][353454196278727][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:17:05][353454196278727][370 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:17:05][353454196278727][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:17:05][353454196278727][370 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:17:05][353454196278727][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454196278727\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8323\"}'\'' -e'"" [2025-09-09 16:17:05][353454196278727][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:17:05][353454196278727][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454196278727\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8323\"}'\'' -e'"" [2025-09-09 16:17:09][353454196278727][5087 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_163fe54c-351c-4e6a-ab02-11e5397b0b22","id":"QR_163fe54c-351c-4e6a-ab02-11e5397b0b22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:17:10][353454196278727][5244 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-09 16:17:10][353454196278727][5244 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-09 16:17:10][353454196278727][5244 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:17:14][351642485071686][0 ms][INFO] === Request start === [2025-09-09 16:17:14][351642485071686][1 ms][DEBUG] START check_scloud [2025-09-09 16:17:14][351642485071686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:17:14][351642485071686][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 8122 24419 24610320 228140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:17:14][351642485071686][311 ms][DEBUG] targetPkg: running [2025-09-09 16:17:14][351642485071686][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 16:17:14][351642485071686][311 ms][DEBUG] START check_boot_completed [2025-09-09 16:17:14][351642485071686][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:17:14][351642485071686][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:17:14][351642485071686][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:17:14][351642485071686][436 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 16:17:14][351642485071686][436 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 16:17:14][351642485071686][436 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:17:14][351642485071686][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485071686\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1564\"}'\'' -e'"" [2025-09-09 16:17:14][351642485071686][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:17:14][351642485071686][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485071686\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1564\"}'\'' -e'"" [2025-09-09 16:17:19][351642485071686][4716 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09fa4a6f-4039-4e13-91d1-4597c84d26a9","id":"QR_09fa4a6f-4039-4e13-91d1-4597c84d26a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:17:19][351642485071686][4872 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-09-09 16:17:19][351642485071686][4872 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-09 16:17:19][351642485071686][4872 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:17:21][359097843261705][0 ms][INFO] === Request start === [2025-09-09 16:17:21][359097843261705][1 ms][DEBUG] START check_scloud [2025-09-09 16:17:21][359097843261705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:17:21][359097843261705][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 8122 24419 24756888 239928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:17:21][359097843261705][322 ms][DEBUG] targetPkg: running [2025-09-09 16:17:21][359097843261705][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 16:17:21][359097843261705][322 ms][DEBUG] START check_boot_completed [2025-09-09 16:17:21][359097843261705][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:17:21][359097843261705][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:17:21][359097843261705][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:17:21][359097843261705][416 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 16:17:21][359097843261705][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:17:21][359097843261705][416 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:17:21][359097843261705][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097843261705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9247\"}'\'' -e'"" [2025-09-09 16:17:21][359097843261705][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:17:21][359097843261705][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097843261705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9247\"}'\'' -e'"" [2025-09-09 16:17:25][359097843261705][4117 ms][DEBUG] proc_open done in 3701 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 16:17:25][359097843261705][4117 ms][DEBUG] END runCmdUntilRes#1 in 3701 ms [2025-09-09 16:17:25][359097843261705][4117 ms][WARN] Detected error: Process with pid 8122 either refused to load frida-agent, or terminated during injectionProcess with pid 8122 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 16:17:25][359097843261705][4117 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 16:17:25][359097843261705][4367 ms][DEBUG] SU: done in 250 ms; outsystem 24718 24419 12407316 213468 ep_poll 0 S system_server\n [2025-09-09 16:17:25][359097843261705][4367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 16:17:25][359097843261705][4508 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 16:17:25][359097843261705][4508 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 16:17:25][359097843261705][4508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 16:17:26][359097843261705][4633 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 16:17:26][359097843261705][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 16:17:26][359097843261705][4820 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 16:17:28][359097843261705][6835 ms][DEBUG] START check_boot_completed [2025-09-09 16:17:28][359097843261705][6835 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:17:28][359097843261705][6882 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:17:28][359097843261705][6882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:17:28][359097843261705][6945 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:17:28][359097843261705][6945 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:17:31][359097843261705][9959 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 16:17:31][359097843261705][9960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097843261705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9247\"}'\'' -e'"" [2025-09-09 16:17:34][359097843261705][13240 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd198384-1d34-4da2-a893-88b10b1f1a13","id":"QR_fd198384-1d34-4da2-a893-88b10b1f1a13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:17:34][359097843261705][13396 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=3343 [2025-09-09 16:17:34][359097843261705][13396 ms][DEBUG] END runCmdUntilRes#2 in 3437 ms [2025-09-09 16:17:34][359097843261705][13396 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:18:03][350042737425320][0 ms][INFO] === Request start === [2025-09-09 16:18:03][350042737425320][1 ms][DEBUG] START check_scloud [2025-09-09 16:18:03][350042737425320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:18:03][350042737425320][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 9557 24419 23473460 127092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:18:03][350042737425320][315 ms][DEBUG] targetPkg: running [2025-09-09 16:18:03][350042737425320][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 16:18:03][350042737425320][315 ms][DEBUG] START check_boot_completed [2025-09-09 16:18:03][350042737425320][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:18:03][350042737425320][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:18:03][350042737425320][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:18:03][350042737425320][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:18:03][350042737425320][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:18:03][350042737425320][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:18:03][350042737425320][502 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2283\nsuccessfulTxPacketsPerSecond: 0.7696339594349825\nretriedTxPackets: 504\nretriedTxPacketsPerSecond: 0.2056780408834867\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2119\nsuccessfulRxPacketsPerSecond: 0.6535253879684981\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:18:03][350042737425320][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:18:05][350042737425320][1877 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.813/305.813/305.813/0.000 ms\n [2025-09-09 16:18:05][350042737425320][1877 ms][DEBUG] check_internet: online [2025-09-09 16:18:05][350042737425320][1877 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:18:05][350042737425320][1877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042737425320\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7622\"}'\'' -e'"" [2025-09-09 16:18:05][350042737425320][1877 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:18:05][350042737425320][1877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042737425320\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7622\"}'\'' -e'"" [2025-09-09 16:18:08][350042737425320][5235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0250faa-ec8b-4409-8fe1-4c040eeb8e03","id":"QR_a0250faa-ec8b-4409-8fe1-4c040eeb8e03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:18:08][350042737425320][5392 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-09 16:18:08][350042737425320][5392 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-09 16:18:08][350042737425320][5392 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:18:10][350042737425320][1 ms][INFO] === Request start === [2025-09-09 16:18:10][350042737425320][1 ms][DEBUG] START check_scloud [2025-09-09 16:18:10][350042737425320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:18:11][350042737425320][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 9557 24419 23593340 137756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:18:11][350042737425320][242 ms][DEBUG] targetPkg: running [2025-09-09 16:18:11][350042737425320][242 ms][DEBUG] END check_scloud in 241 ms [2025-09-09 16:18:11][350042737425320][242 ms][DEBUG] START check_boot_completed [2025-09-09 16:18:11][350042737425320][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:18:11][350042737425320][288 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:18:11][350042737425320][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:18:11][350042737425320][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:18:11][350042737425320][335 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:18:11][350042737425320][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:18:11][350042737425320][460 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2283\nsuccessfulTxPacketsPerSecond: 0.7696339594349825\nretriedTxPackets: 504\nretriedTxPacketsPerSecond: 0.2056780408834867\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2119\nsuccessfulRxPacketsPerSecond: 0.6535253879684981\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:18:11][350042737425320][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:18:11][350042737425320][819 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.520/225.520/225.520/0.000 ms\n [2025-09-09 16:18:11][350042737425320][819 ms][DEBUG] check_internet: online [2025-09-09 16:18:11][350042737425320][819 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:18:11][350042737425320][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042737425320\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-09-09 16:18:11][350042737425320][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:18:11][350042737425320][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042737425320\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-09-09 16:18:16][350042737425320][5802 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a87630ea-5a9f-478e-bd14-dedf0b79372d","id":"QR_a87630ea-5a9f-478e-bd14-dedf0b79372d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:18:16][350042737425320][5959 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-09 16:18:16][350042737425320][5959 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-09 16:18:16][350042737425320][5959 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:18:21][352539598137561][0 ms][INFO] === Request start === [2025-09-09 16:18:21][352539598137561][1 ms][DEBUG] START check_scloud [2025-09-09 16:18:21][352539598137561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:18:21][352539598137561][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 9557 24419 23762244 149272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:18:21][352539598137561][307 ms][DEBUG] targetPkg: running [2025-09-09 16:18:21][352539598137561][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 16:18:21][352539598137561][307 ms][DEBUG] START check_boot_completed [2025-09-09 16:18:21][352539598137561][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:18:21][352539598137561][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:18:21][352539598137561][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:18:21][352539598137561][432 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 16:18:21][352539598137561][432 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 16:18:21][352539598137561][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:18:21][352539598137561][557 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2283\nsuccessfulTxPacketsPerSecond: 0.7696339594349825\nretriedTxPackets: 504\nretriedTxPacketsPerSecond: 0.2056780408834867\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2119\nsuccessfulRxPacketsPerSecond: 0.6535253879684981\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:18:21][352539598137561][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:18:22][352539598137561][963 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.192/296.192/296.192/0.000 ms\n [2025-09-09 16:18:22][352539598137561][963 ms][DEBUG] check_internet: online [2025-09-09 16:18:22][352539598137561][963 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:18:22][352539598137561][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598137561\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5141\"}'\'' -e'"" [2025-09-09 16:18:22][352539598137561][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:18:22][352539598137561][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598137561\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5141\"}'\'' -e'"" [2025-09-09 16:18:25][352539598137561][4431 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04daf08e-dd45-423c-b2c4-382cda6d0e25","id":"QR_04daf08e-dd45-423c-b2c4-382cda6d0e25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:18:25][352539598137561][4587 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-09 16:18:25][352539598137561][4587 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-09 16:18:25][352539598137561][4587 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:18:28][352539598137561][0 ms][INFO] === Request start === [2025-09-09 16:18:28][352539598137561][1 ms][DEBUG] START check_scloud [2025-09-09 16:18:28][352539598137561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:18:28][352539598137561][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 9557 24419 23901792 159792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:18:28][352539598137561][263 ms][DEBUG] targetPkg: running [2025-09-09 16:18:28][352539598137561][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 16:18:28][352539598137561][263 ms][DEBUG] START check_boot_completed [2025-09-09 16:18:28][352539598137561][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:18:28][352539598137561][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:18:28][352539598137561][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:18:28][352539598137561][372 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:18:28][352539598137561][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:18:28][352539598137561][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:18:28][352539598137561][514 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2283\nsuccessfulTxPacketsPerSecond: 0.7696339594349825\nretriedTxPackets: 504\nretriedTxPacketsPerSecond: 0.2056780408834867\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2119\nsuccessfulRxPacketsPerSecond: 0.6535253879684981\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:18:28][352539598137561][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:18:29][352539598137561][903 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.294/265.294/265.294/0.000 ms\n [2025-09-09 16:18:29][352539598137561][904 ms][DEBUG] check_internet: online [2025-09-09 16:18:29][352539598137561][904 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:18:29][352539598137561][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598137561\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7331\"}'\'' -e'"" [2025-09-09 16:18:29][352539598137561][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:18:29][352539598137561][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598137561\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7331\"}'\'' -e'"" [2025-09-09 16:18:33][352539598137561][5340 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecfa59c3-41c2-412e-8e9f-e1b7783a2ac2","id":"QR_ecfa59c3-41c2-412e-8e9f-e1b7783a2ac2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:18:33][352539598137561][5496 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 16:18:33][352539598137561][5496 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-09 16:18:33][352539598137561][5496 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:19:04][358140832144184][0 ms][INFO] === Request start === [2025-09-09 16:19:04][358140832144184][1 ms][DEBUG] START check_scloud [2025-09-09 16:19:04][358140832144184][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:19:04][358140832144184][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 9557 24419 24003324 171964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:19:04][358140832144184][289 ms][DEBUG] targetPkg: running [2025-09-09 16:19:04][358140832144184][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 16:19:04][358140832144184][290 ms][DEBUG] START check_boot_completed [2025-09-09 16:19:04][358140832144184][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:19:04][358140832144184][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:19:04][358140832144184][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:19:04][358140832144184][398 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:19:04][358140832144184][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:19:04][358140832144184][399 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:19:04][358140832144184][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140832144184\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6282\"}'\'' -e'"" [2025-09-09 16:19:04][358140832144184][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:19:04][358140832144184][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140832144184\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6282\"}'\'' -e'"" [2025-09-09 16:19:08][358140832144184][4647 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67284171-d64a-433f-b356-7e696b139715","id":"QR_67284171-d64a-433f-b356-7e696b139715","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:19:09][358140832144184][4803 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-09 16:19:09][358140832144184][4803 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-09 16:19:09][358140832144184][4803 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:19:12][358140832144184][0 ms][INFO] === Request start === [2025-09-09 16:19:12][358140832144184][1 ms][DEBUG] START check_scloud [2025-09-09 16:19:12][358140832144184][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:19:12][358140832144184][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 9557 24419 24141828 182684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:19:12][358140832144184][285 ms][DEBUG] targetPkg: running [2025-09-09 16:19:12][358140832144184][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-09 16:19:12][358140832144184][285 ms][DEBUG] START check_boot_completed [2025-09-09 16:19:12][358140832144184][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:19:12][358140832144184][329 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 16:19:12][358140832144184][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:19:12][358140832144184][392 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:19:12][358140832144184][392 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-09 16:19:12][358140832144184][392 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:19:12][358140832144184][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140832144184\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8227\"}'\'' -e'"" [2025-09-09 16:19:12][358140832144184][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:19:12][358140832144184][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140832144184\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8227\"}'\'' -e'"" [2025-09-09 16:19:16][358140832144184][4047 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76b8a4d2-4d6b-4ec3-a35c-ad43145efd39","id":"QR_76b8a4d2-4d6b-4ec3-a35c-ad43145efd39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:19:16][358140832144184][4203 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-09 16:19:16][358140832144184][4203 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-09 16:19:16][358140832144184][4203 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:20:03][352469854610004][0 ms][INFO] === Request start === [2025-09-09 16:20:03][352469854610004][1 ms][DEBUG] START check_scloud [2025-09-09 16:20:03][352469854610004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:20:03][352469854610004][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 9557 24419 24225912 195048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:20:03][352469854610004][267 ms][DEBUG] targetPkg: running [2025-09-09 16:20:03][352469854610004][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-09 16:20:03][352469854610004][267 ms][DEBUG] START check_boot_completed [2025-09-09 16:20:03][352469854610004][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:20:03][352469854610004][314 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:20:03][352469854610004][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:20:03][352469854610004][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:20:03][352469854610004][361 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:20:03][352469854610004][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:20:04][352469854610004][454 ms][DEBUG] SU: done in 93 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2283\nsuccessfulTxPacketsPerSecond: 0.7696339594349825\nretriedTxPackets: 504\nretriedTxPacketsPerSecond: 0.2056780408834867\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2119\nsuccessfulRxPacketsPerSecond: 0.6535253879684981\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:20:04][352469854610004][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:20:04][352469854610004][845 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.285/292.285/292.285/0.000 ms\n [2025-09-09 16:20:04][352469854610004][845 ms][DEBUG] check_internet: online [2025-09-09 16:20:04][352469854610004][845 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:20:04][352469854610004][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854610004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6572\"}'\'' -e'"" [2025-09-09 16:20:04][352469854610004][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:20:04][352469854610004][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854610004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6572\"}'\'' -e'"" [2025-09-09 16:20:09][352469854610004][5406 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc138b34-2f11-4653-8fb5-a435da9f5c6c","id":"QR_bc138b34-2f11-4653-8fb5-a435da9f5c6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:20:09][352469854610004][5562 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-09 16:20:09][352469854610004][5563 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-09 16:20:09][352469854610004][5563 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:20:11][352469854610004][1 ms][INFO] === Request start === [2025-09-09 16:20:11][352469854610004][1 ms][DEBUG] START check_scloud [2025-09-09 16:20:11][352469854610004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:20:11][352469854610004][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 9557 24419 24405376 206164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:20:11][352469854610004][265 ms][DEBUG] targetPkg: running [2025-09-09 16:20:11][352469854610004][265 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 16:20:11][352469854610004][265 ms][DEBUG] START check_boot_completed [2025-09-09 16:20:11][352469854610004][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:20:11][352469854610004][296 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:20:11][352469854610004][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:20:11][352469854610004][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:20:11][352469854610004][343 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 16:20:11][352469854610004][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:20:12][352469854610004][468 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2283\nsuccessfulTxPacketsPerSecond: 0.7696339594349825\nretriedTxPackets: 504\nretriedTxPacketsPerSecond: 0.2056780408834867\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2119\nsuccessfulRxPacketsPerSecond: 0.6535253879684981\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:20:12][352469854610004][468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:20:12][352469854610004][936 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.276/340.276/340.276/0.000 ms\n [2025-09-09 16:20:12][352469854610004][937 ms][DEBUG] check_internet: online [2025-09-09 16:20:12][352469854610004][937 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:20:12][352469854610004][937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854610004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4011\"}'\'' -e'"" [2025-09-09 16:20:12][352469854610004][937 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:20:12][352469854610004][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854610004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4011\"}'\'' -e'"" [2025-09-09 16:20:17][352469854610004][6232 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_edbec452-5744-4e2d-a223-7d6033dee34b","id":"QR_edbec452-5744-4e2d-a223-7d6033dee34b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:20:18][352469854610004][6388 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-09-09 16:20:18][352469854610004][6388 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-09-09 16:20:18][352469854610004][6388 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:30:04][350110542484640][1 ms][INFO] === Request start === [2025-09-09 16:30:04][350110542484640][1 ms][DEBUG] START check_scloud [2025-09-09 16:30:04][350110542484640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:30:04][350110542484640][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 9557 24419 24539408 140140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:30:04][350110542484640][328 ms][DEBUG] targetPkg: running [2025-09-09 16:30:04][350110542484640][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-09 16:30:04][350110542484640][328 ms][DEBUG] START check_boot_completed [2025-09-09 16:30:04][350110542484640][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:30:04][350110542484640][359 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:30:04][350110542484640][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:30:04][350110542484640][407 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 16:30:04][350110542484640][407 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 16:30:04][350110542484640][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:30:04][350110542484640][531 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2618\nsuccessfulTxPacketsPerSecond: 0.17862198196255005\nretriedTxPackets: 620\nretriedTxPacketsPerSecond: 0.11795791261677833\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2389\nsuccessfulRxPacketsPerSecond: 0.12132813869154344\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:30:04][350110542484640][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:30:06][350110542484640][1922 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.089/304.089/304.089/0.000 ms\n [2025-09-09 16:30:06][350110542484640][1922 ms][DEBUG] check_internet: online [2025-09-09 16:30:06][350110542484640][1922 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:30:06][350110542484640][1922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110542484640\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5486\"}'\'' -e'"" [2025-09-09 16:30:06][350110542484640][1922 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:30:06][350110542484640][1922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110542484640\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5486\"}'\'' -e'"" [2025-09-09 16:30:10][350110542484640][6389 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8662b66-5418-4670-9058-5f4d99cab940","id":"QR_d8662b66-5418-4670-9058-5f4d99cab940","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:30:10][350110542484640][6545 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-09 16:30:10][350110542484640][6545 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-09 16:30:10][350110542484640][6546 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:30:13][350110542484640][0 ms][INFO] === Request start === [2025-09-09 16:30:13][350110542484640][1 ms][DEBUG] START check_scloud [2025-09-09 16:30:13][350110542484640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:30:13][350110542484640][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 9557 24419 24676968 152232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:30:13][350110542484640][322 ms][DEBUG] targetPkg: running [2025-09-09 16:30:13][350110542484640][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 16:30:13][350110542484640][322 ms][DEBUG] START check_boot_completed [2025-09-09 16:30:13][350110542484640][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:30:13][350110542484640][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:30:13][350110542484640][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:30:13][350110542484640][431 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:30:13][350110542484640][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:30:13][350110542484640][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:30:13][350110542484640][572 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2618\nsuccessfulTxPacketsPerSecond: 0.17862198196255005\nretriedTxPackets: 620\nretriedTxPacketsPerSecond: 0.11795791261677833\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2389\nsuccessfulRxPacketsPerSecond: 0.12132813869154344\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:30:13][350110542484640][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:30:14][350110542484640][1024 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.362/336.362/336.362/0.000 ms\n [2025-09-09 16:30:14][350110542484640][1024 ms][DEBUG] check_internet: online [2025-09-09 16:30:14][350110542484640][1024 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:30:14][350110542484640][1024 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110542484640\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2935\"}'\'' -e'"" [2025-09-09 16:30:14][350110542484640][1024 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:30:14][350110542484640][1024 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350110542484640\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2935\"}'\'' -e'"" [2025-09-09 16:30:19][350110542484640][5773 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f94cffd4-dff3-4a99-a432-7bf039e775ff","id":"QR_f94cffd4-dff3-4a99-a432-7bf039e775ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:30:19][350110542484640][5929 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 16:30:19][350110542484640][5929 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 16:30:19][350110542484640][5930 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:32:03][352978606358126][1 ms][INFO] === Request start === [2025-09-09 16:32:03][352978606358126][1 ms][DEBUG] START check_scloud [2025-09-09 16:32:03][352978606358126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:32:03][352978606358126][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 9557 24419 24794920 162912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:32:03][352978606358126][289 ms][DEBUG] targetPkg: running [2025-09-09 16:32:03][352978606358126][290 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 16:32:03][352978606358126][290 ms][DEBUG] START check_boot_completed [2025-09-09 16:32:03][352978606358126][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:32:03][352978606358126][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:32:03][352978606358126][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:32:03][352978606358126][399 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:32:03][352978606358126][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:32:03][352978606358126][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:32:04][352978606358126][524 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2712\nsuccessfulTxPacketsPerSecond: 0.3121772369657701\nretriedTxPackets: 649\nretriedTxPacketsPerSecond: 0.09630999863837589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2475\nsuccessfulRxPacketsPerSecond: 0.2856089614793216\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:32:04][352978606358126][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:32:04][352978606358126][899 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.750/258.750/258.750/0.000 ms\n [2025-09-09 16:32:04][352978606358126][899 ms][DEBUG] check_internet: online [2025-09-09 16:32:04][352978606358126][899 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:32:04][352978606358126][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978606358126\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9604\"}'\'' -e'"" [2025-09-09 16:32:04][352978606358126][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:32:04][352978606358126][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978606358126\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9604\"}'\'' -e'"" [2025-09-09 16:32:08][352978606358126][4944 ms][DEBUG] proc_open done in 4045 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 16:32:08][352978606358126][4944 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-09 16:32:08][352978606358126][4944 ms][WARN] Detected error: Process with pid 9557 either refused to load frida-agent, or terminated during injectionProcess with pid 9557 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 16:32:08][352978606358126][4944 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 16:32:08][352978606358126][5210 ms][DEBUG] SU: done in 266 ms; outsystem 24718 24419 12329692 180832 ep_poll 0 S system_server\n [2025-09-09 16:32:08][352978606358126][5210 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 16:32:08][352978606358126][5351 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 16:32:08][352978606358126][5351 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 16:32:08][352978606358126][5351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 16:32:09][352978606358126][5476 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 16:32:09][352978606358126][5476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 16:32:09][352978606358126][5679 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 16:32:11][352978606358126][7694 ms][DEBUG] START check_boot_completed [2025-09-09 16:32:11][352978606358126][7694 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:32:11][352978606358126][7741 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:32:11][352978606358126][7741 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:32:11][352978606358126][7788 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:32:11][352978606358126][7788 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:32:14][352978606358126][10802 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 16:32:14][352978606358126][10802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978606358126\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9604\"}'\'' -e'"" [2025-09-09 16:32:18][352978606358126][15317 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb06f459-7b3b-4887-8ac6-681eb47c3a05","id":"QR_cb06f459-7b3b-4887-8ac6-681eb47c3a05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:32:19][352978606358126][15473 ms][DEBUG] proc_open done in 4671 ms; code=255; res.len=3343 [2025-09-09 16:32:19][352978606358126][15473 ms][DEBUG] END runCmdUntilRes#2 in 4671 ms [2025-09-09 16:32:19][352978606358126][15473 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:32:21][352978606358126][0 ms][INFO] === Request start === [2025-09-09 16:32:21][352978606358126][1 ms][DEBUG] START check_scloud [2025-09-09 16:32:21][352978606358126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:32:21][352978606358126][243 ms][DEBUG] SU: done in 243 ms; outu0_a118 12304 24419 23517216 123848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:32:21][352978606358126][244 ms][DEBUG] targetPkg: running [2025-09-09 16:32:21][352978606358126][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-09 16:32:21][352978606358126][244 ms][DEBUG] START check_boot_completed [2025-09-09 16:32:21][352978606358126][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:32:21][352978606358126][290 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:32:21][352978606358126][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:32:21][352978606358126][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:32:21][352978606358126][337 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:32:21][352978606358126][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:32:21][352978606358126][446 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2712\nsuccessfulTxPacketsPerSecond: 0.3121772369657701\nretriedTxPackets: 649\nretriedTxPacketsPerSecond: 0.09630999863837589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2475\nsuccessfulRxPacketsPerSecond: 0.2856089614793216\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:32:21][352978606358126][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:32:22][352978606358126][868 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.321/315.321/315.321/0.000 ms\n [2025-09-09 16:32:22][352978606358126][868 ms][DEBUG] check_internet: online [2025-09-09 16:32:22][352978606358126][868 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:32:22][352978606358126][869 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978606358126\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5746\"}'\'' -e'"" [2025-09-09 16:32:22][352978606358126][869 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:32:22][352978606358126][869 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978606358126\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5746\"}'\'' -e'"" [2025-09-09 16:32:27][352978606358126][5695 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92c1c405-52e5-4a8f-a73f-732c58c51cd7","id":"QR_92c1c405-52e5-4a8f-a73f-732c58c51cd7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:32:27][352978606358126][5851 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-09 16:32:27][352978606358126][5851 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-09 16:32:27][352978606358126][5851 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:33:03][358077203243403][0 ms][INFO] === Request start === [2025-09-09 16:33:03][358077203243403][1 ms][DEBUG] START check_scloud [2025-09-09 16:33:03][358077203243403][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:33:04][358077203243403][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 12304 24419 23597044 137880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:33:04][358077203243403][314 ms][DEBUG] targetPkg: running [2025-09-09 16:33:04][358077203243403][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 16:33:04][358077203243403][314 ms][DEBUG] START check_boot_completed [2025-09-09 16:33:04][358077203243403][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:33:04][358077203243403][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:33:04][358077203243403][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:33:04][358077203243403][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:33:04][358077203243403][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:33:04][358077203243403][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:33:04][358077203243403][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077203243403\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3302\"}'\'' -e'"" [2025-09-09 16:33:04][358077203243403][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:33:04][358077203243403][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077203243403\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3302\"}'\'' -e'"" [2025-09-09 16:33:07][358077203243403][3812 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dafd4017-144f-4630-b703-f7e9b8e69e79","id":"QR_dafd4017-144f-4630-b703-f7e9b8e69e79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:33:07][358077203243403][3969 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=3343 [2025-09-09 16:33:07][358077203243403][3969 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-09 16:33:07][358077203243403][3969 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:33:10][358077203243403][0 ms][INFO] === Request start === [2025-09-09 16:33:10][358077203243403][1 ms][DEBUG] START check_scloud [2025-09-09 16:33:10][358077203243403][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:33:10][358077203243403][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 12304 24419 23786804 149044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:33:10][358077203243403][306 ms][DEBUG] targetPkg: running [2025-09-09 16:33:10][358077203243403][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 16:33:10][358077203243403][306 ms][DEBUG] START check_boot_completed [2025-09-09 16:33:10][358077203243403][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:33:10][358077203243403][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:33:10][358077203243403][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:33:10][358077203243403][447 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 16:33:10][358077203243403][447 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 16:33:10][358077203243403][447 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:33:10][358077203243403][447 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077203243403\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5954\"}'\'' -e'"" [2025-09-09 16:33:10][358077203243403][447 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:33:10][358077203243403][447 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077203243403\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5954\"}'\'' -e'"" [2025-09-09 16:33:14][358077203243403][4602 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9344c0d3-63d2-450a-9341-df169e6f4da9","id":"QR_9344c0d3-63d2-450a-9341-df169e6f4da9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:33:15][358077203243403][4758 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-09 16:33:15][358077203243403][4758 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-09 16:33:15][358077203243403][4758 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:33:20][351783150675177][0 ms][INFO] === Request start === [2025-09-09 16:33:20][351783150675177][1 ms][DEBUG] START check_scloud [2025-09-09 16:33:20][351783150675177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:33:20][351783150675177][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 12304 24419 23940660 157940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:33:20][351783150675177][303 ms][DEBUG] targetPkg: running [2025-09-09 16:33:20][351783150675177][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 16:33:20][351783150675177][303 ms][DEBUG] START check_boot_completed [2025-09-09 16:33:20][351783150675177][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:33:20][351783150675177][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:33:20][351783150675177][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:33:20][351783150675177][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:33:20][351783150675177][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:33:20][351783150675177][396 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:33:20][351783150675177][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351783150675177\",\"model\":\"SM-A546V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3548\"}'\'' -e'"" [2025-09-09 16:33:20][351783150675177][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:33:20][351783150675177][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351783150675177\",\"model\":\"SM-A546V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3548\"}'\'' -e'"" [2025-09-09 16:33:25][351783150675177][4692 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8585bea-f92d-46e4-8a6d-62c05f22c63a","id":"QR_c8585bea-f92d-46e4-8a6d-62c05f22c63a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:33:25][351783150675177][4848 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-09 16:33:25][351783150675177][4848 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 16:33:25][351783150675177][4848 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:33:28][351783150675177][0 ms][INFO] === Request start === [2025-09-09 16:33:28][351783150675177][1 ms][DEBUG] START check_scloud [2025-09-09 16:33:28][351783150675177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:33:29][351783150675177][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 12304 24419 24054424 168116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:33:29][351783150675177][298 ms][DEBUG] targetPkg: running [2025-09-09 16:33:29][351783150675177][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 16:33:29][351783150675177][298 ms][DEBUG] START check_boot_completed [2025-09-09 16:33:29][351783150675177][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:33:29][351783150675177][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:33:29][351783150675177][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:33:29][351783150675177][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:33:29][351783150675177][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:33:29][351783150675177][391 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:33:29][351783150675177][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351783150675177\",\"model\":\"SM-A546V\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1561\"}'\'' -e'"" [2025-09-09 16:33:29][351783150675177][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:33:29][351783150675177][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351783150675177\",\"model\":\"SM-A546V\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1561\"}'\'' -e'"" [2025-09-09 16:33:33][351783150675177][4639 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c455bb4c-c108-48de-a4b3-ef0cd86b9bf4","id":"QR_c455bb4c-c108-48de-a4b3-ef0cd86b9bf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:33:33][351783150675177][4796 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-09 16:33:33][351783150675177][4796 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-09 16:33:33][351783150675177][4796 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:36:03][354626222745493][1 ms][INFO] === Request start === [2025-09-09 16:36:03][354626222745493][1 ms][DEBUG] START check_scloud [2025-09-09 16:36:03][354626222745493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:36:04][354626222745493][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 12304 24419 24107624 180760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:36:04][354626222745493][297 ms][DEBUG] targetPkg: running [2025-09-09 16:36:04][354626222745493][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 16:36:04][354626222745493][297 ms][DEBUG] START check_boot_completed [2025-09-09 16:36:04][354626222745493][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:36:04][354626222745493][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:36:04][354626222745493][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:36:04][354626222745493][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:36:04][354626222745493][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:36:04][354626222745493][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:36:04][354626222745493][547 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2761\nsuccessfulTxPacketsPerSecond: 1.3041937758333706\nretriedTxPackets: 664\nretriedTxPacketsPerSecond: 0.39924299531543245\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2517\nsuccessfulRxPacketsPerSecond: 1.1178804449002135\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:36:04][354626222745493][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:36:05][354626222745493][1937 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.215/299.215/299.215/0.000 ms\n [2025-09-09 16:36:05][354626222745493][1937 ms][DEBUG] check_internet: online [2025-09-09 16:36:05][354626222745493][1937 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:36:05][354626222745493][1937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222745493\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1214\"}'\'' -e'"" [2025-09-09 16:36:05][354626222745493][1938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:36:05][354626222745493][1938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222745493\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1214\"}'\'' -e'"" [2025-09-09 16:36:09][354626222745493][5608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b76ebcaf-0f00-40bf-bb47-b2267eccf2ac","id":"QR_b76ebcaf-0f00-40bf-bb47-b2267eccf2ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:36:09][354626222745493][5764 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-09-09 16:36:09][354626222745493][5764 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-09-09 16:36:09][354626222745493][5764 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:36:11][354626222745493][0 ms][INFO] === Request start === [2025-09-09 16:36:11][354626222745493][1 ms][DEBUG] START check_scloud [2025-09-09 16:36:11][354626222745493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:36:12][354626222745493][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 12304 24419 24248048 191512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:36:12][354626222745493][273 ms][DEBUG] targetPkg: running [2025-09-09 16:36:12][354626222745493][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 16:36:12][354626222745493][273 ms][DEBUG] START check_boot_completed [2025-09-09 16:36:12][354626222745493][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:36:12][354626222745493][318 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 16:36:12][354626222745493][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:36:12][354626222745493][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:36:12][354626222745493][365 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 16:36:12][354626222745493][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:36:12][354626222745493][490 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2761\nsuccessfulTxPacketsPerSecond: 1.3041937758333706\nretriedTxPackets: 664\nretriedTxPacketsPerSecond: 0.39924299531543245\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2517\nsuccessfulRxPacketsPerSecond: 1.1178804449002135\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:36:12][354626222745493][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:36:12][354626222745493][911 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.839/290.839/290.839/0.000 ms\n [2025-09-09 16:36:12][354626222745493][911 ms][DEBUG] check_internet: online [2025-09-09 16:36:12][354626222745493][911 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:36:12][354626222745493][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222745493\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5557\"}'\'' -e'"" [2025-09-09 16:36:12][354626222745493][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:36:12][354626222745493][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222745493\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5557\"}'\'' -e'"" [2025-09-09 16:36:17][354626222745493][5660 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0f56a6d-8ea3-487b-a066-ee7c5b3dc0cb","id":"QR_c0f56a6d-8ea3-487b-a066-ee7c5b3dc0cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:36:17][354626222745493][5816 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 16:36:17][354626222745493][5816 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 16:36:17][354626222745493][5816 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:38:05][351782257779429][1 ms][INFO] === Request start === [2025-09-09 16:38:05][351782257779429][1 ms][DEBUG] START check_scloud [2025-09-09 16:38:05][351782257779429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:38:05][351782257779429][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 12304 24419 24351536 203588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:38:05][351782257779429][310 ms][DEBUG] targetPkg: running [2025-09-09 16:38:05][351782257779429][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 16:38:05][351782257779429][310 ms][DEBUG] START check_boot_completed [2025-09-09 16:38:05][351782257779429][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:38:05][351782257779429][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:38:05][351782257779429][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:38:05][351782257779429][405 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 16:38:05][351782257779429][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 16:38:05][351782257779429][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:38:05][351782257779429][513 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2962\nsuccessfulTxPacketsPerSecond: 0.7624177366434653\nretriedTxPackets: 724\nretriedTxPacketsPerSecond: 0.22758738407267623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2688\nsuccessfulRxPacketsPerSecond: 0.6486240446071273\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:38:05][351782257779429][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:38:06][351782257779429][872 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.286/260.286/260.286/0.000 ms\n [2025-09-09 16:38:06][351782257779429][873 ms][DEBUG] check_internet: online [2025-09-09 16:38:06][351782257779429][873 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:38:06][351782257779429][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782257779429\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9300\"}'\'' -e'"" [2025-09-09 16:38:06][351782257779429][873 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:38:06][351782257779429][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782257779429\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9300\"}'\'' -e'"" [2025-09-09 16:38:11][351782257779429][6637 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3616674f-c917-4177-9ecb-58d16afcaa65","id":"QR_3616674f-c917-4177-9ecb-58d16afcaa65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:38:11][351782257779429][6793 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-09 16:38:11][351782257779429][6793 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-09 16:38:11][351782257779429][6793 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:38:15][351782257779429][0 ms][INFO] === Request start === [2025-09-09 16:38:15][351782257779429][1 ms][DEBUG] START check_scloud [2025-09-09 16:38:15][351782257779429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:38:15][351782257779429][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 12304 24419 24524856 214220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:38:15][351782257779429][319 ms][DEBUG] targetPkg: running [2025-09-09 16:38:15][351782257779429][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 16:38:15][351782257779429][319 ms][DEBUG] START check_boot_completed [2025-09-09 16:38:15][351782257779429][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:38:15][351782257779429][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:38:15][351782257779429][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:38:15][351782257779429][413 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 16:38:15][351782257779429][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:38:15][351782257779429][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:38:16][351782257779429][537 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2962\nsuccessfulTxPacketsPerSecond: 0.7624177366434653\nretriedTxPackets: 724\nretriedTxPacketsPerSecond: 0.22758738407267623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2688\nsuccessfulRxPacketsPerSecond: 0.6486240446071273\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:38:16][351782257779429][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:38:16][351782257779429][990 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.470/321.470/321.470/0.000 ms\n [2025-09-09 16:38:16][351782257779429][990 ms][DEBUG] check_internet: online [2025-09-09 16:38:16][351782257779429][990 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:38:16][351782257779429][990 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782257779429\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7415\"}'\'' -e'"" [2025-09-09 16:38:16][351782257779429][990 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:38:16][351782257779429][990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782257779429\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7415\"}'\'' -e'"" [2025-09-09 16:38:20][351782257779429][4739 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ed31f78-cc20-4c97-a091-96478db15eaf","id":"QR_7ed31f78-cc20-4c97-a091-96478db15eaf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:38:20][351782257779429][4895 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-09 16:38:20][351782257779429][4895 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-09 16:38:20][351782257779429][4896 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:38:22][354916448045939][0 ms][INFO] === Request start === [2025-09-09 16:38:22][354916448045939][1 ms][DEBUG] START check_scloud [2025-09-09 16:38:22][354916448045939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:38:22][354916448045939][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 12304 24419 24655040 226028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:38:22][354916448045939][305 ms][DEBUG] targetPkg: running [2025-09-09 16:38:22][354916448045939][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 16:38:22][354916448045939][305 ms][DEBUG] START check_boot_completed [2025-09-09 16:38:22][354916448045939][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:38:22][354916448045939][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:38:22][354916448045939][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:38:22][354916448045939][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:38:22][354916448045939][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:38:22][354916448045939][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:38:22][354916448045939][493 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2962\nsuccessfulTxPacketsPerSecond: 0.7624177366434653\nretriedTxPackets: 724\nretriedTxPacketsPerSecond: 0.22758738407267623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2688\nsuccessfulRxPacketsPerSecond: 0.6486240446071273\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:38:22][354916448045939][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:38:23][354916448045939][852 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.793/224.793/224.793/0.000 ms\n [2025-09-09 16:38:23][354916448045939][852 ms][DEBUG] check_internet: online [2025-09-09 16:38:23][354916448045939][852 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:38:23][354916448045939][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916448045939\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2169\"}'\'' -e'"" [2025-09-09 16:38:23][354916448045939][852 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:38:23][354916448045939][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916448045939\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2169\"}'\'' -e'"" [2025-09-09 16:38:26][354916448045939][4195 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec1d62f9-ec25-4719-b313-17dd427de5e3","id":"QR_ec1d62f9-ec25-4719-b313-17dd427de5e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:38:26][354916448045939][4351 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 16:38:26][354916448045939][4351 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 16:38:26][354916448045939][4351 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:38:28][354916448045939][0 ms][INFO] === Request start === [2025-09-09 16:38:28][354916448045939][1 ms][DEBUG] START check_scloud [2025-09-09 16:38:28][354916448045939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:38:29][354916448045939][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 12304 24419 24803048 236840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:38:29][354916448045939][274 ms][DEBUG] targetPkg: running [2025-09-09 16:38:29][354916448045939][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 16:38:29][354916448045939][275 ms][DEBUG] START check_boot_completed [2025-09-09 16:38:29][354916448045939][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:38:29][354916448045939][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:38:29][354916448045939][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:38:29][354916448045939][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:38:29][354916448045939][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:38:29][354916448045939][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:38:29][354916448045939][477 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2962\nsuccessfulTxPacketsPerSecond: 0.7624177366434653\nretriedTxPackets: 724\nretriedTxPacketsPerSecond: 0.22758738407267623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2688\nsuccessfulRxPacketsPerSecond: 0.6486240446071273\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:38:29][354916448045939][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:38:29][354916448045939][884 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.923/301.923/301.923/0.000 ms\n [2025-09-09 16:38:29][354916448045939][884 ms][DEBUG] check_internet: online [2025-09-09 16:38:29][354916448045939][884 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:38:29][354916448045939][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916448045939\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8737\"}'\'' -e'"" [2025-09-09 16:38:29][354916448045939][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:38:29][354916448045939][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916448045939\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8737\"}'\'' -e'"" [2025-09-09 16:38:33][354916448045939][4758 ms][DEBUG] proc_open done in 3873 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 16:38:33][354916448045939][4758 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 16:38:33][354916448045939][4758 ms][WARN] Detected error: Process with pid 12304 either refused to load frida-agent, or terminated during injectionProcess with pid 12304 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 16:38:33][354916448045939][4758 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 16:38:33][354916448045939][5054 ms][DEBUG] SU: done in 297 ms; outsystem 24718 24419 12329692 193224 ep_poll 0 S system_server\n [2025-09-09 16:38:33][354916448045939][5055 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 16:38:34][354916448045939][5179 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 16:38:34][354916448045939][5179 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 16:38:34][354916448045939][5179 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 16:38:34][354916448045939][5304 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 16:38:34][354916448045939][5305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 16:38:34][354916448045939][5508 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 16:38:36][354916448045939][7522 ms][DEBUG] START check_boot_completed [2025-09-09 16:38:36][354916448045939][7523 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:38:36][354916448045939][7569 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:38:36][354916448045939][7569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:38:36][354916448045939][7616 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:38:36][354916448045939][7616 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:38:39][354916448045939][10631 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 16:38:39][354916448045939][10631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916448045939\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8737\"}'\'' -e'"" [2025-09-09 16:38:44][354916448045939][15333 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8ac6b24-094d-45f6-bba9-eaa676946ec1","id":"QR_e8ac6b24-094d-45f6-bba9-eaa676946ec1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:38:44][354916448045939][15489 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-09 16:38:44][354916448045939][15490 ms][DEBUG] END runCmdUntilRes#2 in 4858 ms [2025-09-09 16:38:44][354916448045939][15490 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:43:04][352042191250733][1 ms][INFO] === Request start === [2025-09-09 16:43:04][352042191250733][1 ms][DEBUG] START check_scloud [2025-09-09 16:43:04][352042191250733][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:43:05][352042191250733][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 13876 24419 23459880 126944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:43:05][352042191250733][303 ms][DEBUG] targetPkg: running [2025-09-09 16:43:05][352042191250733][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 16:43:05][352042191250733][303 ms][DEBUG] START check_boot_completed [2025-09-09 16:43:05][352042191250733][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:43:05][352042191250733][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:43:05][352042191250733][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:43:05][352042191250733][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:43:05][352042191250733][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:43:05][352042191250733][381 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:43:05][352042191250733][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191250733\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5445\"}'\'' -e'"" [2025-09-09 16:43:05][352042191250733][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:43:05][352042191250733][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191250733\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5445\"}'\'' -e'"" [2025-09-09 16:43:10][352042191250733][5927 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecca9ee0-f11f-4432-849f-b32da4ef2b8d","id":"QR_ecca9ee0-f11f-4432-849f-b32da4ef2b8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:43:10][352042191250733][6083 ms][DEBUG] proc_open done in 5702 ms; code=255; res.len=3343 [2025-09-09 16:43:10][352042191250733][6083 ms][DEBUG] END runCmdUntilRes#1 in 5702 ms [2025-09-09 16:43:10][352042191250733][6083 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:43:14][352042191250733][0 ms][INFO] === Request start === [2025-09-09 16:43:14][352042191250733][1 ms][DEBUG] START check_scloud [2025-09-09 16:43:14][352042191250733][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:43:14][352042191250733][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 13876 24419 23592176 137880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:43:14][352042191250733][282 ms][DEBUG] targetPkg: running [2025-09-09 16:43:14][352042191250733][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-09 16:43:14][352042191250733][283 ms][DEBUG] START check_boot_completed [2025-09-09 16:43:14][352042191250733][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:43:14][352042191250733][329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:43:14][352042191250733][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:43:14][352042191250733][394 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 16:43:14][352042191250733][394 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 16:43:14][352042191250733][394 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:43:14][352042191250733][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191250733\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3179\"}'\'' -e'"" [2025-09-09 16:43:14][352042191250733][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:43:14][352042191250733][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191250733\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3179\"}'\'' -e'"" [2025-09-09 16:43:18][352042191250733][4156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3572f55f-c8a4-43a1-99e3-9f6844f4b655","id":"QR_3572f55f-c8a4-43a1-99e3-9f6844f4b655","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:43:18][352042191250733][4312 ms][DEBUG] proc_open done in 3919 ms; code=255; res.len=3343 [2025-09-09 16:43:18][352042191250733][4312 ms][DEBUG] END runCmdUntilRes#1 in 3919 ms [2025-09-09 16:43:18][352042191250733][4313 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:44:03][352501916492128][0 ms][INFO] === Request start === [2025-09-09 16:44:03][352501916492128][1 ms][DEBUG] START check_scloud [2025-09-09 16:44:03][352501916492128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:44:03][352501916492128][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 13876 24419 23728624 149704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:44:03][352501916492128][314 ms][DEBUG] targetPkg: running [2025-09-09 16:44:03][352501916492128][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 16:44:03][352501916492128][314 ms][DEBUG] START check_boot_completed [2025-09-09 16:44:03][352501916492128][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:44:03][352501916492128][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:44:03][352501916492128][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:44:03][352501916492128][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:44:03][352501916492128][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:44:03][352501916492128][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:44:03][352501916492128][533 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3071\nsuccessfulTxPacketsPerSecond: 0.3706650887895915\nretriedTxPackets: 761\nretriedTxPacketsPerSecond: 0.12582209435976957\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2776\nsuccessfulRxPacketsPerSecond: 0.2992525487475601\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:44:03][352501916492128][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:44:05][352501916492128][1862 ms][DEBUG] SU: done in 1329 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.892/305.892/305.892/0.000 ms\n [2025-09-09 16:44:05][352501916492128][1862 ms][DEBUG] check_internet: online [2025-09-09 16:44:05][352501916492128][1862 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:44:05][352501916492128][1862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916492128\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6737\"}'\'' -e'"" [2025-09-09 16:44:05][352501916492128][1862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:44:05][352501916492128][1863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916492128\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6737\"}'\'' -e'"" [2025-09-09 16:44:08][352501916492128][5235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecb21028-ca7d-4cd1-b997-4842c62f2e31","id":"QR_ecb21028-ca7d-4cd1-b997-4842c62f2e31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:44:08][352501916492128][5391 ms][DEBUG] proc_open done in 3528 ms; code=255; res.len=3343 [2025-09-09 16:44:08][352501916492128][5391 ms][DEBUG] END runCmdUntilRes#1 in 3528 ms [2025-09-09 16:44:08][352501916492128][5391 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:44:10][352501916492128][0 ms][INFO] === Request start === [2025-09-09 16:44:10][352501916492128][1 ms][DEBUG] START check_scloud [2025-09-09 16:44:10][352501916492128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:44:11][352501916492128][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 13876 24419 23897848 160560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:44:11][352501916492128][323 ms][DEBUG] targetPkg: running [2025-09-09 16:44:11][352501916492128][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 16:44:11][352501916492128][323 ms][DEBUG] START check_boot_completed [2025-09-09 16:44:11][352501916492128][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:44:11][352501916492128][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:44:11][352501916492128][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:44:11][352501916492128][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:44:11][352501916492128][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:44:11][352501916492128][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:44:11][352501916492128][588 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3071\nsuccessfulTxPacketsPerSecond: 0.3706650887895915\nretriedTxPackets: 761\nretriedTxPacketsPerSecond: 0.12582209435976957\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2776\nsuccessfulRxPacketsPerSecond: 0.2992525487475601\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:44:11][352501916492128][589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:44:11][352501916492128][1041 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.652/336.652/336.652/0.000 ms\n [2025-09-09 16:44:11][352501916492128][1042 ms][DEBUG] check_internet: online [2025-09-09 16:44:11][352501916492128][1042 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:44:11][352501916492128][1042 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916492128\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4043\"}'\'' -e'"" [2025-09-09 16:44:11][352501916492128][1042 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:44:11][352501916492128][1042 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916492128\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4043\"}'\'' -e'"" [2025-09-09 16:44:16][352501916492128][5587 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0b8b299-cb4e-4802-a7c1-d134281693ce","id":"QR_b0b8b299-cb4e-4802-a7c1-d134281693ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:44:16][352501916492128][5743 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 16:44:16][352501916492128][5743 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 16:44:16][352501916492128][5743 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:47:03][358673444641676][1 ms][INFO] === Request start === [2025-09-09 16:47:03][358673444641676][1 ms][DEBUG] START check_scloud [2025-09-09 16:47:03][358673444641676][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:47:03][358673444641676][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 13876 24419 24034168 171648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:47:03][358673444641676][297 ms][DEBUG] targetPkg: running [2025-09-09 16:47:03][358673444641676][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 16:47:03][358673444641676][297 ms][DEBUG] START check_boot_completed [2025-09-09 16:47:03][358673444641676][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:47:03][358673444641676][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:47:03][358673444641676][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:47:03][358673444641676][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:47:03][358673444641676][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:47:03][358673444641676][375 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:47:03][358673444641676][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673444641676\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3050\"}'\'' -e'"" [2025-09-09 16:47:03][358673444641676][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:47:03][358673444641676][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673444641676\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3050\"}'\'' -e'"" [2025-09-09 16:47:07][358673444641676][4780 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_169f62b1-3f72-442e-bd34-a1c7b793fe06","id":"QR_169f62b1-3f72-442e-bd34-a1c7b793fe06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:47:08][358673444641676][4937 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 16:47:08][358673444641676][4937 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 16:47:08][358673444641676][4937 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:47:10][358673444641676][0 ms][INFO] === Request start === [2025-09-09 16:47:10][358673444641676][1 ms][DEBUG] START check_scloud [2025-09-09 16:47:10][358673444641676][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:47:10][358673444641676][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 13876 24419 24189056 183568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:47:10][358673444641676][284 ms][DEBUG] targetPkg: running [2025-09-09 16:47:10][358673444641676][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-09 16:47:10][358673444641676][284 ms][DEBUG] START check_boot_completed [2025-09-09 16:47:10][358673444641676][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:47:10][358673444641676][331 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:47:10][358673444641676][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:47:10][358673444641676][393 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:47:10][358673444641676][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:47:10][358673444641676][393 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:47:10][358673444641676][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673444641676\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8989\"}'\'' -e'"" [2025-09-09 16:47:10][358673444641676][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:47:10][358673444641676][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673444641676\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8989\"}'\'' -e'"" [2025-09-09 16:47:15][358673444641676][5126 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8713f36e-5b3a-492c-8d0c-830f30886538","id":"QR_8713f36e-5b3a-492c-8d0c-830f30886538","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:47:15][358673444641676][5282 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 16:47:15][358673444641676][5282 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-09 16:47:15][358673444641676][5283 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:50:03][357967979936084][1 ms][INFO] === Request start === [2025-09-09 16:50:03][357967979936084][1 ms][DEBUG] START check_scloud [2025-09-09 16:50:03][357967979936084][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:50:03][357967979936084][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 13876 24419 24290624 194972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:50:03][357967979936084][292 ms][DEBUG] targetPkg: running [2025-09-09 16:50:03][357967979936084][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 16:50:03][357967979936084][292 ms][DEBUG] START check_boot_completed [2025-09-09 16:50:03][357967979936084][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:50:03][357967979936084][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:50:03][357967979936084][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:50:03][357967979936084][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:50:03][357967979936084][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:50:03][357967979936084][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:50:03][357967979936084][496 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3184\nsuccessfulTxPacketsPerSecond: 0.36667358911790665\nretriedTxPackets: 797\nretriedTxPacketsPerSecond: 0.11681636467473132\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2875\nsuccessfulRxPacketsPerSecond: 0.32124500285551116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:50:03][357967979936084][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:50:05][357967979936084][1841 ms][DEBUG] SU: done in 1345 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.687/293.687/293.687/0.000 ms\n [2025-09-09 16:50:05][357967979936084][1841 ms][DEBUG] check_internet: online [2025-09-09 16:50:05][357967979936084][1841 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:50:05][357967979936084][1841 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967979936084\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-09-09 16:50:05][357967979936084][1841 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:50:05][357967979936084][1841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967979936084\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-09-09 16:50:09][357967979936084][6478 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5f70568-e74d-4a53-b0f4-fa3cf11d3580","id":"QR_b5f70568-e74d-4a53-b0f4-fa3cf11d3580","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:50:10][357967979936084][6634 ms][DEBUG] proc_open done in 4793 ms; code=255; res.len=3343 [2025-09-09 16:50:10][357967979936084][6634 ms][DEBUG] END runCmdUntilRes#1 in 4793 ms [2025-09-09 16:50:10][357967979936084][6635 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:50:12][357967979936084][0 ms][INFO] === Request start === [2025-09-09 16:50:12][357967979936084][1 ms][DEBUG] START check_scloud [2025-09-09 16:50:12][357967979936084][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:50:12][357967979936084][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 13876 24419 24455752 206812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:50:12][357967979936084][287 ms][DEBUG] targetPkg: running [2025-09-09 16:50:12][357967979936084][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 16:50:12][357967979936084][287 ms][DEBUG] START check_boot_completed [2025-09-09 16:50:12][357967979936084][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:50:12][357967979936084][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:50:12][357967979936084][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:50:12][357967979936084][396 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:50:12][357967979936084][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:50:12][357967979936084][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:50:13][357967979936084][552 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3184\nsuccessfulTxPacketsPerSecond: 0.36667358911790665\nretriedTxPackets: 797\nretriedTxPacketsPerSecond: 0.11681636467473132\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2875\nsuccessfulRxPacketsPerSecond: 0.32124500285551116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:50:13][357967979936084][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:50:13][357967979936084][912 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.302/247.302/247.302/0.000 ms\n [2025-09-09 16:50:13][357967979936084][912 ms][DEBUG] check_internet: online [2025-09-09 16:50:13][357967979936084][912 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:50:13][357967979936084][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967979936084\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9357\"}'\'' -e'"" [2025-09-09 16:50:13][357967979936084][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:50:13][357967979936084][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967979936084\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9357\"}'\'' -e'"" [2025-09-09 16:50:18][357967979936084][5660 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_070f7596-4ace-4374-8b91-f612301d8f4f","id":"QR_070f7596-4ace-4374-8b91-f612301d8f4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:50:18][357967979936084][5817 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 16:50:18][357967979936084][5817 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 16:50:18][357967979936084][5817 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:51:03][351307280880737][0 ms][INFO] === Request start === [2025-09-09 16:51:03][351307280880737][1 ms][DEBUG] START check_scloud [2025-09-09 16:51:03][351307280880737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:51:04][351307280880737][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 13876 24419 24569608 217700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:51:04][351307280880737][270 ms][DEBUG] targetPkg: running [2025-09-09 16:51:04][351307280880737][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 16:51:04][351307280880737][270 ms][DEBUG] START check_boot_completed [2025-09-09 16:51:04][351307280880737][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:51:04][351307280880737][301 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:51:04][351307280880737][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:51:04][351307280880737][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:51:04][351307280880737][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:51:04][351307280880737][348 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:51:04][351307280880737][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351307280880737\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1777\"}'\'' -e'"" [2025-09-09 16:51:04][351307280880737][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:51:04][351307280880737][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351307280880737\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1777\"}'\'' -e'"" [2025-09-09 16:51:07][351307280880737][3847 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ac9e101-9a83-42fe-9bcf-892093004d35","id":"QR_8ac9e101-9a83-42fe-9bcf-892093004d35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:51:07][351307280880737][4003 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-09 16:51:07][351307280880737][4003 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 16:51:07][351307280880737][4003 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:51:10][351307280880737][0 ms][INFO] === Request start === [2025-09-09 16:51:10][351307280880737][1 ms][DEBUG] START check_scloud [2025-09-09 16:51:10][351307280880737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:51:10][351307280880737][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 13876 24419 24740752 229416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:51:10][351307280880737][252 ms][DEBUG] targetPkg: running [2025-09-09 16:51:10][351307280880737][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-09 16:51:10][351307280880737][252 ms][DEBUG] START check_boot_completed [2025-09-09 16:51:10][351307280880737][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:51:10][351307280880737][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:51:10][351307280880737][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:51:10][351307280880737][392 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 16:51:10][351307280880737][392 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 16:51:10][351307280880737][392 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:51:10][351307280880737][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351307280880737\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9663\"}'\'' -e'"" [2025-09-09 16:51:10][351307280880737][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:51:10][351307280880737][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351307280880737\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9663\"}'\'' -e'"" [2025-09-09 16:51:14][351307280880737][4626 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6457d6b6-4d25-494c-aa5b-7c33ff5ff5eb","id":"QR_6457d6b6-4d25-494c-aa5b-7c33ff5ff5eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:51:15][351307280880737][4782 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 16:51:15][351307280880737][4782 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-09-09 16:51:15][351307280880737][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:51:19][357435846323381][0 ms][INFO] === Request start === [2025-09-09 16:51:19][357435846323381][1 ms][DEBUG] START check_scloud [2025-09-09 16:51:19][357435846323381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:51:19][357435846323381][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 13876 24419 24889496 240468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:51:19][357435846323381][307 ms][DEBUG] targetPkg: running [2025-09-09 16:51:19][357435846323381][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-09 16:51:19][357435846323381][307 ms][DEBUG] START check_boot_completed [2025-09-09 16:51:19][357435846323381][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:51:19][357435846323381][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:51:19][357435846323381][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:51:19][357435846323381][416 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:51:19][357435846323381][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:51:19][357435846323381][416 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:51:19][357435846323381][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846323381\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2295\"}'\'' -e'"" [2025-09-09 16:51:19][357435846323381][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:51:19][357435846323381][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846323381\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2295\"}'\'' -e'"" [2025-09-09 16:51:23][357435846323381][4180 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 16:51:23][357435846323381][4180 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-09 16:51:23][357435846323381][4180 ms][WARN] Detected error: Process with pid 13876 either refused to load frida-agent, or terminated during injectionProcess with pid 13876 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 16:51:23][357435846323381][4180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 16:51:23][357435846323381][4431 ms][DEBUG] SU: done in 251 ms; outsystem 24718 24419 12436672 193324 ep_poll 0 S system_server\n [2025-09-09 16:51:23][357435846323381][4431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 16:51:23][357435846323381][4571 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 16:51:23][357435846323381][4571 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 16:51:23][357435846323381][4571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 16:51:24][357435846323381][4696 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 16:51:24][357435846323381][4696 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 16:51:24][357435846323381][4868 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 16:51:26][357435846323381][6883 ms][DEBUG] START check_boot_completed [2025-09-09 16:51:26][357435846323381][6883 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:51:26][357435846323381][6930 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:51:26][357435846323381][6930 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:51:26][357435846323381][6994 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 16:51:26][357435846323381][6994 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 16:51:29][357435846323381][10007 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 16:51:29][357435846323381][10007 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846323381\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2295\"}'\'' -e'"" [2025-09-09 16:51:34][357435846323381][14662 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8332ef0-03e5-4164-9dd0-9f675f2726c8","id":"QR_d8332ef0-03e5-4164-9dd0-9f675f2726c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:51:34][357435846323381][14819 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 16:51:34][357435846323381][14819 ms][DEBUG] END runCmdUntilRes#2 in 4812 ms [2025-09-09 16:51:34][357435846323381][14819 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:51:36][357435846323381][0 ms][INFO] === Request start === [2025-09-09 16:51:36][357435846323381][1 ms][DEBUG] START check_scloud [2025-09-09 16:51:36][357435846323381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:51:36][357435846323381][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 15266 24419 23522300 124336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:51:36][357435846323381][304 ms][DEBUG] targetPkg: running [2025-09-09 16:51:36][357435846323381][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 16:51:36][357435846323381][304 ms][DEBUG] START check_boot_completed [2025-09-09 16:51:36][357435846323381][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:51:36][357435846323381][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:51:36][357435846323381][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:51:36][357435846323381][414 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:51:36][357435846323381][414 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 16:51:36][357435846323381][414 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:51:36][357435846323381][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846323381\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3081\"}'\'' -e'"" [2025-09-09 16:51:36][357435846323381][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:51:36][357435846323381][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846323381\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3081\"}'\'' -e'"" [2025-09-09 16:51:41][357435846323381][4819 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9d440a4-d17d-479f-8e58-1adf10c0ebc1","id":"QR_b9d440a4-d17d-479f-8e58-1adf10c0ebc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:51:41][357435846323381][4975 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 16:51:41][357435846323381][4975 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 16:51:41][357435846323381][4975 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:53:03][352907210323879][1 ms][INFO] === Request start === [2025-09-09 16:53:03][352907210323879][1 ms][DEBUG] START check_scloud [2025-09-09 16:53:03][352907210323879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:53:03][352907210323879][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 15266 24419 23561176 137712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:53:03][352907210323879][261 ms][DEBUG] targetPkg: running [2025-09-09 16:53:03][352907210323879][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 16:53:03][352907210323879][261 ms][DEBUG] START check_boot_completed [2025-09-09 16:53:03][352907210323879][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:53:03][352907210323879][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:53:03][352907210323879][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:53:03][352907210323879][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:53:03][352907210323879][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:53:03][352907210323879][354 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:53:03][352907210323879][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352907210323879\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7888\"}'\'' -e'"" [2025-09-09 16:53:03][352907210323879][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:53:03][352907210323879][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352907210323879\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7888\"}'\'' -e'"" [2025-09-09 16:53:07][352907210323879][4806 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ea08250-84bf-459c-b024-49087a556bef","id":"QR_9ea08250-84bf-459c-b024-49087a556bef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:53:08][352907210323879][4963 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-09 16:53:08][352907210323879][4963 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-09 16:53:08][352907210323879][4963 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:53:10][352907210323879][0 ms][INFO] === Request start === [2025-09-09 16:53:10][352907210323879][1 ms][DEBUG] START check_scloud [2025-09-09 16:53:10][352907210323879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:53:10][352907210323879][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 15266 24419 23703712 149368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:53:10][352907210323879][259 ms][DEBUG] targetPkg: running [2025-09-09 16:53:10][352907210323879][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 16:53:10][352907210323879][259 ms][DEBUG] START check_boot_completed [2025-09-09 16:53:10][352907210323879][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:53:10][352907210323879][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:53:10][352907210323879][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:53:10][352907210323879][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:53:10][352907210323879][353 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:53:10][352907210323879][353 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:53:10][352907210323879][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352907210323879\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9351\"}'\'' -e'"" [2025-09-09 16:53:10][352907210323879][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:53:10][352907210323879][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352907210323879\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9351\"}'\'' -e'"" [2025-09-09 16:53:15][352907210323879][4851 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec49ee53-dada-4db7-8864-941e43c7c6a7","id":"QR_ec49ee53-dada-4db7-8864-941e43c7c6a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:53:15][352907210323879][5008 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-09 16:53:15][352907210323879][5008 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-09 16:53:15][352907210323879][5008 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:53:19][355490898428325][0 ms][INFO] === Request start === [2025-09-09 16:53:19][355490898428325][1 ms][DEBUG] START check_scloud [2025-09-09 16:53:19][355490898428325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:53:20][355490898428325][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 15266 24419 23833960 160284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:53:20][355490898428325][294 ms][DEBUG] targetPkg: running [2025-09-09 16:53:20][355490898428325][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 16:53:20][355490898428325][294 ms][DEBUG] START check_boot_completed [2025-09-09 16:53:20][355490898428325][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:53:20][355490898428325][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:53:20][355490898428325][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:53:20][355490898428325][389 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 16:53:20][355490898428325][389 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 16:53:20][355490898428325][389 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:53:20][355490898428325][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490898428325\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9744\"}'\'' -e'"" [2025-09-09 16:53:20][355490898428325][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:53:20][355490898428325][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490898428325\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9744\"}'\'' -e'"" [2025-09-09 16:53:23][355490898428325][3652 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f51d365c-7d6e-41a7-aa94-52e26aa54758","id":"QR_f51d365c-7d6e-41a7-aa94-52e26aa54758","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:53:23][355490898428325][3808 ms][DEBUG] proc_open done in 3419 ms; code=255; res.len=3343 [2025-09-09 16:53:23][355490898428325][3808 ms][DEBUG] END runCmdUntilRes#1 in 3419 ms [2025-09-09 16:53:23][355490898428325][3808 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:53:25][355490898428325][0 ms][INFO] === Request start === [2025-09-09 16:53:25][355490898428325][1 ms][DEBUG] START check_scloud [2025-09-09 16:53:25][355490898428325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:53:26][355490898428325][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 15266 24419 23976960 171576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:53:26][355490898428325][316 ms][DEBUG] targetPkg: running [2025-09-09 16:53:26][355490898428325][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 16:53:26][355490898428325][316 ms][DEBUG] START check_boot_completed [2025-09-09 16:53:26][355490898428325][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:53:26][355490898428325][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:53:26][355490898428325][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:53:26][355490898428325][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 16:53:26][355490898428325][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 16:53:26][355490898428325][426 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:53:26][355490898428325][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490898428325\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5895\"}'\'' -e'"" [2025-09-09 16:53:26][355490898428325][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:53:26][355490898428325][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490898428325\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5895\"}'\'' -e'"" [2025-09-09 16:53:31][355490898428325][5299 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7891c158-fa9e-4f2b-977f-8f7b2826fb0c","id":"QR_7891c158-fa9e-4f2b-977f-8f7b2826fb0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:53:31][355490898428325][5455 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-09-09 16:53:31][355490898428325][5455 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-09 16:53:31][355490898428325][5455 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:54:03][350481172503664][0 ms][INFO] === Request start === [2025-09-09 16:54:03][350481172503664][1 ms][DEBUG] START check_scloud [2025-09-09 16:54:03][350481172503664][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:54:04][350481172503664][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 15266 24419 24088732 183636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:54:04][350481172503664][245 ms][DEBUG] targetPkg: running [2025-09-09 16:54:04][350481172503664][245 ms][DEBUG] END check_scloud in 245 ms [2025-09-09 16:54:04][350481172503664][245 ms][DEBUG] START check_boot_completed [2025-09-09 16:54:04][350481172503664][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:54:04][350481172503664][291 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:54:04][350481172503664][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:54:04][350481172503664][385 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 16:54:04][350481172503664][385 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 16:54:04][350481172503664][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:54:04][350481172503664][479 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3402\nsuccessfulTxPacketsPerSecond: 0.7241418255017505\nretriedTxPackets: 876\nretriedTxPacketsPerSecond: 0.2624183679570564\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3054\nsuccessfulRxPacketsPerSecond: 0.594593517269786\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:54:04][350481172503664][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:54:04][350481172503664][869 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.763/276.763/276.763/0.000 ms\n [2025-09-09 16:54:04][350481172503664][870 ms][DEBUG] check_internet: online [2025-09-09 16:54:04][350481172503664][870 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:54:04][350481172503664][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481172503664\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7163\"}'\'' -e'"" [2025-09-09 16:54:04][350481172503664][870 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:54:04][350481172503664][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481172503664\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7163\"}'\'' -e'"" [2025-09-09 16:54:09][350481172503664][5212 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b03a68e4-8250-41b3-a84e-7ee96b789bdc","id":"QR_b03a68e4-8250-41b3-a84e-7ee96b789bdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:54:09][350481172503664][5368 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-09-09 16:54:09][350481172503664][5368 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-09-09 16:54:09][350481172503664][5368 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:54:11][350481172503664][0 ms][INFO] === Request start === [2025-09-09 16:54:11][350481172503664][1 ms][DEBUG] START check_scloud [2025-09-09 16:54:11][350481172503664][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:54:11][350481172503664][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 15266 24419 24264100 194592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:54:11][350481172503664][310 ms][DEBUG] targetPkg: running [2025-09-09 16:54:11][350481172503664][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 16:54:11][350481172503664][310 ms][DEBUG] START check_boot_completed [2025-09-09 16:54:11][350481172503664][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:54:12][350481172503664][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:54:12][350481172503664][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:54:12][350481172503664][406 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 16:54:12][350481172503664][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 16:54:12][350481172503664][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 16:54:12][350481172503664][544 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3402\nsuccessfulTxPacketsPerSecond: 0.7241418255017505\nretriedTxPackets: 876\nretriedTxPacketsPerSecond: 0.2624183679570564\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3054\nsuccessfulRxPacketsPerSecond: 0.594593517269786\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 16:54:12][350481172503664][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 16:54:12][350481172503664][904 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.403/256.403/256.403/0.000 ms\n [2025-09-09 16:54:12][350481172503664][904 ms][DEBUG] check_internet: online [2025-09-09 16:54:12][350481172503664][904 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:54:12][350481172503664][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481172503664\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1553\"}'\'' -e'"" [2025-09-09 16:54:12][350481172503664][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:54:12][350481172503664][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481172503664\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1553\"}'\'' -e'"" [2025-09-09 16:54:17][350481172503664][5746 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9aeca45b-4366-4740-a927-7c00d7e342cf","id":"QR_9aeca45b-4366-4740-a927-7c00d7e342cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:54:17][350481172503664][5902 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 16:54:17][350481172503664][5903 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 16:54:17][350481172503664][5903 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:59:05][359097840277357][1 ms][INFO] === Request start === [2025-09-09 16:59:05][359097840277357][1 ms][DEBUG] START check_scloud [2025-09-09 16:59:05][359097840277357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:59:05][359097840277357][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 15266 24419 24351140 205320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:59:05][359097840277357][325 ms][DEBUG] targetPkg: running [2025-09-09 16:59:05][359097840277357][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 16:59:05][359097840277357][325 ms][DEBUG] START check_boot_completed [2025-09-09 16:59:05][359097840277357][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:59:05][359097840277357][356 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 16:59:05][359097840277357][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:59:05][359097840277357][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:59:05][359097840277357][403 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 16:59:05][359097840277357][403 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:59:05][359097840277357][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840277357\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6972\"}'\'' -e'"" [2025-09-09 16:59:05][359097840277357][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:59:05][359097840277357][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840277357\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6972\"}'\'' -e'"" [2025-09-09 16:59:11][359097840277357][6558 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8513d4d4-2f8e-4ac3-a608-2d0cb2483920","id":"QR_8513d4d4-2f8e-4ac3-a608-2d0cb2483920","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:59:11][359097840277357][6714 ms][DEBUG] proc_open done in 6311 ms; code=255; res.len=3343 [2025-09-09 16:59:11][359097840277357][6714 ms][DEBUG] END runCmdUntilRes#1 in 6311 ms [2025-09-09 16:59:11][359097840277357][6715 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:59:15][359097840277357][0 ms][INFO] === Request start === [2025-09-09 16:59:15][359097840277357][1 ms][DEBUG] START check_scloud [2025-09-09 16:59:15][359097840277357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:59:15][359097840277357][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 15266 24419 24491564 213752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:59:15][359097840277357][324 ms][DEBUG] targetPkg: running [2025-09-09 16:59:15][359097840277357][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 16:59:15][359097840277357][324 ms][DEBUG] START check_boot_completed [2025-09-09 16:59:15][359097840277357][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:59:15][359097840277357][369 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 16:59:15][359097840277357][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:59:15][359097840277357][431 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 16:59:15][359097840277357][431 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-09 16:59:15][359097840277357][431 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:59:15][359097840277357][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840277357\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2722\"}'\'' -e'"" [2025-09-09 16:59:15][359097840277357][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:59:15][359097840277357][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840277357\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2722\"}'\'' -e'"" [2025-09-09 16:59:19][359097840277357][4149 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b49387cc-82ca-4eda-af74-8471e2fb4a47","id":"QR_b49387cc-82ca-4eda-af74-8471e2fb4a47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:59:19][359097840277357][4305 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-09 16:59:19][359097840277357][4305 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-09 16:59:19][359097840277357][4305 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:59:22][357042149240096][0 ms][INFO] === Request start === [2025-09-09 16:59:22][357042149240096][1 ms][DEBUG] START check_scloud [2025-09-09 16:59:22][357042149240096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:59:22][357042149240096][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 15266 24419 24645300 225144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:59:22][357042149240096][267 ms][DEBUG] targetPkg: running [2025-09-09 16:59:22][357042149240096][267 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 16:59:22][357042149240096][267 ms][DEBUG] START check_boot_completed [2025-09-09 16:59:22][357042149240096][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:59:22][357042149240096][314 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 16:59:22][357042149240096][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:59:23][357042149240096][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:59:23][357042149240096][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:59:23][357042149240096][361 ms][DEBUG] rawBody.length=1160 [2025-09-09 16:59:23][357042149240096][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149240096\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7829\"}'\'' -e'"" [2025-09-09 16:59:23][357042149240096][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:59:23][357042149240096][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149240096\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7829\"}'\'' -e'"" [2025-09-09 16:59:27][357042149240096][5031 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de39df50-3a5a-48f7-9fad-1aac44f2ff15","id":"QR_de39df50-3a5a-48f7-9fad-1aac44f2ff15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:59:27][357042149240096][5188 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-09 16:59:27][357042149240096][5188 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-09 16:59:27][357042149240096][5188 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 16:59:31][357042149240096][0 ms][INFO] === Request start === [2025-09-09 16:59:31][357042149240096][1 ms][DEBUG] START check_scloud [2025-09-09 16:59:31][357042149240096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 16:59:31][357042149240096][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 15266 24419 24791960 236072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 16:59:31][357042149240096][318 ms][DEBUG] targetPkg: running [2025-09-09 16:59:31][357042149240096][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 16:59:31][357042149240096][318 ms][DEBUG] START check_boot_completed [2025-09-09 16:59:31][357042149240096][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:59:31][357042149240096][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:59:31][357042149240096][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:59:31][357042149240096][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:59:31][357042149240096][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 16:59:31][357042149240096][411 ms][DEBUG] rawBody.length=1150 [2025-09-09 16:59:31][357042149240096][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149240096\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8244\"}'\'' -e'"" [2025-09-09 16:59:31][357042149240096][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 16:59:31][357042149240096][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149240096\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8244\"}'\'' -e'"" [2025-09-09 16:59:35][357042149240096][4161 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 16:59:35][357042149240096][4161 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-09 16:59:35][357042149240096][4161 ms][WARN] Detected error: Process with pid 15266 either refused to load frida-agent, or terminated during injectionProcess with pid 15266 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 16:59:35][357042149240096][4161 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 16:59:35][357042149240096][4411 ms][DEBUG] SU: done in 250 ms; outsystem 24718 24419 12420604 207024 ep_poll 0 S system_server\n [2025-09-09 16:59:35][357042149240096][4411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 16:59:35][357042149240096][4551 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 16:59:35][357042149240096][4551 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 16:59:35][357042149240096][4551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 16:59:36][357042149240096][4707 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 16:59:36][357042149240096][4708 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 16:59:36][357042149240096][4910 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 16:59:38][357042149240096][6925 ms][DEBUG] START check_boot_completed [2025-09-09 16:59:38][357042149240096][6926 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 16:59:38][357042149240096][6972 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 16:59:38][357042149240096][6972 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 16:59:38][357042149240096][7019 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 16:59:38][357042149240096][7020 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 16:59:41][357042149240096][10034 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 16:59:41][357042149240096][10034 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149240096\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8244\"}'\'' -e'"" [2025-09-09 16:59:44][357042149240096][13237 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_115ff6d5-0169-4dd5-995a-e8b7d5e152bf","id":"QR_115ff6d5-0169-4dd5-995a-e8b7d5e152bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 16:59:44][357042149240096][13393 ms][DEBUG] proc_open done in 3359 ms; code=255; res.len=3343 [2025-09-09 16:59:44][357042149240096][13393 ms][DEBUG] END runCmdUntilRes#2 in 3359 ms [2025-09-09 16:59:44][357042149240096][13393 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:00:05][352665180825717][0 ms][INFO] === Request start === [2025-09-09 17:00:05][352665180825717][1 ms][DEBUG] START check_scloud [2025-09-09 17:00:05][352665180825717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:00:05][352665180825717][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17412 24419 23458952 126696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:00:05][352665180825717][310 ms][DEBUG] targetPkg: running [2025-09-09 17:00:05][352665180825717][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 17:00:05][352665180825717][310 ms][DEBUG] START check_boot_completed [2025-09-09 17:00:05][352665180825717][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:00:05][352665180825717][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:00:05][352665180825717][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:00:05][352665180825717][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 17:00:05][352665180825717][419 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 17:00:05][352665180825717][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:00:05][352665180825717][544 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3568\nsuccessfulTxPacketsPerSecond: 0.6316350214984209\nretriedTxPackets: 922\nretriedTxPacketsPerSecond: 0.17503139149956243\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3197\nsuccessfulRxPacketsPerSecond: 0.5441193257486397\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:00:05][352665180825717][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:00:07][352665180825717][1934 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.950/300.950/300.950/0.000 ms\n [2025-09-09 17:00:07][352665180825717][1934 ms][DEBUG] check_internet: online [2025-09-09 17:00:07][352665180825717][1934 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:00:07][352665180825717][1934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665180825717\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9557\"}'\'' -e'"" [2025-09-09 17:00:07][352665180825717][1934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:00:07][352665180825717][1934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665180825717\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9557\"}'\'' -e'"" [2025-09-09 17:00:10][352665180825717][5668 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a9872c9-6e39-4a5d-a2af-1a0138d826fc","id":"QR_1a9872c9-6e39-4a5d-a2af-1a0138d826fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:00:10][352665180825717][5824 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-09-09 17:00:10][352665180825717][5824 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-09-09 17:00:10][352665180825717][5824 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:00:13][352665180825717][1 ms][INFO] === Request start === [2025-09-09 17:00:13][352665180825717][1 ms][DEBUG] START check_scloud [2025-09-09 17:00:13][352665180825717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:00:13][352665180825717][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 17412 24419 23545696 137828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:00:13][352665180825717][312 ms][DEBUG] targetPkg: running [2025-09-09 17:00:13][352665180825717][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 17:00:13][352665180825717][312 ms][DEBUG] START check_boot_completed [2025-09-09 17:00:13][352665180825717][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:00:13][352665180825717][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:00:13][352665180825717][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:00:13][352665180825717][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:00:13][352665180825717][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:00:13][352665180825717][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:00:13][352665180825717][499 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3568\nsuccessfulTxPacketsPerSecond: 0.6316350214984209\nretriedTxPackets: 922\nretriedTxPacketsPerSecond: 0.17503139149956243\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3197\nsuccessfulRxPacketsPerSecond: 0.5441193257486397\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:00:13][352665180825717][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:00:14][352665180825717][921 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=334 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 334.861/334.861/334.861/0.000 ms\n [2025-09-09 17:00:14][352665180825717][921 ms][DEBUG] check_internet: online [2025-09-09 17:00:14][352665180825717][921 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:00:14][352665180825717][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665180825717\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1371\"}'\'' -e'"" [2025-09-09 17:00:14][352665180825717][921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:00:14][352665180825717][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665180825717\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1371\"}'\'' -e'"" [2025-09-09 17:00:19][352665180825717][6092 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f635662f-bc0f-4181-bfac-3cec4d163127","id":"QR_f635662f-bc0f-4181-bfac-3cec4d163127","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:00:19][352665180825717][6248 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-09 17:00:19][352665180825717][6248 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-09 17:00:19][352665180825717][6248 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:01:03][352288966334786][0 ms][INFO] === Request start === [2025-09-09 17:01:03][352288966334786][1 ms][DEBUG] START check_scloud [2025-09-09 17:01:03][352288966334786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:01:04][352288966334786][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 17412 24419 23670360 149460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:01:04][352288966334786][291 ms][DEBUG] targetPkg: running [2025-09-09 17:01:04][352288966334786][291 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 17:01:04][352288966334786][291 ms][DEBUG] START check_boot_completed [2025-09-09 17:01:04][352288966334786][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:01:04][352288966334786][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:01:04][352288966334786][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:01:04][352288966334786][400 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:01:04][352288966334786][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:01:04][352288966334786][400 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:01:04][352288966334786][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966334786\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6950\"}'\'' -e'"" [2025-09-09 17:01:04][352288966334786][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:01:04][352288966334786][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966334786\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6950\"}'\'' -e'"" [2025-09-09 17:01:08][352288966334786][4884 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_933ea2b9-627b-4680-ae1a-d949209fbd57","id":"QR_933ea2b9-627b-4680-ae1a-d949209fbd57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:01:08][352288966334786][5040 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 17:01:08][352288966334786][5040 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-09 17:01:08][352288966334786][5040 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:01:11][352288966334786][1 ms][INFO] === Request start === [2025-09-09 17:01:11][352288966334786][1 ms][DEBUG] START check_scloud [2025-09-09 17:01:11][352288966334786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:01:11][352288966334786][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 17412 24419 23832316 160552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:01:11][352288966334786][258 ms][DEBUG] targetPkg: running [2025-09-09 17:01:11][352288966334786][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 17:01:11][352288966334786][258 ms][DEBUG] START check_boot_completed [2025-09-09 17:01:11][352288966334786][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:01:11][352288966334786][304 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 17:01:11][352288966334786][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:01:11][352288966334786][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:01:11][352288966334786][351 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 17:01:11][352288966334786][351 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:01:11][352288966334786][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966334786\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1462\"}'\'' -e'"" [2025-09-09 17:01:11][352288966334786][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:01:11][352288966334786][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966334786\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1462\"}'\'' -e'"" [2025-09-09 17:01:16][352288966334786][5193 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43fa3b98-39f4-452b-81e1-3273f425e74a","id":"QR_43fa3b98-39f4-452b-81e1-3273f425e74a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:01:16][352288966334786][5349 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-09 17:01:16][352288966334786][5349 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 17:01:16][352288966334786][5349 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:02:04][350455582343556][0 ms][INFO] === Request start === [2025-09-09 17:02:04][350455582343556][1 ms][DEBUG] START check_scloud [2025-09-09 17:02:04][350455582343556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:02:04][350455582343556][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 17412 24419 23936816 172720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:02:04][350455582343556][304 ms][DEBUG] targetPkg: running [2025-09-09 17:02:04][350455582343556][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 17:02:04][350455582343556][304 ms][DEBUG] START check_boot_completed [2025-09-09 17:02:04][350455582343556][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:02:04][350455582343556][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:02:04][350455582343556][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:02:04][350455582343556][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:02:04][350455582343556][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:02:04][350455582343556][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:02:04][350455582343556][554 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3876\nsuccessfulTxPacketsPerSecond: 0.9955587735233083\nretriedTxPackets: 1015\nretriedTxPacketsPerSecond: 0.3006070322651548\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3454\nsuccessfulRxPacketsPerSecond: 0.8307097558295138\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:02:04][350455582343556][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:02:05][350455582343556][976 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.496/304.496/304.496/0.000 ms\n [2025-09-09 17:02:05][350455582343556][976 ms][DEBUG] check_internet: online [2025-09-09 17:02:05][350455582343556][976 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:02:05][350455582343556][976 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582343556\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5397\"}'\'' -e'"" [2025-09-09 17:02:05][350455582343556][976 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:02:05][350455582343556][976 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582343556\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5397\"}'\'' -e'"" [2025-09-09 17:02:10][350455582343556][6443 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f23721a0-94e5-4351-80f0-a90d3e0d811a","id":"QR_f23721a0-94e5-4351-80f0-a90d3e0d811a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:02:10][350455582343556][6599 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-09 17:02:10][350455582343556][6599 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-09 17:02:10][350455582343556][6599 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:02:14][350455582343556][0 ms][INFO] === Request start === [2025-09-09 17:02:14][350455582343556][1 ms][DEBUG] START check_scloud [2025-09-09 17:02:14][350455582343556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:02:14][350455582343556][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 17412 24419 24073272 183640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:02:14][350455582343556][264 ms][DEBUG] targetPkg: running [2025-09-09 17:02:14][350455582343556][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 17:02:14][350455582343556][264 ms][DEBUG] START check_boot_completed [2025-09-09 17:02:14][350455582343556][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:02:14][350455582343556][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:02:14][350455582343556][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:02:14][350455582343556][373 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:02:14][350455582343556][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:02:14][350455582343556][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:02:14][350455582343556][482 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3876\nsuccessfulTxPacketsPerSecond: 0.9955587735233083\nretriedTxPackets: 1015\nretriedTxPacketsPerSecond: 0.3006070322651548\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3454\nsuccessfulRxPacketsPerSecond: 0.8307097558295138\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:02:14][350455582343556][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:02:15][350455582343556][951 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.134/323.134/323.134/0.000 ms\n [2025-09-09 17:02:15][350455582343556][951 ms][DEBUG] check_internet: online [2025-09-09 17:02:15][350455582343556][951 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:02:15][350455582343556][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582343556\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6435\"}'\'' -e'"" [2025-09-09 17:02:15][350455582343556][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:02:15][350455582343556][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582343556\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6435\"}'\'' -e'"" [2025-09-09 17:02:18][350455582343556][4543 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35eff7c4-3bb1-4480-8e53-ac466430db69","id":"QR_35eff7c4-3bb1-4480-8e53-ac466430db69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:02:19][350455582343556][4700 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-09-09 17:02:19][350455582343556][4700 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-09-09 17:02:19][350455582343556][4700 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:04:03][355506801157832][1 ms][INFO] === Request start === [2025-09-09 17:04:03][355506801157832][1 ms][DEBUG] START check_scloud [2025-09-09 17:04:03][355506801157832][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:04:03][355506801157832][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 17412 24419 24172792 196220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:04:03][355506801157832][300 ms][DEBUG] targetPkg: running [2025-09-09 17:04:03][355506801157832][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 17:04:03][355506801157832][300 ms][DEBUG] START check_boot_completed [2025-09-09 17:04:03][355506801157832][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:04:03][355506801157832][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:04:03][355506801157832][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:04:03][355506801157832][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:04:03][355506801157832][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:04:03][355506801157832][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:04:03][355506801157832][503 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3876\nsuccessfulTxPacketsPerSecond: 0.9955587735233083\nretriedTxPackets: 1015\nretriedTxPacketsPerSecond: 0.3006070322651548\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3454\nsuccessfulRxPacketsPerSecond: 0.8307097558295138\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:04:03][355506801157832][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:04:04][355506801157832][925 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.649/322.649/322.649/0.000 ms\n [2025-09-09 17:04:04][355506801157832][925 ms][DEBUG] check_internet: online [2025-09-09 17:04:04][355506801157832][925 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:04:04][355506801157832][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506801157832\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7972\"}'\'' -e'"" [2025-09-09 17:04:04][355506801157832][926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:04:04][355506801157832][926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506801157832\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7972\"}'\'' -e'"" [2025-09-09 17:04:09][355506801157832][5689 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b77f7558-213e-43e0-8950-f07492756761","id":"QR_b77f7558-213e-43e0-8950-f07492756761","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:04:09][355506801157832][5845 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-09 17:04:09][355506801157832][5845 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-09 17:04:09][355506801157832][5845 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:04:11][355506801157832][0 ms][INFO] === Request start === [2025-09-09 17:04:11][355506801157832][1 ms][DEBUG] START check_scloud [2025-09-09 17:04:11][355506801157832][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:04:11][355506801157832][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 17412 24419 24307072 207136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:04:11][355506801157832][303 ms][DEBUG] targetPkg: running [2025-09-09 17:04:11][355506801157832][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 17:04:11][355506801157832][303 ms][DEBUG] START check_boot_completed [2025-09-09 17:04:11][355506801157832][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:04:11][355506801157832][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:04:11][355506801157832][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:04:11][355506801157832][412 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 17:04:11][355506801157832][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:04:11][355506801157832][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:04:12][355506801157832][537 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3876\nsuccessfulTxPacketsPerSecond: 0.9955587735233083\nretriedTxPackets: 1015\nretriedTxPacketsPerSecond: 0.3006070322651548\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3454\nsuccessfulRxPacketsPerSecond: 0.8307097558295138\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:04:12][355506801157832][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:04:12][355506801157832][974 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.853/296.853/296.853/0.000 ms\n [2025-09-09 17:04:12][355506801157832][974 ms][DEBUG] check_internet: online [2025-09-09 17:04:12][355506801157832][974 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:04:12][355506801157832][974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506801157832\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1901\"}'\'' -e'"" [2025-09-09 17:04:12][355506801157832][974 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:04:12][355506801157832][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506801157832\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1901\"}'\'' -e'"" [2025-09-09 17:04:17][355506801157832][5926 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74e1e5c0-7fd5-4a10-a313-4f6eb3c6a4e0","id":"QR_74e1e5c0-7fd5-4a10-a313-4f6eb3c6a4e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:04:17][355506801157832][6082 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 17:04:17][355506801157832][6082 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 17:04:17][355506801157832][6082 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:08:03][353475121987249][1 ms][INFO] === Request start === [2025-09-09 17:08:03][353475121987249][1 ms][DEBUG] START check_scloud [2025-09-09 17:08:03][353475121987249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:08:04][353475121987249][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 17412 24419 24462912 218616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:08:04][353475121987249][251 ms][DEBUG] targetPkg: running [2025-09-09 17:08:04][353475121987249][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 17:08:04][353475121987249][251 ms][DEBUG] START check_boot_completed [2025-09-09 17:08:04][353475121987249][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:08:04][353475121987249][282 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:08:04][353475121987249][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:08:04][353475121987249][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:08:04][353475121987249][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 17:08:04][353475121987249][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:08:04][353475121987249][438 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4008\nsuccessfulTxPacketsPerSecond: 0.43836926632925516\nretriedTxPackets: 1057\nretriedTxPacketsPerSecond: 0.1394811301956721\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3565\nsuccessfulRxPacketsPerSecond: 0.3686287012314191\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:08:04][353475121987249][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:08:05][353475121987249][1750 ms][DEBUG] SU: done in 1312 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.127/302.127/302.127/0.000 ms\n [2025-09-09 17:08:05][353475121987249][1751 ms][DEBUG] check_internet: online [2025-09-09 17:08:05][353475121987249][1751 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:08:05][353475121987249][1751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121987249\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5481\"}'\'' -e'"" [2025-09-09 17:08:05][353475121987249][1751 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:08:05][353475121987249][1751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121987249\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5481\"}'\'' -e'"" [2025-09-09 17:08:09][353475121987249][5359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1584e7b-1a2f-41e1-95f8-c134e3fdf5ff","id":"QR_f1584e7b-1a2f-41e1-95f8-c134e3fdf5ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:08:09][353475121987249][5515 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-09-09 17:08:09][353475121987249][5515 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-09 17:08:09][353475121987249][5515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:08:11][353475121987249][0 ms][INFO] === Request start === [2025-09-09 17:08:11][353475121987249][1 ms][DEBUG] START check_scloud [2025-09-09 17:08:11][353475121987249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:08:11][353475121987249][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 17412 24419 24623816 230404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:08:11][353475121987249][309 ms][DEBUG] targetPkg: running [2025-09-09 17:08:11][353475121987249][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 17:08:11][353475121987249][309 ms][DEBUG] START check_boot_completed [2025-09-09 17:08:11][353475121987249][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:08:12][353475121987249][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:08:12][353475121987249][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:08:12][353475121987249][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:08:12][353475121987249][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:08:12][353475121987249][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:08:12][353475121987249][528 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=218374 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4008\nsuccessfulTxPacketsPerSecond: 0.43836926632925516\nretriedTxPackets: 1057\nretriedTxPacketsPerSecond: 0.1394811301956721\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3565\nsuccessfulRxPacketsPerSecond: 0.3686287012314191\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:08:12][353475121987249][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:08:12][353475121987249][980 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.707/322.707/322.707/0.000 ms\n [2025-09-09 17:08:12][353475121987249][980 ms][DEBUG] check_internet: online [2025-09-09 17:08:12][353475121987249][981 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:08:12][353475121987249][981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121987249\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8891\"}'\'' -e'"" [2025-09-09 17:08:12][353475121987249][981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:08:12][353475121987249][981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121987249\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8891\"}'\'' -e'"" [2025-09-09 17:08:17][353475121987249][5636 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_904a89b0-a28d-4bef-8fb2-ad8bde9f8080","id":"QR_904a89b0-a28d-4bef-8fb2-ad8bde9f8080","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:08:17][353475121987249][5792 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 17:08:17][353475121987249][5792 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 17:08:17][353475121987249][5792 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:17:04][353357977816864][1 ms][INFO] === Request start === [2025-09-09 17:17:04][353357977816864][1 ms][DEBUG] START check_scloud [2025-09-09 17:17:04][353357977816864][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:17:05][353357977816864][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17412 24419 24742528 241576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:17:05][353357977816864][308 ms][DEBUG] targetPkg: running [2025-09-09 17:17:05][353357977816864][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 17:17:05][353357977816864][308 ms][DEBUG] START check_boot_completed [2025-09-09 17:17:05][353357977816864][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:17:05][353357977816864][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:17:05][353357977816864][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:17:05][353357977816864][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:17:05][353357977816864][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 17:17:05][353357977816864][386 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:17:05][353357977816864][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977816864\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5901\"}'\'' -e'"" [2025-09-09 17:17:05][353357977816864][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:17:05][353357977816864][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977816864\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5901\"}'\'' -e'"" [2025-09-09 17:17:13][353357977816864][8228 ms][DEBUG] proc_open done in 7842 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 17:17:13][353357977816864][8228 ms][DEBUG] END runCmdUntilRes#1 in 7842 ms [2025-09-09 17:17:13][353357977816864][8228 ms][WARN] Detected error: Process with pid 17412 either refused to load frida-agent, or terminated during injectionProcess with pid 17412 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 17:17:13][353357977816864][8228 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 17:17:13][353357977816864][8509 ms][DEBUG] SU: done in 281 ms; out [2025-09-09 17:17:13][353357977816864][8509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 17:17:13][353357977816864][8728 ms][DEBUG] SU: done in 219 ms; out [2025-09-09 17:17:13][353357977816864][8728 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 17:17:13][353357977816864][8728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 17:17:13][353357977816864][9025 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 17:17:13][353357977816864][9025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 17:17:14][353357977816864][9431 ms][DEBUG] SU: done in 406 ms; out [2025-09-09 17:17:16][353357977816864][11446 ms][DEBUG] START check_boot_completed [2025-09-09 17:17:16][353357977816864][11446 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:17:16][353357977816864][11493 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:17:16][353357977816864][11493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:17:16][353357977816864][11555 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 17:17:16][353357977816864][11555 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 17:17:19][353357977816864][14570 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 17:17:19][353357977816864][14570 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977816864\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5901\"}'\'' -e'"" [2025-09-09 17:17:20][353357977816864][16039 ms][DEBUG] proc_open done in 1468 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 17:17:20][353357977816864][16039 ms][DEBUG] END runCmdUntilRes#2 in 1469 ms [2025-09-09 17:17:20][353357977816864][16039 ms][WARN] Detected error 2; Reboot the device [2025-09-09 17:17:20][353357977816864][16039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 17:17:21][353357977816864][16320 ms][DEBUG] SU: done in 281 ms; outsystem 19366 19015 7139720 115628 futex_wait_queue_me 0 S system_server\n [2025-09-09 17:17:21][353357977816864][16320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 17:17:21][353357977816864][16960 ms][DEBUG] SU: done in 640 ms; out [2025-09-09 17:18:04][353357977816864][0 ms][INFO] === Request start === [2025-09-09 17:18:04][353357977816864][1 ms][DEBUG] START check_scloud [2025-09-09 17:18:04][353357977816864][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:18:04][353357977816864][32 ms][DEBUG] SU: done in 31 ms; out [2025-09-09 17:18:04][353357977816864][32 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 17:18:04][353357977816864][63 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 17:18:04][353357977816864][63 ms][WARN] check_devices: no device [2025-09-09 17:18:04][353357977816864][63 ms][WARN] check_devices: no device [2025-09-09 17:18:04][353357977816864][63 ms][DEBUG] END check_scloud in 62 ms [2025-09-09 17:18:09][352546730734494][0 ms][INFO] === Request start === [2025-09-09 17:18:09][352546730734494][1 ms][DEBUG] START check_scloud [2025-09-09 17:18:09][352546730734494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:18:09][352546730734494][35 ms][DEBUG] SU: done in 34 ms; out [2025-09-09 17:18:09][352546730734494][35 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 17:18:09][352546730734494][66 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-09 17:18:09][352546730734494][66 ms][WARN] check_devices: no device [2025-09-09 17:18:09][352546730734494][66 ms][WARN] check_devices: no device [2025-09-09 17:18:09][352546730734494][66 ms][DEBUG] END check_scloud in 66 ms [2025-09-09 17:19:05][353357977816864][1 ms][INFO] === Request start === [2025-09-09 17:19:05][353357977816864][1 ms][DEBUG] START check_scloud [2025-09-09 17:19:05][353357977816864][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:19:05][353357977816864][378 ms][DEBUG] SU: done in 377 ms; out [2025-09-09 17:19:05][353357977816864][378 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 17:19:05][353357977816864][425 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 17:19:05][353357977816864][425 ms][DEBUG] check_devices: device found [2025-09-09 17:19:05][353357977816864][425 ms][WARN] targetPkg: not running, restarting [2025-09-09 17:19:05][353357977816864][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 17:19:05][353357977816864][566 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 17:19:05][353357977816864][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 17:19:05][353357977816864][847 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 17:19:07][353357977816864][2862 ms][DEBUG] END check_scloud in 2860 ms [2025-09-09 17:19:07][353357977816864][2862 ms][DEBUG] START check_boot_completed [2025-09-09 17:19:07][353357977816864][2862 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:19:07][353357977816864][2909 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:19:07][353357977816864][2909 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:19:08][353357977816864][3019 ms][DEBUG] SU: done in 111 ms; out [2025-09-09 17:19:08][353357977816864][3020 ms][DEBUG] END check_boot_completed in 158 ms [2025-09-09 17:19:08][353357977816864][3020 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:19:08][353357977816864][3020 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977816864\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2767\"}'\'' -e'"" [2025-09-09 17:19:08][353357977816864][3020 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:19:08][353357977816864][3020 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977816864\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2767\"}'\'' -e'"" [2025-09-09 17:19:15][353357977816864][10188 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_deea7a6e-c6b8-4dd3-a05f-fb0bf0a7ae5f","id":"QR_deea7a6e-c6b8-4dd3-a05f-fb0bf0a7ae5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:19:15][353357977816864][10344 ms][DEBUG] proc_open done in 7324 ms; code=255; res.len=3343 [2025-09-09 17:19:15][353357977816864][10344 ms][DEBUG] END runCmdUntilRes#1 in 7324 ms [2025-09-09 17:19:15][353357977816864][10344 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:19:19][353357977816864][0 ms][INFO] === Request start === [2025-09-09 17:19:19][353357977816864][1 ms][DEBUG] START check_scloud [2025-09-09 17:19:19][353357977816864][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:19:19][353357977816864][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 11531 5003 23687844 119044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:19:19][353357977816864][337 ms][DEBUG] targetPkg: running [2025-09-09 17:19:19][353357977816864][337 ms][DEBUG] END check_scloud in 336 ms [2025-09-09 17:19:19][353357977816864][337 ms][DEBUG] START check_boot_completed [2025-09-09 17:19:19][353357977816864][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:19:19][353357977816864][382 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 17:19:19][353357977816864][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:19:19][353357977816864][444 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 17:19:19][353357977816864][444 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-09 17:19:19][353357977816864][444 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:19:19][353357977816864][445 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977816864\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1016\"}'\'' -e'"" [2025-09-09 17:19:19][353357977816864][445 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:19:19][353357977816864][445 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977816864\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1016\"}'\'' -e'"" [2025-09-09 17:19:24][353357977816864][5427 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfd8a763-fddf-45ff-ba91-ad2ac025f7b8","id":"QR_bfd8a763-fddf-45ff-ba91-ad2ac025f7b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:19:24][353357977816864][5584 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-09 17:19:24][353357977816864][5584 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-09 17:19:24][353357977816864][5584 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:19:27][352546730734494][0 ms][INFO] === Request start === [2025-09-09 17:19:27][352546730734494][1 ms][DEBUG] START check_scloud [2025-09-09 17:19:27][352546730734494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:19:27][352546730734494][292 ms][DEBUG] SU: done in 292 ms; outu0_a118 11531 5003 23885844 114356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:19:27][352546730734494][292 ms][DEBUG] targetPkg: running [2025-09-09 17:19:27][352546730734494][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 17:19:27][352546730734494][293 ms][DEBUG] START check_boot_completed [2025-09-09 17:19:27][352546730734494][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:19:27][352546730734494][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:19:27][352546730734494][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:19:28][352546730734494][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:19:28][352546730734494][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:19:28][352546730734494][402 ms][DEBUG] rawBody.length=1161 [2025-09-09 17:19:28][352546730734494][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546730734494\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8367\"}'\'' -e'"" [2025-09-09 17:19:28][352546730734494][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:19:28][352546730734494][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546730734494\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8367\"}'\'' -e'"" [2025-09-09 17:19:32][352546730734494][4947 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_885ed762-8631-4a9e-9368-ada7394d7305","id":"QR_885ed762-8631-4a9e-9368-ada7394d7305","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:19:32][352546730734494][5103 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 17:19:32][352546730734494][5103 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 17:19:32][352546730734494][5104 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:19:36][352546730734494][0 ms][INFO] === Request start === [2025-09-09 17:19:36][352546730734494][1 ms][DEBUG] START check_scloud [2025-09-09 17:19:36][352546730734494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:19:36][352546730734494][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 11531 5003 24018992 113236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:19:36][352546730734494][327 ms][DEBUG] targetPkg: running [2025-09-09 17:19:36][352546730734494][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-09 17:19:36][352546730734494][327 ms][DEBUG] START check_boot_completed [2025-09-09 17:19:36][352546730734494][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:19:36][352546730734494][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:19:36][352546730734494][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:19:36][352546730734494][436 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 17:19:36][352546730734494][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:19:36][352546730734494][436 ms][DEBUG] rawBody.length=1151 [2025-09-09 17:19:36][352546730734494][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546730734494\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1206\"}'\'' -e'"" [2025-09-09 17:19:36][352546730734494][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:19:36][352546730734494][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546730734494\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1206\"}'\'' -e'"" [2025-09-09 17:19:39][352546730734494][3638 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_553a50fb-0f50-4e5d-a092-d41f50500e9f","id":"QR_553a50fb-0f50-4e5d-a092-d41f50500e9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:19:39][352546730734494][3794 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=3343 [2025-09-09 17:19:39][352546730734494][3794 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-09-09 17:19:39][352546730734494][3794 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:28:04][352147110712109][1 ms][INFO] === Request start === [2025-09-09 17:28:04][352147110712109][1 ms][DEBUG] START check_scloud [2025-09-09 17:28:04][352147110712109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:28:04][352147110712109][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 11531 5003 24005316 85704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:28:04][352147110712109][312 ms][DEBUG] targetPkg: running [2025-09-09 17:28:04][352147110712109][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 17:28:04][352147110712109][312 ms][DEBUG] START check_boot_completed [2025-09-09 17:28:04][352147110712109][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:28:04][352147110712109][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:28:04][352147110712109][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:28:05][352147110712109][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:28:05][352147110712109][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 17:28:05][352147110712109][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:28:05][352147110712109][501 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 951\nsuccessfulTxPacketsPerSecond: 2.040696479431541\nretriedTxPackets: 131\nretriedTxPacketsPerSecond: 0.23857063158821976\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1013\nsuccessfulRxPacketsPerSecond: 2.297618698065009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:28:05][352147110712109][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:28:06][352147110712109][2140 ms][DEBUG] SU: done in 1638 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.453/304.453/304.453/0.000 ms\n [2025-09-09 17:28:06][352147110712109][2140 ms][DEBUG] check_internet: online [2025-09-09 17:28:06][352147110712109][2140 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:28:06][352147110712109][2140 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352147110712109\",\"model\":\"SM-N976U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1607\"}'\'' -e'"" [2025-09-09 17:28:06][352147110712109][2140 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:28:06][352147110712109][2140 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352147110712109\",\"model\":\"SM-N976U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1607\"}'\'' -e'"" [2025-09-09 17:28:13][352147110712109][8607 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34ef8a0a-4ba0-4e0b-9fa9-a1c51ca3342f","id":"QR_34ef8a0a-4ba0-4e0b-9fa9-a1c51ca3342f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:28:13][352147110712109][8763 ms][DEBUG] proc_open done in 6623 ms; code=255; res.len=3343 [2025-09-09 17:28:13][352147110712109][8763 ms][DEBUG] END runCmdUntilRes#1 in 6623 ms [2025-09-09 17:28:13][352147110712109][8763 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:28:18][350938281954302][0 ms][INFO] === Request start === [2025-09-09 17:28:18][350938281954302][1 ms][DEBUG] START check_scloud [2025-09-09 17:28:18][350938281954302][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:28:18][350938281954302][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 11531 5003 24152472 96480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:28:18][350938281954302][323 ms][DEBUG] targetPkg: running [2025-09-09 17:28:18][350938281954302][323 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 17:28:18][350938281954302][323 ms][DEBUG] START check_boot_completed [2025-09-09 17:28:18][350938281954302][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:28:18][350938281954302][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:28:18][350938281954302][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:28:18][350938281954302][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:28:18][350938281954302][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:28:18][350938281954302][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:28:18][350938281954302][542 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 951\nsuccessfulTxPacketsPerSecond: 2.040696479431541\nretriedTxPackets: 131\nretriedTxPacketsPerSecond: 0.23857063158821976\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1013\nsuccessfulRxPacketsPerSecond: 2.297618698065009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:28:18][350938281954302][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:28:18][350938281954302][917 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.551/257.551/257.551/0.000 ms\n [2025-09-09 17:28:18][350938281954302][917 ms][DEBUG] check_internet: online [2025-09-09 17:28:18][350938281954302][917 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:28:18][350938281954302][917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281954302\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9433\"}'\'' -e'"" [2025-09-09 17:28:18][350938281954302][917 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:28:18][350938281954302][917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281954302\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9433\"}'\'' -e'"" [2025-09-09 17:28:23][350938281954302][5322 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1a7f7f0-2438-48ff-bb68-cabe16a1c463","id":"QR_d1a7f7f0-2438-48ff-bb68-cabe16a1c463","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:28:23][350938281954302][5478 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 17:28:23][350938281954302][5478 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 17:28:23][350938281954302][5478 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:28:25][351521283273753][0 ms][INFO] === Request start === [2025-09-09 17:28:25][351521283273753][1 ms][DEBUG] START check_scloud [2025-09-09 17:28:25][351521283273753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:28:25][351521283273753][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 11531 5003 24319584 101892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:28:25][351521283273753][296 ms][DEBUG] targetPkg: running [2025-09-09 17:28:25][351521283273753][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 17:28:25][351521283273753][296 ms][DEBUG] START check_boot_completed [2025-09-09 17:28:25][351521283273753][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:28:25][351521283273753][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:28:25][351521283273753][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:28:26][351521283273753][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:28:26][351521283273753][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:28:26][351521283273753][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:28:26][351521283273753][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 951\nsuccessfulTxPacketsPerSecond: 2.040696479431541\nretriedTxPackets: 131\nretriedTxPacketsPerSecond: 0.23857063158821976\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1013\nsuccessfulRxPacketsPerSecond: 2.297618698065009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:28:26][351521283273753][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:28:26][351521283273753][811 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.296/224.296/224.296/0.000 ms\n [2025-09-09 17:28:26][351521283273753][811 ms][DEBUG] check_internet: online [2025-09-09 17:28:26][351521283273753][811 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:28:26][351521283273753][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521283273753\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7569\"}'\'' -e'"" [2025-09-09 17:28:26][351521283273753][811 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:28:26][351521283273753][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521283273753\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7569\"}'\'' -e'"" [2025-09-09 17:28:29][351521283273753][4232 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4abc91af-d732-489b-b29e-d3b0b7961f89","id":"QR_4abc91af-d732-489b-b29e-d3b0b7961f89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:28:30][351521283273753][4388 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-09 17:28:30][351521283273753][4388 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-09 17:28:30][351521283273753][4388 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:45:03][355326629868639][1 ms][INFO] === Request start === [2025-09-09 17:45:03][355326629868639][1 ms][DEBUG] START check_scloud [2025-09-09 17:45:03][355326629868639][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:45:03][355326629868639][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 11531 5003 24430192 111528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:45:03][355326629868639][304 ms][DEBUG] targetPkg: running [2025-09-09 17:45:03][355326629868639][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 17:45:03][355326629868639][305 ms][DEBUG] START check_boot_completed [2025-09-09 17:45:03][355326629868639][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:45:03][355326629868639][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:45:03][355326629868639][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:45:04][355326629868639][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:45:04][355326629868639][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 17:45:04][355326629868639][383 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:45:04][355326629868639][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326629868639\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8214\"}'\'' -e'"" [2025-09-09 17:45:04][355326629868639][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:45:04][355326629868639][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326629868639\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8214\"}'\'' -e'"" [2025-09-09 17:45:09][355326629868639][5600 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d74db63-a9bc-4b5b-b59c-9db5406048ee","id":"QR_8d74db63-a9bc-4b5b-b59c-9db5406048ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:45:09][355326629868639][5756 ms][DEBUG] proc_open done in 5374 ms; code=255; res.len=3343 [2025-09-09 17:45:09][355326629868639][5756 ms][DEBUG] END runCmdUntilRes#1 in 5374 ms [2025-09-09 17:45:09][355326629868639][5757 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:45:11][355326629868639][0 ms][INFO] === Request start === [2025-09-09 17:45:11][355326629868639][0 ms][DEBUG] START check_scloud [2025-09-09 17:45:11][355326629868639][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:45:12][355326629868639][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 11531 5003 24583108 122748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:45:12][355326629868639][298 ms][DEBUG] targetPkg: running [2025-09-09 17:45:12][355326629868639][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 17:45:12][355326629868639][298 ms][DEBUG] START check_boot_completed [2025-09-09 17:45:12][355326629868639][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:45:12][355326629868639][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:45:12][355326629868639][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:45:12][355326629868639][392 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 17:45:12][355326629868639][392 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 17:45:12][355326629868639][393 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:45:12][355326629868639][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326629868639\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5955\"}'\'' -e'"" [2025-09-09 17:45:12][355326629868639][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:45:12][355326629868639][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326629868639\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5955\"}'\'' -e'"" [2025-09-09 17:45:19][355326629868639][7358 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36f823cd-7809-4b5f-8843-5078f0b69e38","id":"QR_36f823cd-7809-4b5f-8843-5078f0b69e38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:45:19][355326629868639][7514 ms][DEBUG] proc_open done in 7121 ms; code=255; res.len=3343 [2025-09-09 17:45:19][355326629868639][7514 ms][DEBUG] END runCmdUntilRes#1 in 7122 ms [2025-09-09 17:45:19][355326629868639][7515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:48:04][352949520651359][1 ms][INFO] === Request start === [2025-09-09 17:48:04][352949520651359][1 ms][DEBUG] START check_scloud [2025-09-09 17:48:04][352949520651359][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:48:04][352949520651359][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11531 5003 24719492 134864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:48:04][352949520651359][320 ms][DEBUG] targetPkg: running [2025-09-09 17:48:04][352949520651359][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 17:48:04][352949520651359][320 ms][DEBUG] START check_boot_completed [2025-09-09 17:48:04][352949520651359][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:48:04][352949520651359][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:48:04][352949520651359][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:48:04][352949520651359][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:48:04][352949520651359][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 17:48:04][352949520651359][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:48:04][352949520651359][508 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1528\nsuccessfulTxPacketsPerSecond: 0.15385009872048\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.025641683120080003\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1464\nsuccessfulRxPacketsPerSecond: 0.15385009872048\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:48:04][352949520651359][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:48:06][352949520651359][1945 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.170/300.170/300.170/0.000 ms\n [2025-09-09 17:48:06][352949520651359][1945 ms][DEBUG] check_internet: online [2025-09-09 17:48:06][352949520651359][1945 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:48:06][352949520651359][1945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520651359\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8878\"}'\'' -e'"" [2025-09-09 17:48:06][352949520651359][1946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:48:06][352949520651359][1946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520651359\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8878\"}'\'' -e'"" [2025-09-09 17:48:10][352949520651359][5897 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7f9e9cd-cf68-4378-9608-34dee9434ff1","id":"QR_b7f9e9cd-cf68-4378-9608-34dee9434ff1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:48:10][352949520651359][6053 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-09 17:48:10][352949520651359][6053 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-09 17:48:10][352949520651359][6053 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:48:12][352949520651359][0 ms][INFO] === Request start === [2025-09-09 17:48:12][352949520651359][1 ms][DEBUG] START check_scloud [2025-09-09 17:48:12][352949520651359][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:48:12][352949520651359][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11531 5003 24849804 145864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:48:12][352949520651359][320 ms][DEBUG] targetPkg: running [2025-09-09 17:48:12][352949520651359][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 17:48:12][352949520651359][320 ms][DEBUG] START check_boot_completed [2025-09-09 17:48:12][352949520651359][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:48:12][352949520651359][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:48:12][352949520651359][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:48:12][352949520651359][430 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 17:48:12][352949520651359][430 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 17:48:12][352949520651359][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:48:13][352949520651359][585 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1528\nsuccessfulTxPacketsPerSecond: 0.15385009872048\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.025641683120080003\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1464\nsuccessfulRxPacketsPerSecond: 0.15385009872048\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:48:13][352949520651359][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:48:13][352949520651359][945 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.029/266.029/266.029/0.000 ms\n [2025-09-09 17:48:13][352949520651359][945 ms][DEBUG] check_internet: online [2025-09-09 17:48:13][352949520651359][945 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:48:13][352949520651359][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520651359\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2166\"}'\'' -e'"" [2025-09-09 17:48:13][352949520651359][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:48:13][352949520651359][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520651359\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2166\"}'\'' -e'"" [2025-09-09 17:48:18][352949520651359][6006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ba9c8e7-3408-4467-8d27-07b71db3a830","id":"QR_4ba9c8e7-3408-4467-8d27-07b71db3a830","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:48:18][352949520651359][6162 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 17:48:18][352949520651359][6162 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-09 17:48:18][352949520651359][6162 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:51:03][353196391740429][1 ms][INFO] === Request start === [2025-09-09 17:51:03][353196391740429][1 ms][DEBUG] START check_scloud [2025-09-09 17:51:03][353196391740429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:51:04][353196391740429][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11531 5003 24980044 138116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:51:04][353196391740429][320 ms][DEBUG] targetPkg: running [2025-09-09 17:51:04][353196391740429][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 17:51:04][353196391740429][320 ms][DEBUG] START check_boot_completed [2025-09-09 17:51:04][353196391740429][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:51:04][353196391740429][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:51:04][353196391740429][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:51:04][353196391740429][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:51:04][353196391740429][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 17:51:04][353196391740429][398 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:51:04][353196391740429][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196391740429\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1395\"}'\'' -e'"" [2025-09-09 17:51:04][353196391740429][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:51:04][353196391740429][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196391740429\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1395\"}'\'' -e'"" [2025-09-09 17:51:08][353196391740429][4600 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 17:51:08][353196391740429][4600 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-09 17:51:08][353196391740429][4600 ms][WARN] Detected error: Process with pid 11531 either refused to load frida-agent, or terminated during injectionProcess with pid 11531 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 17:51:08][353196391740429][4600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 17:51:08][353196391740429][4866 ms][DEBUG] SU: done in 266 ms; outsystem 5425 5003 12463156 265760 ep_poll 0 S system_server\n [2025-09-09 17:51:08][353196391740429][4866 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 17:51:08][353196391740429][5006 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 17:51:08][353196391740429][5006 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 17:51:08][353196391740429][5006 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 17:51:09][353196391740429][5131 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 17:51:09][353196391740429][5131 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 17:51:09][353196391740429][5304 ms][DEBUG] SU: done in 173 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 17:51:11][353196391740429][7318 ms][DEBUG] START check_boot_completed [2025-09-09 17:51:11][353196391740429][7318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:51:11][353196391740429][7349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:51:11][353196391740429][7349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:51:11][353196391740429][7396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:51:11][353196391740429][7396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 17:51:14][353196391740429][10411 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 17:51:14][353196391740429][10411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196391740429\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1395\"}'\'' -e'"" [2025-09-09 17:51:17][353196391740429][14004 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d767651-e446-4824-8c6b-eecace5cea46","id":"QR_0d767651-e446-4824-8c6b-eecace5cea46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:51:18][353196391740429][14160 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-09 17:51:18][353196391740429][14161 ms][DEBUG] END runCmdUntilRes#2 in 3750 ms [2025-09-09 17:51:18][353196391740429][14161 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:51:21][353196391740429][0 ms][INFO] === Request start === [2025-09-09 17:51:21][353196391740429][1 ms][DEBUG] START check_scloud [2025-09-09 17:51:21][353196391740429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:51:21][353196391740429][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 18813 5003 23666464 125032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:51:21][353196391740429][259 ms][DEBUG] targetPkg: running [2025-09-09 17:51:21][353196391740429][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 17:51:21][353196391740429][259 ms][DEBUG] START check_boot_completed [2025-09-09 17:51:21][353196391740429][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:51:21][353196391740429][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:51:21][353196391740429][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:51:21][353196391740429][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:51:21][353196391740429][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:51:21][353196391740429][353 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:51:21][353196391740429][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196391740429\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-09-09 17:51:21][353196391740429][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:51:21][353196391740429][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196391740429\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-09-09 17:51:27][353196391740429][6320 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efd1126d-07e9-494f-8d07-19a5a871ab4f","id":"QR_efd1126d-07e9-494f-8d07-19a5a871ab4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:51:27][353196391740429][6476 ms][DEBUG] proc_open done in 6124 ms; code=255; res.len=3343 [2025-09-09 17:51:27][353196391740429][6476 ms][DEBUG] END runCmdUntilRes#1 in 6124 ms [2025-09-09 17:51:27][353196391740429][6477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:52:03][357962509301321][1 ms][INFO] === Request start === [2025-09-09 17:52:03][357962509301321][1 ms][DEBUG] START check_scloud [2025-09-09 17:52:03][357962509301321][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:52:03][357962509301321][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 18813 5003 23756412 139704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:52:03][357962509301321][318 ms][DEBUG] targetPkg: running [2025-09-09 17:52:03][357962509301321][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 17:52:03][357962509301321][318 ms][DEBUG] START check_boot_completed [2025-09-09 17:52:03][357962509301321][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:52:03][357962509301321][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:52:03][357962509301321][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:52:03][357962509301321][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:52:03][357962509301321][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:52:03][357962509301321][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:52:03][357962509301321][537 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1528\nsuccessfulTxPacketsPerSecond: 0.15385009872048\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.025641683120080003\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1464\nsuccessfulRxPacketsPerSecond: 0.15385009872048\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:52:03][357962509301321][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:52:04][357962509301321][990 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.630/316.630/316.630/0.000 ms\n [2025-09-09 17:52:04][357962509301321][990 ms][DEBUG] check_internet: online [2025-09-09 17:52:04][357962509301321][990 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:52:04][357962509301321][990 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509301321\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7453\"}'\'' -e'"" [2025-09-09 17:52:04][357962509301321][990 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:52:04][357962509301321][990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509301321\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7453\"}'\'' -e'"" [2025-09-09 17:52:09][357962509301321][5645 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f2c19a4-485f-4ac7-b368-9879267914d4","id":"QR_9f2c19a4-485f-4ac7-b368-9879267914d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:52:09][357962509301321][5801 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-09 17:52:09][357962509301321][5801 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-09 17:52:09][357962509301321][5801 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:52:11][357962509301321][0 ms][INFO] === Request start === [2025-09-09 17:52:11][357962509301321][1 ms][DEBUG] START check_scloud [2025-09-09 17:52:11][357962509301321][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:52:11][357962509301321][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 18813 5003 23880260 150120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:52:11][357962509301321][319 ms][DEBUG] targetPkg: running [2025-09-09 17:52:11][357962509301321][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 17:52:11][357962509301321][319 ms][DEBUG] START check_boot_completed [2025-09-09 17:52:11][357962509301321][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:52:11][357962509301321][364 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 17:52:11][357962509301321][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:52:11][357962509301321][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:52:11][357962509301321][411 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 17:52:11][357962509301321][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:52:12][357962509301321][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1528\nsuccessfulTxPacketsPerSecond: 0.15385009872048\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.025641683120080003\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1464\nsuccessfulRxPacketsPerSecond: 0.15385009872048\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:52:12][357962509301321][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:52:12][357962509301321][928 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.684/298.684/298.684/0.000 ms\n [2025-09-09 17:52:12][357962509301321][928 ms][DEBUG] check_internet: online [2025-09-09 17:52:12][357962509301321][928 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:52:12][357962509301321][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509301321\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5734\"}'\'' -e'"" [2025-09-09 17:52:12][357962509301321][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:52:12][357962509301321][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509301321\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5734\"}'\'' -e'"" [2025-09-09 17:52:19][357962509301321][8034 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0edca5b-b6c0-42ed-a5b3-a73648f22d87","id":"QR_e0edca5b-b6c0-42ed-a5b3-a73648f22d87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:52:19][357962509301321][8190 ms][DEBUG] proc_open done in 7262 ms; code=255; res.len=3343 [2025-09-09 17:52:19][357962509301321][8191 ms][DEBUG] END runCmdUntilRes#1 in 7262 ms [2025-09-09 17:52:19][357962509301321][8191 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:53:03][350524540797995][1 ms][INFO] === Request start === [2025-09-09 17:53:03][350524540797995][1 ms][DEBUG] START check_scloud [2025-09-09 17:53:03][350524540797995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:53:03][350524540797995][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18813 5003 23979652 161208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:53:03][350524540797995][313 ms][DEBUG] targetPkg: running [2025-09-09 17:53:03][350524540797995][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 17:53:03][350524540797995][313 ms][DEBUG] START check_boot_completed [2025-09-09 17:53:03][350524540797995][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:53:03][350524540797995][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 17:53:03][350524540797995][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:53:03][350524540797995][407 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 17:53:03][350524540797995][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 17:53:03][350524540797995][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:53:03][350524540797995][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540797995\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1613\"}'\'' -e'"" [2025-09-09 17:53:03][350524540797995][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:53:03][350524540797995][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540797995\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1613\"}'\'' -e'"" [2025-09-09 17:53:08][350524540797995][5640 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6157b3d8-dadf-43e5-9bb0-0ce94943c4b6","id":"QR_6157b3d8-dadf-43e5-9bb0-0ce94943c4b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:53:08][350524540797995][5796 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-09 17:53:08][350524540797995][5796 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-09 17:53:08][350524540797995][5796 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:53:11][350524540797995][0 ms][INFO] === Request start === [2025-09-09 17:53:11][350524540797995][1 ms][DEBUG] START check_scloud [2025-09-09 17:53:11][350524540797995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:53:11][350524540797995][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 18813 5003 24133248 172344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:53:11][350524540797995][297 ms][DEBUG] targetPkg: running [2025-09-09 17:53:11][350524540797995][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 17:53:11][350524540797995][297 ms][DEBUG] START check_boot_completed [2025-09-09 17:53:11][350524540797995][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:53:11][350524540797995][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:53:11][350524540797995][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:53:11][350524540797995][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:53:11][350524540797995][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 17:53:11][350524540797995][406 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:53:11][350524540797995][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540797995\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9735\"}'\'' -e'"" [2025-09-09 17:53:11][350524540797995][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:53:11][350524540797995][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540797995\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9735\"}'\'' -e'"" [2025-09-09 17:53:16][350524540797995][5592 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1941b774-639e-4bdb-88a6-6ed068cfb81d","id":"QR_1941b774-639e-4bdb-88a6-6ed068cfb81d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:53:17][350524540797995][5749 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-09 17:53:17][350524540797995][5749 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-09 17:53:17][350524540797995][5749 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:54:04][350249601431454][1 ms][INFO] === Request start === [2025-09-09 17:54:04][350249601431454][1 ms][DEBUG] START check_scloud [2025-09-09 17:54:04][350249601431454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:54:04][350249601431454][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18813 5003 24259264 183660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:54:04][350249601431454][298 ms][DEBUG] targetPkg: running [2025-09-09 17:54:04][350249601431454][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 17:54:04][350249601431454][298 ms][DEBUG] START check_boot_completed [2025-09-09 17:54:04][350249601431454][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:54:04][350249601431454][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:54:04][350249601431454][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:54:04][350249601431454][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:54:04][350249601431454][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:54:04][350249601431454][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:54:04][350249601431454][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1741\nsuccessfulTxPacketsPerSecond: 0.6993167707981076\nretriedTxPackets: 374\nretriedTxPacketsPerSecond: 0.21012334897220133\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1649\nsuccessfulRxPacketsPerSecond: 0.6073878056227695\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:54:04][350249601431454][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:54:06][350249601431454][1860 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.911/305.911/305.911/0.000 ms\n [2025-09-09 17:54:06][350249601431454][1860 ms][DEBUG] check_internet: online [2025-09-09 17:54:06][350249601431454][1860 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:54:06][350249601431454][1860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249601431454\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1784\"}'\'' -e'"" [2025-09-09 17:54:06][350249601431454][1861 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:54:06][350249601431454][1861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249601431454\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1784\"}'\'' -e'"" [2025-09-09 17:54:09][350249601431454][5500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b251b0f-6f45-4efc-ac3e-fd0663d363e1","id":"QR_5b251b0f-6f45-4efc-ac3e-fd0663d363e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:54:09][350249601431454][5656 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-09 17:54:09][350249601431454][5656 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-09 17:54:09][350249601431454][5656 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:54:12][350249601431454][0 ms][INFO] === Request start === [2025-09-09 17:54:12][350249601431454][1 ms][DEBUG] START check_scloud [2025-09-09 17:54:12][350249601431454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:54:12][350249601431454][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 18813 5003 24385480 194668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:54:12][350249601431454][311 ms][DEBUG] targetPkg: running [2025-09-09 17:54:12][350249601431454][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 17:54:12][350249601431454][311 ms][DEBUG] START check_boot_completed [2025-09-09 17:54:12][350249601431454][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:54:12][350249601431454][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 17:54:12][350249601431454][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:54:12][350249601431454][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:54:12][350249601431454][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:54:12][350249601431454][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 17:54:12][350249601431454][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30665 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1741\nsuccessfulTxPacketsPerSecond: 0.6993167707981076\nretriedTxPackets: 374\nretriedTxPacketsPerSecond: 0.21012334897220133\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1649\nsuccessfulRxPacketsPerSecond: 0.6073878056227695\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 17:54:12][350249601431454][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 17:54:13][350249601431454][951 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.419/335.419/335.419/0.000 ms\n [2025-09-09 17:54:13][350249601431454][951 ms][DEBUG] check_internet: online [2025-09-09 17:54:13][350249601431454][951 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:54:13][350249601431454][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249601431454\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1522\"}'\'' -e'"" [2025-09-09 17:54:13][350249601431454][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:54:13][350249601431454][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249601431454\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1522\"}'\'' -e'"" [2025-09-09 17:54:17][350249601431454][5590 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c102f4e-f87d-42dc-8a84-e3a41c36776c","id":"QR_5c102f4e-f87d-42dc-8a84-e3a41c36776c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:54:18][350249601431454][5746 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 17:54:18][350249601431454][5747 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 17:54:18][350249601431454][5747 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:59:04][355824558430322][1 ms][INFO] === Request start === [2025-09-09 17:59:04][355824558430322][1 ms][DEBUG] START check_scloud [2025-09-09 17:59:04][355824558430322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:59:04][355824558430322][328 ms][DEBUG] SU: done in 327 ms; out [2025-09-09 17:59:04][355824558430322][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 17:59:04][355824558430322][374 ms][DEBUG] ADB: done in 45 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 17:59:04][355824558430322][374 ms][DEBUG] check_devices: device found [2025-09-09 17:59:04][355824558430322][374 ms][WARN] targetPkg: not running, restarting [2025-09-09 17:59:04][355824558430322][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 17:59:05][355824558430322][484 ms][DEBUG] SU: done in 110 ms; out [2025-09-09 17:59:05][355824558430322][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 17:59:05][355824558430322][686 ms][DEBUG] SU: done in 202 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 17:59:07][355824558430322][2701 ms][DEBUG] END check_scloud in 2700 ms [2025-09-09 17:59:07][355824558430322][2701 ms][DEBUG] START check_boot_completed [2025-09-09 17:59:07][355824558430322][2702 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:59:07][355824558430322][2749 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:59:07][355824558430322][2749 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:59:07][355824558430322][2811 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 17:59:07][355824558430322][2811 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 17:59:07][355824558430322][2811 ms][DEBUG] rawBody.length=1160 [2025-09-09 17:59:07][355824558430322][2811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558430322\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4517\"}'\'' -e'"" [2025-09-09 17:59:07][355824558430322][2811 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:59:07][355824558430322][2811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558430322\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4517\"}'\'' -e'"" [2025-09-09 17:59:14][355824558430322][9965 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3b67af9-9491-4f92-a8e1-444d2ad74ab8","id":"QR_c3b67af9-9491-4f92-a8e1-444d2ad74ab8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:59:14][355824558430322][10122 ms][DEBUG] proc_open done in 7310 ms; code=255; res.len=3343 [2025-09-09 17:59:14][355824558430322][10122 ms][DEBUG] END runCmdUntilRes#1 in 7310 ms [2025-09-09 17:59:14][355824558430322][10122 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 17:59:18][355824558430322][0 ms][INFO] === Request start === [2025-09-09 17:59:18][355824558430322][1 ms][DEBUG] START check_scloud [2025-09-09 17:59:18][355824558430322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 17:59:18][355824558430322][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 30328 19832 23498464 124736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 17:59:18][355824558430322][303 ms][DEBUG] targetPkg: running [2025-09-09 17:59:18][355824558430322][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 17:59:18][355824558430322][304 ms][DEBUG] START check_boot_completed [2025-09-09 17:59:18][355824558430322][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 17:59:18][355824558430322][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 17:59:18][355824558430322][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 17:59:18][355824558430322][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 17:59:18][355824558430322][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 17:59:18][355824558430322][397 ms][DEBUG] rawBody.length=1150 [2025-09-09 17:59:18][355824558430322][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558430322\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1352\"}'\'' -e'"" [2025-09-09 17:59:18][355824558430322][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 17:59:18][355824558430322][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558430322\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1352\"}'\'' -e'"" [2025-09-09 17:59:22][355824558430322][4130 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4aec463-eee3-4986-89b8-d67c58d11883","id":"QR_d4aec463-eee3-4986-89b8-d67c58d11883","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 17:59:22][355824558430322][4287 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-09-09 17:59:22][355824558430322][4287 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-09-09 17:59:22][355824558430322][4287 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:00:04][351031124652876][0 ms][INFO] === Request start === [2025-09-09 18:00:04][351031124652876][1 ms][DEBUG] START check_scloud [2025-09-09 18:00:04][351031124652876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:00:04][351031124652876][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 30328 19832 23587416 138688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:00:04][351031124652876][315 ms][DEBUG] targetPkg: running [2025-09-09 18:00:04][351031124652876][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 18:00:04][351031124652876][315 ms][DEBUG] START check_boot_completed [2025-09-09 18:00:04][351031124652876][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:00:04][351031124652876][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:00:04][351031124652876][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:00:04][351031124652876][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:00:04][351031124652876][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:00:04][351031124652876][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:00:04][351031124652876][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.6232796081794003\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.3633351257866205\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 977\nsuccessfulRxPacketsPerSecond: 2.735913497173253\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:00:04][351031124652876][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:00:06][351031124652876][2236 ms][DEBUG] SU: done in 1702 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.935/298.935/298.935/0.000 ms\n [2025-09-09 18:00:06][351031124652876][2236 ms][DEBUG] check_internet: online [2025-09-09 18:00:06][351031124652876][2236 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:00:06][351031124652876][2236 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031124652876\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8191\"}'\'' -e'"" [2025-09-09 18:00:06][351031124652876][2236 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:00:06][351031124652876][2237 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031124652876\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8191\"}'\'' -e'"" [2025-09-09 18:00:10][351031124652876][6626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d10e058-950e-4d9c-9010-3ec6eb028efd","id":"QR_5d10e058-950e-4d9c-9010-3ec6eb028efd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:00:11][351031124652876][6782 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-09-09 18:00:11][351031124652876][6782 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-09-09 18:00:11][351031124652876][6782 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:00:13][351031124652876][0 ms][INFO] === Request start === [2025-09-09 18:00:13][351031124652876][1 ms][DEBUG] START check_scloud [2025-09-09 18:00:13][351031124652876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:00:13][351031124652876][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 30328 19832 23748256 149892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:00:13][351031124652876][304 ms][DEBUG] targetPkg: running [2025-09-09 18:00:13][351031124652876][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 18:00:13][351031124652876][304 ms][DEBUG] START check_boot_completed [2025-09-09 18:00:13][351031124652876][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:00:13][351031124652876][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:00:13][351031124652876][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:00:13][351031124652876][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:00:13][351031124652876][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:00:13][351031124652876][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:00:14][351031124652876][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.6232796081794003\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.3633351257866205\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 977\nsuccessfulRxPacketsPerSecond: 2.735913497173253\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:00:14][351031124652876][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:00:14][351031124652876][929 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.922/291.922/291.922/0.000 ms\n [2025-09-09 18:00:14][351031124652876][929 ms][DEBUG] check_internet: online [2025-09-09 18:00:14][351031124652876][929 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:00:14][351031124652876][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031124652876\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6002\"}'\'' -e'"" [2025-09-09 18:00:14][351031124652876][929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:00:14][351031124652876][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031124652876\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6002\"}'\'' -e'"" [2025-09-09 18:00:19][351031124652876][5771 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9aae0286-5f65-4b51-96e1-1e80338bc97f","id":"QR_9aae0286-5f65-4b51-96e1-1e80338bc97f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:00:19][351031124652876][5927 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 18:00:19][351031124652876][5927 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 18:00:19][351031124652876][5927 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:01:04][350637544980266][0 ms][INFO] === Request start === [2025-09-09 18:01:04][350637544980266][1 ms][DEBUG] START check_scloud [2025-09-09 18:01:04][350637544980266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:01:04][350637544980266][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 30328 19832 23874016 160664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:01:04][350637544980266][310 ms][DEBUG] targetPkg: running [2025-09-09 18:01:04][350637544980266][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 18:01:04][350637544980266][310 ms][DEBUG] START check_boot_completed [2025-09-09 18:01:04][350637544980266][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:01:04][350637544980266][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:01:04][350637544980266][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:01:04][350637544980266][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:01:04][350637544980266][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:01:04][350637544980266][403 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:01:04][350637544980266][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544980266\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1268\"}'\'' -e'"" [2025-09-09 18:01:04][350637544980266][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:01:04][350637544980266][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544980266\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1268\"}'\'' -e'"" [2025-09-09 18:01:09][350637544980266][5214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67009cb6-128e-4458-b645-8c5837d121b1","id":"QR_67009cb6-128e-4458-b645-8c5837d121b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:01:09][350637544980266][5371 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-09 18:01:09][350637544980266][5371 ms][DEBUG] END runCmdUntilRes#1 in 4968 ms [2025-09-09 18:01:09][350637544980266][5371 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:01:12][350637544980266][1 ms][INFO] === Request start === [2025-09-09 18:01:12][350637544980266][1 ms][DEBUG] START check_scloud [2025-09-09 18:01:12][350637544980266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:01:13][350637544980266][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 30328 19832 24011484 172760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:01:13][350637544980266][303 ms][DEBUG] targetPkg: running [2025-09-09 18:01:13][350637544980266][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 18:01:13][350637544980266][303 ms][DEBUG] START check_boot_completed [2025-09-09 18:01:13][350637544980266][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:01:13][350637544980266][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:01:13][350637544980266][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:01:13][350637544980266][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:01:13][350637544980266][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:01:13][350637544980266][396 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:01:13][350637544980266][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544980266\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7327\"}'\'' -e'"" [2025-09-09 18:01:13][350637544980266][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:01:13][350637544980266][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544980266\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7327\"}'\'' -e'"" [2025-09-09 18:01:17][350637544980266][4552 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8d51e3e-4ac9-4bca-88ef-c315b0924f28","id":"QR_f8d51e3e-4ac9-4bca-88ef-c315b0924f28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:01:17][350637544980266][4708 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-09 18:01:17][350637544980266][4708 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-09 18:01:17][350637544980266][4708 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:03:03][358799696625271][0 ms][INFO] === Request start === [2025-09-09 18:03:03][358799696625271][1 ms][DEBUG] START check_scloud [2025-09-09 18:03:03][358799696625271][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:03:03][358799696625271][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 30328 19832 24158108 184448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:03:03][358799696625271][313 ms][DEBUG] targetPkg: running [2025-09-09 18:03:03][358799696625271][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 18:03:03][358799696625271][313 ms][DEBUG] START check_boot_completed [2025-09-09 18:03:03][358799696625271][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:03:03][358799696625271][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:03:03][358799696625271][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:03:03][358799696625271][408 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:03:03][358799696625271][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 18:03:03][358799696625271][408 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:03:03][358799696625271][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696625271\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8726\"}'\'' -e'"" [2025-09-09 18:03:03][358799696625271][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:03:03][358799696625271][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696625271\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8726\"}'\'' -e'"" [2025-09-09 18:03:08][358799696625271][4796 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d002429d-90fc-4476-ac50-80e0046c6a0f","id":"QR_d002429d-90fc-4476-ac50-80e0046c6a0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:03:08][358799696625271][4952 ms][DEBUG] proc_open done in 4544 ms; code=255; res.len=3343 [2025-09-09 18:03:08][358799696625271][4952 ms][DEBUG] END runCmdUntilRes#1 in 4544 ms [2025-09-09 18:03:08][358799696625271][4952 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:03:11][358799696625271][0 ms][INFO] === Request start === [2025-09-09 18:03:11][358799696625271][1 ms][DEBUG] START check_scloud [2025-09-09 18:03:11][358799696625271][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:03:12][358799696625271][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 30328 19832 24319140 196456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:03:12][358799696625271][316 ms][DEBUG] targetPkg: running [2025-09-09 18:03:12][358799696625271][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 18:03:12][358799696625271][316 ms][DEBUG] START check_boot_completed [2025-09-09 18:03:12][358799696625271][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:03:12][358799696625271][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:03:12][358799696625271][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:03:12][358799696625271][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:03:12][358799696625271][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:03:12][358799696625271][409 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:03:12][358799696625271][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696625271\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1103\"}'\'' -e'"" [2025-09-09 18:03:12][358799696625271][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:03:12][358799696625271][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696625271\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1103\"}'\'' -e'"" [2025-09-09 18:03:18][358799696625271][6517 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0b5242a-9079-4d8d-95c4-b2c592d5a9e8","id":"QR_a0b5242a-9079-4d8d-95c4-b2c592d5a9e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:03:18][358799696625271][6673 ms][DEBUG] proc_open done in 6264 ms; code=255; res.len=3343 [2025-09-09 18:03:18][358799696625271][6673 ms][DEBUG] END runCmdUntilRes#1 in 6264 ms [2025-09-09 18:03:18][358799696625271][6674 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:05:03][354411847307643][0 ms][INFO] === Request start === [2025-09-09 18:05:03][354411847307643][0 ms][DEBUG] START check_scloud [2025-09-09 18:05:03][354411847307643][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:05:03][354411847307643][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 30328 19832 24455524 207648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:05:03][354411847307643][312 ms][DEBUG] targetPkg: running [2025-09-09 18:05:03][354411847307643][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 18:05:03][354411847307643][312 ms][DEBUG] START check_boot_completed [2025-09-09 18:05:03][354411847307643][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:05:03][354411847307643][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:05:03][354411847307643][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:05:03][354411847307643][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:05:03][354411847307643][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:05:03][354411847307643][406 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:05:03][354411847307643][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411847307643\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4023\"}'\'' -e'"" [2025-09-09 18:05:03][354411847307643][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:05:03][354411847307643][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411847307643\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4023\"}'\'' -e'"" [2025-09-09 18:05:08][354411847307643][5670 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a97478a-e5d4-4c83-b245-37936306efb4","id":"QR_8a97478a-e5d4-4c83-b245-37936306efb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:05:09][354411847307643][5826 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-09 18:05:09][354411847307643][5826 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-09 18:05:09][354411847307643][5826 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:05:11][354411847307643][0 ms][INFO] === Request start === [2025-09-09 18:05:11][354411847307643][1 ms][DEBUG] START check_scloud [2025-09-09 18:05:11][354411847307643][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:05:11][354411847307643][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 30328 19832 24589804 219088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:05:11][354411847307643][299 ms][DEBUG] targetPkg: running [2025-09-09 18:05:11][354411847307643][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 18:05:11][354411847307643][299 ms][DEBUG] START check_boot_completed [2025-09-09 18:05:11][354411847307643][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:05:11][354411847307643][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:05:11][354411847307643][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:05:11][354411847307643][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:05:11][354411847307643][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:05:11][354411847307643][408 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:05:11][354411847307643][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411847307643\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9944\"}'\'' -e'"" [2025-09-09 18:05:11][354411847307643][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:05:11][354411847307643][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411847307643\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9944\"}'\'' -e'"" [2025-09-09 18:05:16][354411847307643][5297 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ca10254-cd13-4cef-a165-fe3615d82f43","id":"QR_8ca10254-cd13-4cef-a165-fe3615d82f43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:05:16][354411847307643][5454 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-09 18:05:16][354411847307643][5454 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-09-09 18:05:16][354411847307643][5454 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:06:03][354068190935089][0 ms][INFO] === Request start === [2025-09-09 18:06:03][354068190935089][1 ms][DEBUG] START check_scloud [2025-09-09 18:06:03][354068190935089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:06:03][354068190935089][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 30328 19832 24742572 229960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:06:03][354068190935089][318 ms][DEBUG] targetPkg: running [2025-09-09 18:06:03][354068190935089][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 18:06:03][354068190935089][318 ms][DEBUG] START check_boot_completed [2025-09-09 18:06:03][354068190935089][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:06:04][354068190935089][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:06:04][354068190935089][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:06:04][354068190935089][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:06:04][354068190935089][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:06:04][354068190935089][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:06:04][354068190935089][552 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1224\nsuccessfulTxPacketsPerSecond: 0.8136939713579722\nretriedTxPackets: 205\nretriedTxPacketsPerSecond: 0.1859871934532508\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1187\nsuccessfulRxPacketsPerSecond: 0.6974519754496905\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:06:04][354068190935089][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:06:05][354068190935089][2036 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.269/299.269/299.269/0.000 ms\n [2025-09-09 18:06:05][354068190935089][2036 ms][DEBUG] check_internet: online [2025-09-09 18:06:05][354068190935089][2036 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:06:05][354068190935089][2036 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068190935089\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6613\"}'\'' -e'"" [2025-09-09 18:06:05][354068190935089][2036 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:06:05][354068190935089][2036 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068190935089\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6613\"}'\'' -e'"" [2025-09-09 18:06:09][354068190935089][5910 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e843f7e6-2682-4b95-a5b6-8318a7ad8f85","id":"QR_e843f7e6-2682-4b95-a5b6-8318a7ad8f85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:06:09][354068190935089][6067 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 18:06:09][354068190935089][6067 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 18:06:09][354068190935089][6067 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:06:12][354068190935089][0 ms][INFO] === Request start === [2025-09-09 18:06:12][354068190935089][1 ms][DEBUG] START check_scloud [2025-09-09 18:06:12][354068190935089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:06:12][354068190935089][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 30328 19832 24864696 241796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:06:12][354068190935089][323 ms][DEBUG] targetPkg: running [2025-09-09 18:06:12][354068190935089][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 18:06:12][354068190935089][323 ms][DEBUG] START check_boot_completed [2025-09-09 18:06:12][354068190935089][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:06:12][354068190935089][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:06:12][354068190935089][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:06:12][354068190935089][418 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 18:06:12][354068190935089][418 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 18:06:12][354068190935089][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:06:12][354068190935089][542 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1224\nsuccessfulTxPacketsPerSecond: 0.8136939713579722\nretriedTxPackets: 205\nretriedTxPacketsPerSecond: 0.1859871934532508\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1187\nsuccessfulRxPacketsPerSecond: 0.6974519754496905\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:06:12][354068190935089][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:06:13][354068190935089][963 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.757/296.757/296.757/0.000 ms\n [2025-09-09 18:06:13][354068190935089][964 ms][DEBUG] check_internet: online [2025-09-09 18:06:13][354068190935089][964 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:06:13][354068190935089][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068190935089\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7609\"}'\'' -e'"" [2025-09-09 18:06:13][354068190935089][964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:06:13][354068190935089][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068190935089\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7609\"}'\'' -e'"" [2025-09-09 18:06:17][354068190935089][5056 ms][DEBUG] proc_open done in 4092 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 18:06:17][354068190935089][5056 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-09 18:06:17][354068190935089][5056 ms][WARN] Detected error: Process with pid 30328 either refused to load frida-agent, or terminated during injectionProcess with pid 30328 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 18:06:17][354068190935089][5056 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:06:17][354068190935089][5321 ms][DEBUG] SU: done in 265 ms; outsystem 20037 19832 12408612 256028 ep_poll 0 S system_server\n [2025-09-09 18:06:17][354068190935089][5322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 18:06:17][354068190935089][5462 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 18:06:17][354068190935089][5462 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 18:06:17][354068190935089][5462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:06:17][354068190935089][5634 ms][DEBUG] SU: done in 172 ms; out [2025-09-09 18:06:17][354068190935089][5634 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:06:17][354068190935089][5806 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 18:06:19][354068190935089][7821 ms][DEBUG] START check_boot_completed [2025-09-09 18:06:19][354068190935089][7821 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:06:19][354068190935089][7868 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:06:19][354068190935089][7868 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:06:20][354068190935089][7915 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:06:20][354068190935089][7915 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:06:23][354068190935089][10929 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 18:06:23][354068190935089][10930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068190935089\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7609\"}'\'' -e'"" [2025-09-09 18:06:27][354068190935089][15835 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db6e7ffe-f2f4-47ab-9c3f-03e357ab5fda","id":"QR_db6e7ffe-f2f4-47ab-9c3f-03e357ab5fda","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:06:28][354068190935089][15991 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-09 18:06:28][354068190935089][15991 ms][DEBUG] END runCmdUntilRes#2 in 5062 ms [2025-09-09 18:06:28][354068190935089][15991 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:06:32][350805650247214][0 ms][INFO] === Request start === [2025-09-09 18:06:32][350805650247214][1 ms][DEBUG] START check_scloud [2025-09-09 18:06:32][350805650247214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:06:32][350805650247214][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 32056 19832 23556320 124084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:06:32][350805650247214][259 ms][DEBUG] targetPkg: running [2025-09-09 18:06:32][350805650247214][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 18:06:32][350805650247214][259 ms][DEBUG] START check_boot_completed [2025-09-09 18:06:32][350805650247214][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:06:32][350805650247214][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:06:32][350805650247214][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:06:32][350805650247214][354 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:06:32][350805650247214][354 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 18:06:32][350805650247214][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:06:32][350805650247214][477 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1224\nsuccessfulTxPacketsPerSecond: 0.8136939713579722\nretriedTxPackets: 205\nretriedTxPacketsPerSecond: 0.1859871934532508\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1187\nsuccessfulRxPacketsPerSecond: 0.6974519754496905\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:06:32][350805650247214][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:06:33][350805650247214][837 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.147/258.147/258.147/0.000 ms\n [2025-09-09 18:06:33][350805650247214][837 ms][DEBUG] check_internet: online [2025-09-09 18:06:33][350805650247214][837 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:06:33][350805650247214][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650247214\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7186\"}'\'' -e'"" [2025-09-09 18:06:33][350805650247214][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:06:33][350805650247214][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650247214\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7186\"}'\'' -e'"" [2025-09-09 18:06:36][350805650247214][4133 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c724fca-40cb-461c-bbed-10234210eb31","id":"QR_2c724fca-40cb-461c-bbed-10234210eb31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:06:36][350805650247214][4289 ms][DEBUG] proc_open done in 3451 ms; code=255; res.len=3343 [2025-09-09 18:06:36][350805650247214][4289 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-09 18:06:36][350805650247214][4289 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:06:38][350805650247214][0 ms][INFO] === Request start === [2025-09-09 18:06:38][350805650247214][1 ms][DEBUG] START check_scloud [2025-09-09 18:06:38][350805650247214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:06:39][350805650247214][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 32056 19832 23755188 137872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:06:39][350805650247214][289 ms][DEBUG] targetPkg: running [2025-09-09 18:06:39][350805650247214][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 18:06:39][350805650247214][289 ms][DEBUG] START check_boot_completed [2025-09-09 18:06:39][350805650247214][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:06:39][350805650247214][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:06:39][350805650247214][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:06:39][350805650247214][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:06:39][350805650247214][367 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:06:39][350805650247214][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:06:39][350805650247214][476 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1224\nsuccessfulTxPacketsPerSecond: 0.8136939713579722\nretriedTxPackets: 205\nretriedTxPacketsPerSecond: 0.1859871934532508\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1187\nsuccessfulRxPacketsPerSecond: 0.6974519754496905\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:06:39][350805650247214][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:06:39][350805650247214][913 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.398/329.398/329.398/0.000 ms\n [2025-09-09 18:06:39][350805650247214][914 ms][DEBUG] check_internet: online [2025-09-09 18:06:39][350805650247214][914 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:06:39][350805650247214][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650247214\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3861\"}'\'' -e'"" [2025-09-09 18:06:39][350805650247214][914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:06:39][350805650247214][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650247214\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3861\"}'\'' -e'"" [2025-09-09 18:06:44][350805650247214][5662 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9923a5e-f9dd-429d-8e0c-ef5c1b223792","id":"QR_e9923a5e-f9dd-429d-8e0c-ef5c1b223792","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:06:44][350805650247214][5818 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 18:06:44][350805650247214][5818 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 18:06:44][350805650247214][5818 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:07:04][354099882527389][1 ms][INFO] === Request start === [2025-09-09 18:07:04][354099882527389][1 ms][DEBUG] START check_scloud [2025-09-09 18:07:04][354099882527389][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:07:05][354099882527389][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 32056 19832 23817376 150972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:07:05][354099882527389][316 ms][DEBUG] targetPkg: running [2025-09-09 18:07:05][354099882527389][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 18:07:05][354099882527389][316 ms][DEBUG] START check_boot_completed [2025-09-09 18:07:05][354099882527389][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:07:05][354099882527389][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:07:05][354099882527389][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:07:05][354099882527389][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:07:05][354099882527389][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:07:05][354099882527389][410 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:07:05][354099882527389][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099882527389\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3258\"}'\'' -e'"" [2025-09-09 18:07:05][354099882527389][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:07:05][354099882527389][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099882527389\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3258\"}'\'' -e'"" [2025-09-09 18:07:10][354099882527389][5862 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e369006-c73f-4931-8acb-0d525236b58c","id":"QR_8e369006-c73f-4931-8acb-0d525236b58c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:07:10][354099882527389][6018 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-09 18:07:10][354099882527389][6018 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 18:07:10][354099882527389][6018 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:07:14][354099882527389][0 ms][INFO] === Request start === [2025-09-09 18:07:14][354099882527389][1 ms][DEBUG] START check_scloud [2025-09-09 18:07:14][354099882527389][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:07:14][354099882527389][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 32056 19832 23979304 161832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:07:14][354099882527389][306 ms][DEBUG] targetPkg: running [2025-09-09 18:07:14][354099882527389][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 18:07:14][354099882527389][306 ms][DEBUG] START check_boot_completed [2025-09-09 18:07:14][354099882527389][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:07:14][354099882527389][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:07:14][354099882527389][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:07:14][354099882527389][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:07:14][354099882527389][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:07:14][354099882527389][399 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:07:14][354099882527389][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099882527389\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8277\"}'\'' -e'"" [2025-09-09 18:07:14][354099882527389][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:07:14][354099882527389][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099882527389\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8277\"}'\'' -e'"" [2025-09-09 18:07:20][354099882527389][6132 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8e28d84-5355-48ac-8868-aa26cf1c3d0c","id":"QR_b8e28d84-5355-48ac-8868-aa26cf1c3d0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:07:20][354099882527389][6288 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-09-09 18:07:20][354099882527389][6288 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-09-09 18:07:20][354099882527389][6288 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:07:22][352060488948009][0 ms][INFO] === Request start === [2025-09-09 18:07:22][352060488948009][1 ms][DEBUG] START check_scloud [2025-09-09 18:07:22][352060488948009][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:07:22][352060488948009][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 32056 19832 24112872 171956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:07:22][352060488948009][318 ms][DEBUG] targetPkg: running [2025-09-09 18:07:22][352060488948009][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 18:07:22][352060488948009][318 ms][DEBUG] START check_boot_completed [2025-09-09 18:07:22][352060488948009][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:07:22][352060488948009][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:07:22][352060488948009][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:07:23][352060488948009][397 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:07:23][352060488948009][397 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 18:07:23][352060488948009][397 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:07:23][352060488948009][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488948009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9484\"}'\'' -e'"" [2025-09-09 18:07:23][352060488948009][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:07:23][352060488948009][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488948009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9484\"}'\'' -e'"" [2025-09-09 18:07:26][352060488948009][3723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e7a4484-927e-44d3-b5f0-ccebcf4fb479","id":"QR_6e7a4484-927e-44d3-b5f0-ccebcf4fb479","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:07:26][352060488948009][3879 ms][DEBUG] proc_open done in 3481 ms; code=255; res.len=3343 [2025-09-09 18:07:26][352060488948009][3879 ms][DEBUG] END runCmdUntilRes#1 in 3482 ms [2025-09-09 18:07:26][352060488948009][3879 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:07:28][352060488948009][0 ms][INFO] === Request start === [2025-09-09 18:07:28][352060488948009][1 ms][DEBUG] START check_scloud [2025-09-09 18:07:28][352060488948009][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:07:29][352060488948009][248 ms][DEBUG] SU: done in 248 ms; outu0_a118 32056 19832 24224652 183752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:07:29][352060488948009][248 ms][DEBUG] targetPkg: running [2025-09-09 18:07:29][352060488948009][248 ms][DEBUG] END check_scloud in 248 ms [2025-09-09 18:07:29][352060488948009][249 ms][DEBUG] START check_boot_completed [2025-09-09 18:07:29][352060488948009][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:07:29][352060488948009][279 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:07:29][352060488948009][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:07:29][352060488948009][326 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:07:29][352060488948009][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:07:29][352060488948009][326 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:07:29][352060488948009][326 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488948009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5155\"}'\'' -e'"" [2025-09-09 18:07:29][352060488948009][326 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:07:29][352060488948009][326 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488948009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5155\"}'\'' -e'"" [2025-09-09 18:07:33][352060488948009][4653 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c422fdd-cae0-4669-aa47-1037a82bc0ae","id":"QR_1c422fdd-cae0-4669-aa47-1037a82bc0ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:07:33][352060488948009][4810 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 18:07:33][352060488948009][4810 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 18:07:33][352060488948009][4810 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:08:03][357962500775788][0 ms][INFO] === Request start === [2025-09-09 18:08:03][357962500775788][1 ms][DEBUG] START check_scloud [2025-09-09 18:08:03][357962500775788][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:08:03][357962500775788][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 32056 19832 24344488 196008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:08:03][357962500775788][328 ms][DEBUG] targetPkg: running [2025-09-09 18:08:03][357962500775788][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-09 18:08:03][357962500775788][328 ms][DEBUG] START check_boot_completed [2025-09-09 18:08:03][357962500775788][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:08:03][357962500775788][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:08:03][357962500775788][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:08:03][357962500775788][452 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 18:08:03][357962500775788][452 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 18:08:03][357962500775788][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:08:03][357962500775788][578 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1224\nsuccessfulTxPacketsPerSecond: 0.8136939713579722\nretriedTxPackets: 205\nretriedTxPacketsPerSecond: 0.1859871934532508\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1187\nsuccessfulRxPacketsPerSecond: 0.6974519754496905\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:08:03][357962500775788][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:08:04][357962500775788][921 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.906/248.906/248.906/0.000 ms\n [2025-09-09 18:08:04][357962500775788][921 ms][DEBUG] check_internet: online [2025-09-09 18:08:04][357962500775788][921 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:08:04][357962500775788][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500775788\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2546\"}'\'' -e'"" [2025-09-09 18:08:04][357962500775788][921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:08:04][357962500775788][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500775788\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2546\"}'\'' -e'"" [2025-09-09 18:08:08][357962500775788][5482 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f20a69f7-be37-4a19-a3d0-2c9ddf40454a","id":"QR_f20a69f7-be37-4a19-a3d0-2c9ddf40454a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:08:08][357962500775788][5639 ms][DEBUG] proc_open done in 4718 ms; code=255; res.len=3343 [2025-09-09 18:08:08][357962500775788][5639 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-09 18:08:08][357962500775788][5639 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:08:11][357962500775788][0 ms][INFO] === Request start === [2025-09-09 18:08:11][357962500775788][1 ms][DEBUG] START check_scloud [2025-09-09 18:08:11][357962500775788][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:08:11][357962500775788][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 32056 19832 24477992 206996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:08:11][357962500775788][313 ms][DEBUG] targetPkg: running [2025-09-09 18:08:11][357962500775788][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 18:08:11][357962500775788][314 ms][DEBUG] START check_boot_completed [2025-09-09 18:08:11][357962500775788][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:08:11][357962500775788][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:08:11][357962500775788][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:08:11][357962500775788][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 18:08:11][357962500775788][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:08:11][357962500775788][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:08:11][357962500775788][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1224\nsuccessfulTxPacketsPerSecond: 0.8136939713579722\nretriedTxPackets: 205\nretriedTxPacketsPerSecond: 0.1859871934532508\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1187\nsuccessfulRxPacketsPerSecond: 0.6974519754496905\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:08:11][357962500775788][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:08:12][357962500775788][923 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.531/260.531/260.531/0.000 ms\n [2025-09-09 18:08:12][357962500775788][923 ms][DEBUG] check_internet: online [2025-09-09 18:08:12][357962500775788][923 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:08:12][357962500775788][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500775788\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-09-09 18:08:12][357962500775788][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:08:12][357962500775788][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500775788\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-09-09 18:08:16][357962500775788][5656 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71f2b770-eee9-4670-a304-a1486212422f","id":"QR_71f2b770-eee9-4670-a304-a1486212422f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:08:17][357962500775788][5812 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-09 18:08:17][357962500775788][5812 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-09 18:08:17][357962500775788][5812 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:09:04][352967355231089][0 ms][INFO] === Request start === [2025-09-09 18:09:04][352967355231089][1 ms][DEBUG] START check_scloud [2025-09-09 18:09:04][352967355231089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:09:05][352967355231089][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 32056 19832 24575900 218100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:09:05][352967355231089][305 ms][DEBUG] targetPkg: running [2025-09-09 18:09:05][352967355231089][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 18:09:05][352967355231089][305 ms][DEBUG] START check_boot_completed [2025-09-09 18:09:05][352967355231089][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:09:05][352967355231089][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:09:05][352967355231089][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:09:05][352967355231089][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:09:05][352967355231089][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:09:05][352967355231089][383 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:09:05][352967355231089][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355231089\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6572\"}'\'' -e'"" [2025-09-09 18:09:05][352967355231089][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:09:05][352967355231089][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355231089\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6572\"}'\'' -e'"" [2025-09-09 18:09:11][352967355231089][6788 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b422246a-4d96-4074-ba24-99830e0bf1cc","id":"QR_b422246a-4d96-4074-ba24-99830e0bf1cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:09:11][352967355231089][6944 ms][DEBUG] proc_open done in 6561 ms; code=255; res.len=3343 [2025-09-09 18:09:11][352967355231089][6944 ms][DEBUG] END runCmdUntilRes#1 in 6561 ms [2025-09-09 18:09:11][352967355231089][6944 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:09:15][352967355231089][1 ms][INFO] === Request start === [2025-09-09 18:09:15][352967355231089][1 ms][DEBUG] START check_scloud [2025-09-09 18:09:15][352967355231089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:09:15][352967355231089][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 32056 19832 24738980 229940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:09:15][352967355231089][313 ms][DEBUG] targetPkg: running [2025-09-09 18:09:15][352967355231089][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 18:09:15][352967355231089][313 ms][DEBUG] START check_boot_completed [2025-09-09 18:09:15][352967355231089][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:09:15][352967355231089][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:09:15][352967355231089][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:09:15][352967355231089][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:09:15][352967355231089][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:09:15][352967355231089][423 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:09:15][352967355231089][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355231089\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3832\"}'\'' -e'"" [2025-09-09 18:09:15][352967355231089][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:09:15][352967355231089][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355231089\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3832\"}'\'' -e'"" [2025-09-09 18:09:19][352967355231089][4031 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba22170a-e201-48cb-afa1-8bf9ac871879","id":"QR_ba22170a-e201-48cb-afa1-8bf9ac871879","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:09:19][352967355231089][4187 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-09 18:09:19][352967355231089][4187 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-09 18:09:19][352967355231089][4187 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:12:05][350408224477746][1 ms][INFO] === Request start === [2025-09-09 18:12:05][350408224477746][1 ms][DEBUG] START check_scloud [2025-09-09 18:12:05][350408224477746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:12:05][350408224477746][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 32056 19832 24863076 241352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:12:05][350408224477746][295 ms][DEBUG] targetPkg: running [2025-09-09 18:12:05][350408224477746][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 18:12:05][350408224477746][295 ms][DEBUG] START check_boot_completed [2025-09-09 18:12:05][350408224477746][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:12:05][350408224477746][325 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 18:12:05][350408224477746][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:12:05][350408224477746][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:12:05][350408224477746][372 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-09 18:12:05][350408224477746][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:12:05][350408224477746][481 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1629\nsuccessfulTxPacketsPerSecond: 1.3450144796620527\nretriedTxPackets: 306\nretriedTxPacketsPerSecond: 0.3354233640638699\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1528\nsuccessfulRxPacketsPerSecond: 1.1324689816413827\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:12:05][350408224477746][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:12:06][350408224477746][1872 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.532/301.532/301.532/0.000 ms\n [2025-09-09 18:12:06][350408224477746][1872 ms][DEBUG] check_internet: online [2025-09-09 18:12:06][350408224477746][1872 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:12:06][350408224477746][1872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477746\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3665\"}'\'' -e'"" [2025-09-09 18:12:06][350408224477746][1872 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:12:06][350408224477746][1872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477746\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3665\"}'\'' -e'"" [2025-09-09 18:12:10][350408224477746][5558 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 18:12:10][350408224477746][5558 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-09 18:12:10][350408224477746][5558 ms][WARN] Detected error: Process with pid 32056 either refused to load frida-agent, or terminated during injectionProcess with pid 32056 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 18:12:10][350408224477746][5558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:12:10][350408224477746][5855 ms][DEBUG] SU: done in 297 ms; outsystem 20037 19832 12426048 253192 ep_poll 0 S system_server\n [2025-09-09 18:12:10][350408224477746][5855 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 18:12:11][350408224477746][5996 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 18:12:11][350408224477746][5996 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 18:12:11][350408224477746][5996 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:12:11][350408224477746][6154 ms][DEBUG] SU: done in 158 ms; out [2025-09-09 18:12:11][350408224477746][6154 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:12:11][350408224477746][6371 ms][DEBUG] SU: done in 216 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 18:12:13][350408224477746][8386 ms][DEBUG] START check_boot_completed [2025-09-09 18:12:13][350408224477746][8386 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:12:13][350408224477746][8433 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:12:13][350408224477746][8433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:12:13][350408224477746][8479 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:12:13][350408224477746][8479 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:12:16][350408224477746][11494 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 18:12:16][350408224477746][11494 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477746\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3665\"}'\'' -e'"" [2025-09-09 18:12:21][350408224477746][16368 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78e7492f-ed0e-4179-aaf2-0bcbf54b5db2","id":"QR_78e7492f-ed0e-4179-aaf2-0bcbf54b5db2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:12:21][350408224477746][16524 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-09 18:12:21][350408224477746][16524 ms][DEBUG] END runCmdUntilRes#2 in 5030 ms [2025-09-09 18:12:21][350408224477746][16524 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:12:25][350408224477746][0 ms][INFO] === Request start === [2025-09-09 18:12:25][350408224477746][1 ms][DEBUG] START check_scloud [2025-09-09 18:12:25][350408224477746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:12:25][350408224477746][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 1004 19832 23543036 124372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:12:25][350408224477746][266 ms][DEBUG] targetPkg: running [2025-09-09 18:12:25][350408224477746][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 18:12:25][350408224477746][266 ms][DEBUG] START check_boot_completed [2025-09-09 18:12:25][350408224477746][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:12:25][350408224477746][313 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:12:25][350408224477746][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:12:25][350408224477746][361 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:12:25][350408224477746][361 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 18:12:25][350408224477746][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:12:25][350408224477746][485 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1665\nsuccessfulTxPacketsPerSecond: 0.27996827026270354\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.06999206756567589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1558\nsuccessfulRxPacketsPerSecond: 0.2333068918855863\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:12:25][350408224477746][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:12:26][350408224477746][860 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.577/262.577/262.577/0.000 ms\n [2025-09-09 18:12:26][350408224477746][860 ms][DEBUG] check_internet: online [2025-09-09 18:12:26][350408224477746][860 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:12:26][350408224477746][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477746\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7036\"}'\'' -e'"" [2025-09-09 18:12:26][350408224477746][860 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:12:26][350408224477746][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477746\",\"model\":\"SM-F936W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7036\"}'\'' -e'"" [2025-09-09 18:12:29][350408224477746][4718 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4357a654-935c-4254-bf20-79324e3ec000","id":"QR_4357a654-935c-4254-bf20-79324e3ec000","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:12:30][350408224477746][4874 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-09 18:12:30][350408224477746][4874 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-09 18:12:30][350408224477746][4874 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:13:05][357799159088141][0 ms][INFO] === Request start === [2025-09-09 18:13:05][357799159088141][1 ms][DEBUG] START check_scloud [2025-09-09 18:13:05][357799159088141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:13:05][357799159088141][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 1004 19832 23612632 138932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:13:05][357799159088141][329 ms][DEBUG] targetPkg: running [2025-09-09 18:13:05][357799159088141][329 ms][DEBUG] END check_scloud in 329 ms [2025-09-09 18:13:05][357799159088141][329 ms][DEBUG] START check_boot_completed [2025-09-09 18:13:05][357799159088141][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:13:05][357799159088141][376 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:13:05][357799159088141][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:13:05][357799159088141][439 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:13:05][357799159088141][439 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:13:05][357799159088141][439 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:13:05][357799159088141][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799159088141\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5230\"}'\'' -e'"" [2025-09-09 18:13:05][357799159088141][439 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:13:05][357799159088141][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799159088141\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5230\"}'\'' -e'"" [2025-09-09 18:13:09][357799159088141][3875 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c4569ba-774b-40e2-9e62-b57010b625ff","id":"QR_3c4569ba-774b-40e2-9e62-b57010b625ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:13:09][357799159088141][4031 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-09 18:13:09][357799159088141][4031 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-09 18:13:09][357799159088141][4031 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:16:07][351695960832311][1 ms][INFO] === Request start === [2025-09-09 18:16:07][351695960832311][1 ms][DEBUG] START check_scloud [2025-09-09 18:16:07][351695960832311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:16:08][351695960832311][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 1004 19832 23721200 150336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:16:08][351695960832311][256 ms][DEBUG] targetPkg: running [2025-09-09 18:16:08][351695960832311][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-09 18:16:08][351695960832311][257 ms][DEBUG] START check_boot_completed [2025-09-09 18:16:08][351695960832311][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:16:08][351695960832311][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:16:08][351695960832311][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:16:08][351695960832311][351 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:16:08][351695960832311][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:16:08][351695960832311][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:16:08][351695960832311][475 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1665\nsuccessfulTxPacketsPerSecond: 0.27996827026270354\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.06999206756567589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1558\nsuccessfulRxPacketsPerSecond: 0.2333068918855863\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:16:08][351695960832311][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:16:09][351695960832311][1865 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.833/302.833/302.833/0.000 ms\n [2025-09-09 18:16:09][351695960832311][1865 ms][DEBUG] check_internet: online [2025-09-09 18:16:09][351695960832311][1865 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:16:09][351695960832311][1866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-09-09 18:16:09][351695960832311][1866 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:16:09][351695960832311][1866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-09-09 18:16:13][351695960832311][5239 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_SAME_ACCOUNT_BY_SAME_UPLOADER"}\r\n [2025-09-09 18:16:13][351695960832311][5395 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=105 [2025-09-09 18:16:13][351695960832311][5395 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 18:16:13][351695960832311][5396 ms][INFO] SUCCESS response from frida (len=105) [2025-09-09 18:16:13][][0 ms][INFO] === Request start === [2025-09-09 18:16:13][][1 ms][DEBUG] START check_scloud [2025-09-09 18:16:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:16:13][][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 1004 19832 23861304 160960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:16:13][][254 ms][DEBUG] targetPkg: running [2025-09-09 18:16:13][][254 ms][DEBUG] END check_scloud in 254 ms [2025-09-09 18:16:13][][254 ms][DEBUG] START check_boot_completed [2025-09-09 18:16:13][][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:16:13][][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:16:13][][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:16:13][][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:16:13][][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:16:13][][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:16:13][][457 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1665\nsuccessfulTxPacketsPerSecond: 0.27996827026270354\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.06999206756567589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1558\nsuccessfulRxPacketsPerSecond: 0.2333068918855863\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:16:13][][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:16:14][][786 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.488/215.488/215.488/0.000 ms\n [2025-09-09 18:16:14][][786 ms][DEBUG] check_internet: online [2025-09-09 18:16:14][][786 ms][DEBUG] rawBody.length=1131 [2025-09-09 18:16:14][][786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RX8W202LVTR\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9434\"}'\'' -e'"" [2025-09-09 18:16:14][][786 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:16:14][][786 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RX8W202LVTR\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9434\"}'\'' -e'"" [2025-09-09 18:16:17][][3894 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_SAME_ACCOUNT_BY_SAME_UPLOADER"}\r\n [2025-09-09 18:16:17][][4050 ms][DEBUG] proc_open done in 3264 ms; code=255; res.len=107 [2025-09-09 18:16:17][][4050 ms][DEBUG] END runCmdUntilRes#1 in 3264 ms [2025-09-09 18:16:17][][4051 ms][INFO] SUCCESS response from frida (len=107) [2025-09-09 18:16:19][351695960832311][0 ms][INFO] === Request start === [2025-09-09 18:16:19][351695960832311][1 ms][DEBUG] START check_scloud [2025-09-09 18:16:19][351695960832311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:16:19][351695960832311][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 1004 19832 23998592 172664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:16:19][351695960832311][300 ms][DEBUG] targetPkg: running [2025-09-09 18:16:19][351695960832311][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 18:16:19][351695960832311][300 ms][DEBUG] START check_boot_completed [2025-09-09 18:16:19][351695960832311][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:16:19][351695960832311][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:16:19][351695960832311][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:16:19][351695960832311][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:16:19][351695960832311][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:16:19][351695960832311][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:16:20][351695960832311][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1665\nsuccessfulTxPacketsPerSecond: 0.27996827026270354\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.06999206756567589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1558\nsuccessfulRxPacketsPerSecond: 0.2333068918855863\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:16:20][351695960832311][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:16:20][351695960832311][909 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.270/256.270/256.270/0.000 ms\n [2025-09-09 18:16:20][351695960832311][909 ms][DEBUG] check_internet: online [2025-09-09 18:16:20][351695960832311][909 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:16:20][351695960832311][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1304\"}'\'' -e'"" [2025-09-09 18:16:20][351695960832311][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:16:20][351695960832311][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1304\"}'\'' -e'"" [2025-09-09 18:16:25][351695960832311][5752 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ae256e8-1d4c-4989-a96b-ccb7037d01b6","id":"QR_9ae256e8-1d4c-4989-a96b-ccb7037d01b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:16:25][351695960832311][5908 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 18:16:25][351695960832311][5908 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 18:16:25][351695960832311][5908 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:17:05][352967352053916][0 ms][INFO] === Request start === [2025-09-09 18:17:05][352967352053916][1 ms][DEBUG] START check_scloud [2025-09-09 18:17:05][352967352053916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:17:05][352967352053916][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 1004 19832 24123796 183876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:17:05][352967352053916][320 ms][DEBUG] targetPkg: running [2025-09-09 18:17:05][352967352053916][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 18:17:05][352967352053916][320 ms][DEBUG] START check_boot_completed [2025-09-09 18:17:05][352967352053916][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:17:05][352967352053916][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:17:05][352967352053916][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:17:05][352967352053916][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:17:05][352967352053916][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:17:05][352967352053916][413 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:17:05][352967352053916][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352053916\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1687\"}'\'' -e'"" [2025-09-09 18:17:05][352967352053916][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:17:05][352967352053916][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352053916\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1687\"}'\'' -e'"" [2025-09-09 18:17:11][352967352053916][6068 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4434b8b4-011c-4813-9711-73fe530b8bc0","id":"QR_4434b8b4-011c-4813-9711-73fe530b8bc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:17:11][352967352053916][6224 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-09 18:17:11][352967352053916][6224 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-09 18:17:11][352967352053916][6225 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:17:15][352967352053916][0 ms][INFO] === Request start === [2025-09-09 18:17:15][352967352053916][1 ms][DEBUG] START check_scloud [2025-09-09 18:17:15][352967352053916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:17:15][352967352053916][261 ms][DEBUG] SU: done in 261 ms; outu0_a118 1004 19832 24305180 194904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:17:15][352967352053916][261 ms][DEBUG] targetPkg: running [2025-09-09 18:17:15][352967352053916][261 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 18:17:15][352967352053916][261 ms][DEBUG] START check_boot_completed [2025-09-09 18:17:15][352967352053916][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:17:15][352967352053916][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:17:15][352967352053916][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:17:15][352967352053916][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:17:15][352967352053916][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:17:15][352967352053916][355 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:17:15][352967352053916][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352053916\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7270\"}'\'' -e'"" [2025-09-09 18:17:15][352967352053916][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:17:15][352967352053916][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352053916\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7270\"}'\'' -e'"" [2025-09-09 18:17:19][352967352053916][4979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e338f0a0-0e70-4fd7-a0c7-01b57294b9f9","id":"QR_e338f0a0-0e70-4fd7-a0c7-01b57294b9f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:17:20][352967352053916][5135 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-09 18:17:20][352967352053916][5135 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-09 18:17:20][352967352053916][5135 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:18:03][357351210666356][0 ms][INFO] === Request start === [2025-09-09 18:18:03][357351210666356][1 ms][DEBUG] START check_scloud [2025-09-09 18:18:03][357351210666356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:18:03][357351210666356][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 1004 19832 24410204 206816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:18:03][357351210666356][319 ms][DEBUG] targetPkg: running [2025-09-09 18:18:03][357351210666356][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 18:18:03][357351210666356][319 ms][DEBUG] START check_boot_completed [2025-09-09 18:18:03][357351210666356][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:18:03][357351210666356][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:18:03][357351210666356][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:18:04][357351210666356][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:18:04][357351210666356][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:18:04][357351210666356][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:18:04][357351210666356][508 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1874\nsuccessfulTxPacketsPerSecond: 0.6887233902326501\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.1680616885256706\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1740\nsuccessfulRxPacketsPerSecond: 0.5997495551308245\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:18:04][357351210666356][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:18:04][357351210666356][897 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.540/283.540/283.540/0.000 ms\n [2025-09-09 18:18:04][357351210666356][897 ms][DEBUG] check_internet: online [2025-09-09 18:18:04][357351210666356][897 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:18:04][357351210666356][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357351210666356\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4004\"}'\'' -e'"" [2025-09-09 18:18:04][357351210666356][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:18:04][357351210666356][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357351210666356\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4004\"}'\'' -e'"" [2025-09-09 18:18:07][357351210666356][4271 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_768dc3b7-b23b-4e99-bb55-9bc937038b45","id":"QR_768dc3b7-b23b-4e99-bb55-9bc937038b45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:18:08][357351210666356][4427 ms][DEBUG] proc_open done in 3529 ms; code=255; res.len=3343 [2025-09-09 18:18:08][357351210666356][4427 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 18:18:08][357351210666356][4427 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:18:10][357351210666356][1 ms][INFO] === Request start === [2025-09-09 18:18:10][357351210666356][1 ms][DEBUG] START check_scloud [2025-09-09 18:18:10][357351210666356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:18:10][357351210666356][235 ms][DEBUG] SU: done in 234 ms; outu0_a118 1004 19832 24554852 216808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:18:10][357351210666356][235 ms][DEBUG] targetPkg: running [2025-09-09 18:18:10][357351210666356][235 ms][DEBUG] END check_scloud in 234 ms [2025-09-09 18:18:10][357351210666356][235 ms][DEBUG] START check_boot_completed [2025-09-09 18:18:10][357351210666356][235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:18:10][357351210666356][280 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 18:18:10][357351210666356][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:18:10][357351210666356][358 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 18:18:10][357351210666356][358 ms][DEBUG] END check_boot_completed in 123 ms [2025-09-09 18:18:10][357351210666356][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:18:10][357351210666356][452 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1874\nsuccessfulTxPacketsPerSecond: 0.6887233902326501\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.1680616885256706\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1740\nsuccessfulRxPacketsPerSecond: 0.5997495551308245\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:18:10][357351210666356][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:18:11][357351210666356][890 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.517/341.517/341.517/0.000 ms\n [2025-09-09 18:18:11][357351210666356][890 ms][DEBUG] check_internet: online [2025-09-09 18:18:11][357351210666356][890 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:18:11][357351210666356][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357351210666356\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5616\"}'\'' -e'"" [2025-09-09 18:18:11][357351210666356][890 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:18:11][357351210666356][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357351210666356\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5616\"}'\'' -e'"" [2025-09-09 18:18:17][357351210666356][6763 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12d5a0b3-97af-4fc7-a98b-7f367f132d91","id":"QR_12d5a0b3-97af-4fc7-a98b-7f367f132d91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:18:17][357351210666356][6919 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-09-09 18:18:17][357351210666356][6919 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-09-09 18:18:17][357351210666356][6920 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:18:22][351088108396813][0 ms][INFO] === Request start === [2025-09-09 18:18:22][351088108396813][1 ms][DEBUG] START check_scloud [2025-09-09 18:18:22][351088108396813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:18:23][351088108396813][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 1004 19832 24689068 226804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:18:23][351088108396813][265 ms][DEBUG] targetPkg: running [2025-09-09 18:18:23][351088108396813][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 18:18:23][351088108396813][265 ms][DEBUG] START check_boot_completed [2025-09-09 18:18:23][351088108396813][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:18:23][351088108396813][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:18:23][351088108396813][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:18:23][351088108396813][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:18:23][351088108396813][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:18:23][351088108396813][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:18:23][351088108396813][499 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1874\nsuccessfulTxPacketsPerSecond: 0.6887233902326501\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.1680616885256706\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1740\nsuccessfulRxPacketsPerSecond: 0.5997495551308245\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:18:23][351088108396813][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:18:23][351088108396813][936 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.079/305.079/305.079/0.000 ms\n [2025-09-09 18:18:23][351088108396813][937 ms][DEBUG] check_internet: online [2025-09-09 18:18:23][351088108396813][937 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:18:23][351088108396813][937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088108396813\",\"model\":\"SM-A725M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2429\"}'\'' -e'"" [2025-09-09 18:18:23][351088108396813][937 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:18:23][351088108396813][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088108396813\",\"model\":\"SM-A725M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2429\"}'\'' -e'"" [2025-09-09 18:18:28][351088108396813][5060 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9a038bd-5470-4c29-be78-dfb0bcbdaa43","id":"QR_b9a038bd-5470-4c29-be78-dfb0bcbdaa43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:18:28][351088108396813][5216 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-09-09 18:18:28][351088108396813][5216 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-09-09 18:18:28][351088108396813][5216 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:18:31][351088108396813][0 ms][INFO] === Request start === [2025-09-09 18:18:31][351088108396813][1 ms][DEBUG] START check_scloud [2025-09-09 18:18:31][351088108396813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:18:31][351088108396813][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 1004 19832 24804884 238660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:18:31][351088108396813][309 ms][DEBUG] targetPkg: running [2025-09-09 18:18:31][351088108396813][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 18:18:31][351088108396813][309 ms][DEBUG] START check_boot_completed [2025-09-09 18:18:31][351088108396813][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:18:32][351088108396813][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:18:32][351088108396813][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:18:32][351088108396813][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:18:32][351088108396813][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:18:32][351088108396813][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:18:32][351088108396813][512 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2217584 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1874\nsuccessfulTxPacketsPerSecond: 0.6887233902326501\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.1680616885256706\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1740\nsuccessfulRxPacketsPerSecond: 0.5997495551308245\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 135Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:18:32][351088108396813][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:18:32][351088108396813][903 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.747/253.747/253.747/0.000 ms\n [2025-09-09 18:18:32][351088108396813][903 ms][DEBUG] check_internet: online [2025-09-09 18:18:32][351088108396813][903 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:18:32][351088108396813][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088108396813\",\"model\":\"SM-A725M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9073\"}'\'' -e'"" [2025-09-09 18:18:32][351088108396813][903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:18:32][351088108396813][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088108396813\",\"model\":\"SM-A725M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9073\"}'\'' -e'"" [2025-09-09 18:18:40][351088108396813][8651 ms][DEBUG] proc_open done in 7748 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 18:18:40][351088108396813][8651 ms][DEBUG] END runCmdUntilRes#1 in 7748 ms [2025-09-09 18:18:40][351088108396813][8651 ms][WARN] Detected error: Process with pid 1004 either refused to load frida-agent, or terminated during injectionProcess with pid 1004 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 18:18:40][351088108396813][8651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:18:40][351088108396813][9057 ms][DEBUG] SU: done in 406 ms; out [2025-09-09 18:18:40][351088108396813][9057 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 18:18:40][351088108396813][9307 ms][DEBUG] SU: done in 250 ms; out [2025-09-09 18:18:40][351088108396813][9307 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 18:18:40][351088108396813][9307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:18:41][351088108396813][9510 ms][DEBUG] SU: done in 203 ms; out [2025-09-09 18:18:41][351088108396813][9510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:18:41][351088108396813][9807 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 18:18:43][351088108396813][11822 ms][DEBUG] START check_boot_completed [2025-09-09 18:18:43][351088108396813][11822 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:18:43][351088108396813][11869 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:18:43][351088108396813][11869 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:18:43][351088108396813][11915 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:18:43][351088108396813][11915 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:18:46][351088108396813][14930 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 18:18:46][351088108396813][14930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088108396813\",\"model\":\"SM-A725M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9073\"}'\'' -e'"" [2025-09-09 18:18:48][351088108396813][16586 ms][DEBUG] proc_open done in 1656 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-09 18:18:48][351088108396813][16586 ms][DEBUG] END runCmdUntilRes#2 in 1656 ms [2025-09-09 18:18:48][351088108396813][16586 ms][WARN] Detected error 2; Reboot the device [2025-09-09 18:18:48][351088108396813][16586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:18:48][351088108396813][16836 ms][DEBUG] SU: done in 250 ms; outsystem 3039 2673 7353476 122956 0 0 R system_server\n [2025-09-09 18:18:48][351088108396813][16836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-09 18:18:49][351088108396813][17492 ms][DEBUG] SU: done in 656 ms; out [2025-09-09 18:20:04][351506556608116][0 ms][INFO] === Request start === [2025-09-09 18:20:04][351506556608116][1 ms][DEBUG] START check_scloud [2025-09-09 18:20:04][351506556608116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:20:05][351506556608116][386 ms][DEBUG] SU: done in 385 ms; out [2025-09-09 18:20:05][351506556608116][386 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 18:20:05][351506556608116][417 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 18:20:05][351506556608116][417 ms][DEBUG] check_devices: device found [2025-09-09 18:20:05][351506556608116][417 ms][WARN] targetPkg: not running, restarting [2025-09-09 18:20:05][351506556608116][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:20:05][351506556608116][573 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 18:20:05][351506556608116][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:20:05][351506556608116][823 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 18:20:07][351506556608116][2838 ms][DEBUG] END check_scloud in 2837 ms [2025-09-09 18:20:07][351506556608116][2838 ms][DEBUG] START check_boot_completed [2025-09-09 18:20:07][351506556608116][2838 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:20:07][351506556608116][2885 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:20:07][351506556608116][2885 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:20:07][351506556608116][2963 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 18:20:07][351506556608116][2963 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 18:20:07][351506556608116][2963 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:20:07][351506556608116][3182 ms][DEBUG] SU: done in 219 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 87\nsuccessfulTxPacketsPerSecond: 4.396690216345778\nretriedTxPackets: 5\nretriedTxPacketsPerSecond: 0.6048077682381762\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 71\nsuccessfulRxPacketsPerSecond: 3.824458612185685\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:20:07][351506556608116][3182 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:20:08][351506556608116][4166 ms][DEBUG] SU: done in 984 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.116/301.116/301.116/0.000 ms\n [2025-09-09 18:20:08][351506556608116][4166 ms][DEBUG] check_internet: online [2025-09-09 18:20:08][351506556608116][4166 ms][DEBUG] rawBody.length=1149 [2025-09-09 18:20:08][351506556608116][4166 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556608116\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5443\"}'\'' -e'"" [2025-09-09 18:20:08][351506556608116][4166 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:20:08][351506556608116][4166 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556608116\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5443\"}'\'' -e'"" [2025-09-09 18:20:14][351506556608116][9415 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-09 18:20:14][351506556608116][9571 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=107 [2025-09-09 18:20:14][351506556608116][9571 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-09 18:20:14][351506556608116][9571 ms][INFO] SUCCESS response from frida (len=107) [2025-09-09 18:20:14][][1 ms][INFO] === Request start === [2025-09-09 18:20:14][][1 ms][DEBUG] START check_scloud [2025-09-09 18:20:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:20:14][][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 8534 5016 23626180 125544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:20:14][][338 ms][DEBUG] targetPkg: running [2025-09-09 18:20:14][][338 ms][DEBUG] END check_scloud in 337 ms [2025-09-09 18:20:14][][338 ms][DEBUG] START check_boot_completed [2025-09-09 18:20:14][][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:20:14][][370 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:20:14][][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:20:15][][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:20:15][][416 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:20:15][][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:20:15][][542 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 191\nsuccessfulTxPacketsPerSecond: 18.247718207838965\nretriedTxPackets: 22\nretriedTxPacketsPerSecond: 2.3274265911507857\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 162\nsuccessfulRxPacketsPerSecond: 15.66963957002144\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:20:15][][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:20:15][][979 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.319/215.319/215.319/0.000 ms\n [2025-09-09 18:20:15][][979 ms][DEBUG] check_internet: online [2025-09-09 18:20:15][][979 ms][DEBUG] rawBody.length=1130 [2025-09-09 18:20:15][][979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YX925ZTEF\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6545\"}'\'' -e'"" [2025-09-09 18:20:15][][979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:20:15][][979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YX925ZTEF\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6545\"}'\'' -e'"" [2025-09-09 18:20:20][][5696 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-09 18:20:20][][5853 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=107 [2025-09-09 18:20:20][][5853 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-09 18:20:20][][5853 ms][INFO] SUCCESS response from frida (len=107) [2025-09-09 18:20:22][351506556608116][0 ms][INFO] === Request start === [2025-09-09 18:20:22][351506556608116][1 ms][DEBUG] START check_scloud [2025-09-09 18:20:22][351506556608116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:20:22][351506556608116][343 ms][DEBUG] SU: done in 342 ms; outu0_a118 8534 5016 23779852 102324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:20:22][351506556608116][343 ms][DEBUG] targetPkg: running [2025-09-09 18:20:22][351506556608116][343 ms][DEBUG] END check_scloud in 342 ms [2025-09-09 18:20:22][351506556608116][343 ms][DEBUG] START check_boot_completed [2025-09-09 18:20:22][351506556608116][343 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:20:22][351506556608116][374 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:20:22][351506556608116][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:20:22][351506556608116][422 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:20:22][351506556608116][422 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 18:20:22][351506556608116][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:20:22][351506556608116][561 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 212\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 24\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 179\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:20:22][351506556608116][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:20:23][351506556608116][1014 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.903/220.903/220.903/0.000 ms\n [2025-09-09 18:20:23][351506556608116][1014 ms][DEBUG] check_internet: online [2025-09-09 18:20:23][351506556608116][1014 ms][DEBUG] rawBody.length=1159 [2025-09-09 18:20:23][351506556608116][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556608116\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8325\"}'\'' -e'"" [2025-09-09 18:20:23][351506556608116][1014 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:20:23][351506556608116][1014 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556608116\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8325\"}'\'' -e'"" [2025-09-09 18:20:29][351506556608116][7200 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4c66b93-7c65-4ad7-8bd0-503a996786ab","id":"QR_a4c66b93-7c65-4ad7-8bd0-503a996786ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:20:29][351506556608116][7357 ms][DEBUG] proc_open done in 6342 ms; code=255; res.len=3343 [2025-09-09 18:20:29][351506556608116][7357 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-09-09 18:20:29][351506556608116][7357 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:21:03][357962500626429][0 ms][INFO] === Request start === [2025-09-09 18:21:03][357962500626429][1 ms][DEBUG] START check_scloud [2025-09-09 18:21:03][357962500626429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:21:03][357962500626429][387 ms][DEBUG] SU: done in 386 ms; outu0_a118 8534 5016 23857544 67388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:21:03][357962500626429][387 ms][DEBUG] targetPkg: running [2025-09-09 18:21:03][357962500626429][387 ms][DEBUG] END check_scloud in 386 ms [2025-09-09 18:21:03][357962500626429][387 ms][DEBUG] START check_boot_completed [2025-09-09 18:21:03][357962500626429][387 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:21:03][357962500626429][434 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:21:03][357962500626429][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:21:03][357962500626429][481 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:21:03][357962500626429][481 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:21:03][357962500626429][481 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:21:03][357962500626429][481 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500626429\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1595\"}'\'' -e'"" [2025-09-09 18:21:03][357962500626429][481 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:21:03][357962500626429][481 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500626429\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1595\"}'\'' -e'"" [2025-09-09 18:21:08][357962500626429][5495 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a1ccdaf-e0e3-43cf-a5e3-d65470252d55","id":"QR_0a1ccdaf-e0e3-43cf-a5e3-d65470252d55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:21:08][357962500626429][5651 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-09 18:21:08][357962500626429][5651 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-09-09 18:21:08][357962500626429][5652 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:21:11][357962500626429][0 ms][INFO] === Request start === [2025-09-09 18:21:11][357962500626429][1 ms][DEBUG] START check_scloud [2025-09-09 18:21:11][357962500626429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:21:11][357962500626429][368 ms][DEBUG] SU: done in 367 ms; outu0_a118 8534 5016 24017424 84636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:21:11][357962500626429][368 ms][DEBUG] targetPkg: running [2025-09-09 18:21:11][357962500626429][368 ms][DEBUG] END check_scloud in 367 ms [2025-09-09 18:21:11][357962500626429][368 ms][DEBUG] START check_boot_completed [2025-09-09 18:21:11][357962500626429][368 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:21:11][357962500626429][415 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:21:11][357962500626429][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:21:11][357962500626429][477 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 18:21:11][357962500626429][477 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:21:11][357962500626429][477 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:21:11][357962500626429][478 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500626429\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2365\"}'\'' -e'"" [2025-09-09 18:21:11][357962500626429][478 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:21:11][357962500626429][478 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500626429\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2365\"}'\'' -e'"" [2025-09-09 18:21:16][357962500626429][4914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_967ec489-bee7-4653-b1d4-250bee31bc06","id":"QR_967ec489-bee7-4653-b1d4-250bee31bc06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:21:16][357962500626429][5070 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 18:21:16][357962500626429][5070 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-09 18:21:16][357962500626429][5070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:21:20][350938281402682][0 ms][INFO] === Request start === [2025-09-09 18:21:20][350938281402682][1 ms][DEBUG] START check_scloud [2025-09-09 18:21:20][350938281402682][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:21:20][350938281402682][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 8534 5016 24141592 98344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:21:20][350938281402682][275 ms][DEBUG] targetPkg: running [2025-09-09 18:21:20][350938281402682][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-09 18:21:20][350938281402682][275 ms][DEBUG] START check_boot_completed [2025-09-09 18:21:20][350938281402682][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:21:20][350938281402682][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:21:20][350938281402682][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:21:21][350938281402682][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:21:21][350938281402682][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:21:21][350938281402682][368 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:21:21][350938281402682][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281402682\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7921\"}'\'' -e'"" [2025-09-09 18:21:21][350938281402682][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:21:21][350938281402682][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281402682\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7921\"}'\'' -e'"" [2025-09-09 18:21:24][350938281402682][4305 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf2f4cc6-05b6-4f94-86e2-99b38d21d9ed","id":"QR_bf2f4cc6-05b6-4f94-86e2-99b38d21d9ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:21:25][350938281402682][4461 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-09 18:21:25][350938281402682][4461 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-09 18:21:25][350938281402682][4461 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:21:27][350938281402682][1 ms][INFO] === Request start === [2025-09-09 18:21:27][350938281402682][1 ms][DEBUG] START check_scloud [2025-09-09 18:21:27][350938281402682][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:21:27][350938281402682][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 8534 5016 24305652 106716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:21:27][350938281402682][315 ms][DEBUG] targetPkg: running [2025-09-09 18:21:27][350938281402682][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 18:21:27][350938281402682][315 ms][DEBUG] START check_boot_completed [2025-09-09 18:21:27][350938281402682][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:21:27][350938281402682][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:21:27][350938281402682][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:21:27][350938281402682][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:21:27][350938281402682][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:21:27][350938281402682][408 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:21:27][350938281402682][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281402682\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6720\"}'\'' -e'"" [2025-09-09 18:21:27][350938281402682][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:21:27][350938281402682][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281402682\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6720\"}'\'' -e'"" [2025-09-09 18:21:32][350938281402682][5157 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b745eaa-5ef6-4ddd-abe0-e6404b9e064c","id":"QR_0b745eaa-5ef6-4ddd-abe0-e6404b9e064c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:21:32][350938281402682][5313 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-09 18:21:32][350938281402682][5313 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-09 18:21:32][350938281402682][5313 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:24:04][351798811642226][1 ms][INFO] === Request start === [2025-09-09 18:24:04][351798811642226][1 ms][DEBUG] START check_scloud [2025-09-09 18:24:04][351798811642226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:24:04][351798811642226][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 8534 5016 24391620 120476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:24:04][351798811642226][270 ms][DEBUG] targetPkg: running [2025-09-09 18:24:04][351798811642226][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-09 18:24:04][351798811642226][270 ms][DEBUG] START check_boot_completed [2025-09-09 18:24:04][351798811642226][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:24:04][351798811642226][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:24:04][351798811642226][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:24:05][351798811642226][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:24:05][351798811642226][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:24:05][351798811642226][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:24:05][351798811642226][489 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 779\nsuccessfulTxPacketsPerSecond: 6.721293948948923\nretriedTxPackets: 91\nretriedTxPacketsPerSecond: 1.5628440832807031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 838\nsuccessfulRxPacketsPerSecond: 6.149188640181045\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:24:05][351798811642226][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:24:06][351798811642226][1879 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.731/299.731/299.731/0.000 ms\n [2025-09-09 18:24:06][351798811642226][1879 ms][DEBUG] check_internet: online [2025-09-09 18:24:06][351798811642226][1879 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:24:06][351798811642226][1879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811642226\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5513\"}'\'' -e'"" [2025-09-09 18:24:06][351798811642226][1879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:24:06][351798811642226][1879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811642226\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5513\"}'\'' -e'"" [2025-09-09 18:24:11][351798811642226][6409 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37694e1c-a24d-41f1-b2a0-6fddd5611588","id":"QR_37694e1c-a24d-41f1-b2a0-6fddd5611588","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:24:11][351798811642226][6565 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3343 [2025-09-09 18:24:11][351798811642226][6565 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 18:24:11][351798811642226][6565 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:24:14][351798811642226][0 ms][INFO] === Request start === [2025-09-09 18:24:14][351798811642226][1 ms][DEBUG] START check_scloud [2025-09-09 18:24:14][351798811642226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:24:15][351798811642226][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 8534 5016 24568908 124984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:24:15][351798811642226][322 ms][DEBUG] targetPkg: running [2025-09-09 18:24:15][351798811642226][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 18:24:15][351798811642226][322 ms][DEBUG] START check_boot_completed [2025-09-09 18:24:15][351798811642226][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:24:15][351798811642226][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:24:15][351798811642226][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:24:15][351798811642226][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:24:15][351798811642226][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:24:15][351798811642226][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:24:15][351798811642226][541 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 779\nsuccessfulTxPacketsPerSecond: 6.721293948948923\nretriedTxPackets: 91\nretriedTxPacketsPerSecond: 1.5628440832807031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 838\nsuccessfulRxPacketsPerSecond: 6.149188640181045\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:24:15][351798811642226][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:24:15][351798811642226][931 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.400/289.400/289.400/0.000 ms\n [2025-09-09 18:24:15][351798811642226][931 ms][DEBUG] check_internet: online [2025-09-09 18:24:15][351798811642226][931 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:24:15][351798811642226][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811642226\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4921\"}'\'' -e'"" [2025-09-09 18:24:15][351798811642226][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:24:15][351798811642226][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811642226\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4921\"}'\'' -e'"" [2025-09-09 18:24:19][351798811642226][4508 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2f3274d-745d-405d-ba65-203fbcb5c5a2","id":"QR_b2f3274d-745d-405d-ba65-203fbcb5c5a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:24:19][351798811642226][4664 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 18:24:19][351798811642226][4665 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-09 18:24:19][351798811642226][4665 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:24:21][350719585991475][0 ms][INFO] === Request start === [2025-09-09 18:24:21][350719585991475][0 ms][DEBUG] START check_scloud [2025-09-09 18:24:21][350719585991475][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:24:21][350719585991475][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 8534 5016 24695060 134848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:24:21][350719585991475][316 ms][DEBUG] targetPkg: running [2025-09-09 18:24:21][350719585991475][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 18:24:21][350719585991475][316 ms][DEBUG] START check_boot_completed [2025-09-09 18:24:21][350719585991475][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:24:21][350719585991475][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:24:21][350719585991475][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:24:21][350719585991475][411 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:24:21][350719585991475][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 18:24:21][350719585991475][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:24:21][350719585991475][566 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 779\nsuccessfulTxPacketsPerSecond: 6.721293948948923\nretriedTxPackets: 91\nretriedTxPacketsPerSecond: 1.5628440832807031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 838\nsuccessfulRxPacketsPerSecond: 6.149188640181045\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:24:21][350719585991475][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:24:22][350719585991475][972 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.874/306.874/306.874/0.000 ms\n [2025-09-09 18:24:22][350719585991475][972 ms][DEBUG] check_internet: online [2025-09-09 18:24:22][350719585991475][972 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:24:22][350719585991475][972 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350719585991475\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2397\"}'\'' -e'"" [2025-09-09 18:24:22][350719585991475][972 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:24:22][350719585991475][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350719585991475\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2397\"}'\'' -e'"" [2025-09-09 18:24:25][350719585991475][4268 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5379d69b-40a6-4100-a7e0-9cab054d8cf5","id":"QR_5379d69b-40a6-4100-a7e0-9cab054d8cf5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:24:25][350719585991475][4424 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-09 18:24:25][350719585991475][4424 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-09 18:24:25][350719585991475][4424 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:24:28][350719585991475][0 ms][INFO] === Request start === [2025-09-09 18:24:28][350719585991475][1 ms][DEBUG] START check_scloud [2025-09-09 18:24:28][350719585991475][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:24:28][350719585991475][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 8534 5016 24860152 146756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:24:28][350719585991475][325 ms][DEBUG] targetPkg: running [2025-09-09 18:24:28][350719585991475][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 18:24:28][350719585991475][325 ms][DEBUG] START check_boot_completed [2025-09-09 18:24:28][350719585991475][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:24:28][350719585991475][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:24:28][350719585991475][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:24:28][350719585991475][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:24:28][350719585991475][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:24:28][350719585991475][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:24:28][350719585991475][527 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 779\nsuccessfulTxPacketsPerSecond: 6.721293948948923\nretriedTxPackets: 91\nretriedTxPacketsPerSecond: 1.5628440832807031\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 838\nsuccessfulRxPacketsPerSecond: 6.149188640181045\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:24:28][350719585991475][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:24:29][350719585991475][918 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.423/277.423/277.423/0.000 ms\n [2025-09-09 18:24:29][350719585991475][918 ms][DEBUG] check_internet: online [2025-09-09 18:24:29][350719585991475][918 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:24:29][350719585991475][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350719585991475\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4478\"}'\'' -e'"" [2025-09-09 18:24:29][350719585991475][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:24:29][350719585991475][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350719585991475\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4478\"}'\'' -e'"" [2025-09-09 18:24:33][350719585991475][5495 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2e89c3e-d2c8-4c22-949b-2e824ad82604","id":"QR_a2e89c3e-d2c8-4c22-949b-2e824ad82604","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:24:33][350719585991475][5651 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-09 18:24:33][350719585991475][5651 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-09 18:24:33][350719585991475][5651 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:25:03][357435840293242][0 ms][INFO] === Request start === [2025-09-09 18:25:03][357435840293242][1 ms][DEBUG] START check_scloud [2025-09-09 18:25:03][357435840293242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:25:03][357435840293242][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 8534 5016 24959636 158696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:25:03][357435840293242][269 ms][DEBUG] targetPkg: running [2025-09-09 18:25:03][357435840293242][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 18:25:03][357435840293242][269 ms][DEBUG] START check_boot_completed [2025-09-09 18:25:03][357435840293242][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:25:03][357435840293242][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:25:03][357435840293242][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:25:03][357435840293242][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:25:03][357435840293242][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:25:03][357435840293242][362 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:25:03][357435840293242][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840293242\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6652\"}'\'' -e'"" [2025-09-09 18:25:03][357435840293242][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:25:03][357435840293242][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840293242\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6652\"}'\'' -e'"" [2025-09-09 18:25:07][357435840293242][4470 ms][DEBUG] proc_open done in 4108 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 18:25:07][357435840293242][4471 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-09 18:25:07][357435840293242][4471 ms][WARN] Detected error: Process with pid 8534 either refused to load frida-agent, or terminated during injectionProcess with pid 8534 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 18:25:07][357435840293242][4471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:25:07][357435840293242][4721 ms][DEBUG] SU: done in 250 ms; outsystem 5438 5016 13277948 591584 ep_poll 0 S system_server\n [2025-09-09 18:25:07][357435840293242][4721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 18:25:08][357435840293242][4861 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 18:25:08][357435840293242][4861 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 18:25:08][357435840293242][4861 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:25:08][357435840293242][4986 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 18:25:08][357435840293242][4986 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:25:08][357435840293242][5174 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 18:25:10][357435840293242][7189 ms][DEBUG] START check_boot_completed [2025-09-09 18:25:10][357435840293242][7189 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:25:10][357435840293242][7220 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:25:10][357435840293242][7220 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:25:10][357435840293242][7267 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:25:10][357435840293242][7267 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:25:13][357435840293242][10282 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 18:25:13][357435840293242][10282 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840293242\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6652\"}'\'' -e'"" [2025-09-09 18:25:18][357435840293242][14968 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99ec483e-4816-40d9-b64b-8b8a1dc40790","id":"QR_99ec483e-4816-40d9-b64b-8b8a1dc40790","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:25:18][357435840293242][15124 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-09 18:25:18][357435840293242][15124 ms][DEBUG] END runCmdUntilRes#2 in 4843 ms [2025-09-09 18:25:18][357435840293242][15124 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:25:20][357435840293242][0 ms][INFO] === Request start === [2025-09-09 18:25:20][357435840293242][1 ms][DEBUG] START check_scloud [2025-09-09 18:25:20][357435840293242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:25:21][357435840293242][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 18936 5016 23670368 126132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:25:21][357435840293242][259 ms][DEBUG] targetPkg: running [2025-09-09 18:25:21][357435840293242][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-09 18:25:21][357435840293242][259 ms][DEBUG] START check_boot_completed [2025-09-09 18:25:21][357435840293242][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:25:21][357435840293242][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:25:21][357435840293242][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:25:21][357435840293242][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:25:21][357435840293242][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:25:21][357435840293242][352 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:25:21][357435840293242][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840293242\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1809\"}'\'' -e'"" [2025-09-09 18:25:21][357435840293242][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:25:21][357435840293242][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840293242\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1809\"}'\'' -e'"" [2025-09-09 18:25:25][357435840293242][5039 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4063700e-c5b3-4b3e-a4cb-739f19dcf50c","id":"QR_4063700e-c5b3-4b3e-a4cb-739f19dcf50c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:25:25][357435840293242][5195 ms][DEBUG] proc_open done in 4843 ms; code=255; res.len=3343 [2025-09-09 18:25:25][357435840293242][5195 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-09-09 18:25:25][357435840293242][5195 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:25:30][352485227141857][0 ms][INFO] === Request start === [2025-09-09 18:25:30][352485227141857][1 ms][DEBUG] START check_scloud [2025-09-09 18:25:30][352485227141857][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:25:30][352485227141857][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 18936 5016 23848692 139048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:25:30][352485227141857][249 ms][DEBUG] targetPkg: running [2025-09-09 18:25:30][352485227141857][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-09 18:25:30][352485227141857][249 ms][DEBUG] START check_boot_completed [2025-09-09 18:25:30][352485227141857][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:25:30][352485227141857][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:25:30][352485227141857][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:25:30][352485227141857][358 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 18:25:30][352485227141857][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:25:30][352485227141857][358 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:25:30][352485227141857][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485227141857\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3096\"}'\'' -e'"" [2025-09-09 18:25:30][352485227141857][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:25:30][352485227141857][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485227141857\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3096\"}'\'' -e'"" [2025-09-09 18:25:34][352485227141857][4279 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b014952-9820-452a-8da1-48a4b559a8a8","id":"QR_4b014952-9820-452a-8da1-48a4b559a8a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:25:34][352485227141857][4435 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-09-09 18:25:34][352485227141857][4435 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-09 18:25:34][352485227141857][4435 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:25:36][352485227141857][0 ms][INFO] === Request start === [2025-09-09 18:25:36][352485227141857][1 ms][DEBUG] START check_scloud [2025-09-09 18:25:36][352485227141857][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:25:37][352485227141857][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 18936 5016 24013848 150920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:25:37][352485227141857][286 ms][DEBUG] targetPkg: running [2025-09-09 18:25:37][352485227141857][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 18:25:37][352485227141857][287 ms][DEBUG] START check_boot_completed [2025-09-09 18:25:37][352485227141857][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:25:37][352485227141857][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:25:37][352485227141857][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:25:37][352485227141857][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 18:25:37][352485227141857][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:25:37][352485227141857][396 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:25:37][352485227141857][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485227141857\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7308\"}'\'' -e'"" [2025-09-09 18:25:37][352485227141857][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:25:37][352485227141857][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485227141857\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7308\"}'\'' -e'"" [2025-09-09 18:25:41][352485227141857][4910 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02a96cce-f30e-4d5b-b3a5-2ab043f4181e","id":"QR_02a96cce-f30e-4d5b-b3a5-2ab043f4181e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:25:42][352485227141857][5066 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-09 18:25:42][352485227141857][5066 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-09 18:25:42][352485227141857][5066 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:27:03][352946240877207][1 ms][INFO] === Request start === [2025-09-09 18:27:03][352946240877207][1 ms][DEBUG] START check_scloud [2025-09-09 18:27:03][352946240877207][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:27:03][352946240877207][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18936 5016 24044320 161928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:27:03][352946240877207][317 ms][DEBUG] targetPkg: running [2025-09-09 18:27:03][352946240877207][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 18:27:03][352946240877207][317 ms][DEBUG] START check_boot_completed [2025-09-09 18:27:03][352946240877207][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:27:03][352946240877207][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:27:03][352946240877207][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:27:03][352946240877207][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:27:03][352946240877207][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:27:03][352946240877207][427 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:27:03][352946240877207][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946240877207\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2226\"}'\'' -e'"" [2025-09-09 18:27:03][352946240877207][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:27:03][352946240877207][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946240877207\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2226\"}'\'' -e'"" [2025-09-09 18:27:08][352946240877207][4956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d05aeeb6-b2e1-4922-b275-c4754890f002","id":"QR_d05aeeb6-b2e1-4922-b275-c4754890f002","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:27:08][352946240877207][5113 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 18:27:08][352946240877207][5113 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 18:27:08][352946240877207][5113 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:27:11][352946240877207][0 ms][INFO] === Request start === [2025-09-09 18:27:11][352946240877207][1 ms][DEBUG] START check_scloud [2025-09-09 18:27:11][352946240877207][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:27:11][352946240877207][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18936 5016 24187868 173072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:27:11][352946240877207][313 ms][DEBUG] targetPkg: running [2025-09-09 18:27:11][352946240877207][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 18:27:11][352946240877207][313 ms][DEBUG] START check_boot_completed [2025-09-09 18:27:11][352946240877207][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:27:11][352946240877207][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:27:11][352946240877207][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:27:11][352946240877207][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 18:27:11][352946240877207][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:27:11][352946240877207][423 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:27:11][352946240877207][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946240877207\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7045\"}'\'' -e'"" [2025-09-09 18:27:11][352946240877207][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:27:11][352946240877207][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946240877207\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7045\"}'\'' -e'"" [2025-09-09 18:27:15][352946240877207][4812 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56f3a56a-42d5-47f2-b824-739247186f11","id":"QR_56f3a56a-42d5-47f2-b824-739247186f11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:27:16][352946240877207][4968 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-09 18:27:16][352946240877207][4968 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-09 18:27:16][352946240877207][4968 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:28:03][350973429546587][0 ms][INFO] === Request start === [2025-09-09 18:28:03][350973429546587][1 ms][DEBUG] START check_scloud [2025-09-09 18:28:03][350973429546587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:28:03][350973429546587][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18936 5016 24330396 185072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:28:03][350973429546587][305 ms][DEBUG] targetPkg: running [2025-09-09 18:28:03][350973429546587][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 18:28:03][350973429546587][305 ms][DEBUG] START check_boot_completed [2025-09-09 18:28:03][350973429546587][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:28:03][350973429546587][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:28:03][350973429546587][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:28:03][350973429546587][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:28:03][350973429546587][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:28:03][350973429546587][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:28:03][350973429546587][492 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1126\nsuccessfulTxPacketsPerSecond: 1.4453575697999408\nretriedTxPackets: 167\nretriedTxPacketsPerSecond: 0.31656246485531847\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1152\nsuccessfulRxPacketsPerSecond: 1.3079028153232894\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:28:03][350973429546587][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:28:05][350973429546587][1898 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.830/300.830/300.830/0.000 ms\n [2025-09-09 18:28:05][350973429546587][1898 ms][DEBUG] check_internet: online [2025-09-09 18:28:05][350973429546587][1899 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:28:05][350973429546587][1899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973429546587\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1884\"}'\'' -e'"" [2025-09-09 18:28:05][350973429546587][1899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:28:05][350973429546587][1899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973429546587\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1884\"}'\'' -e'"" [2025-09-09 18:28:09][350973429546587][5866 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12b0d89e-e757-42ab-9e0e-930385784766","id":"QR_12b0d89e-e757-42ab-9e0e-930385784766","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:28:09][350973429546587][6022 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-09-09 18:28:09][350973429546587][6022 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-09-09 18:28:09][350973429546587][6022 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:28:11][350973429546587][0 ms][INFO] === Request start === [2025-09-09 18:28:11][350973429546587][1 ms][DEBUG] START check_scloud [2025-09-09 18:28:11][350973429546587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:28:12][350973429546587][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 18936 5016 24456484 196124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:28:12][350973429546587][296 ms][DEBUG] targetPkg: running [2025-09-09 18:28:12][350973429546587][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 18:28:12][350973429546587][296 ms][DEBUG] START check_boot_completed [2025-09-09 18:28:12][350973429546587][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:28:12][350973429546587][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:28:12][350973429546587][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:28:12][350973429546587][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:28:12][350973429546587][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:28:12][350973429546587][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:28:12][350973429546587][499 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1126\nsuccessfulTxPacketsPerSecond: 1.4453575697999408\nretriedTxPackets: 167\nretriedTxPacketsPerSecond: 0.31656246485531847\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1152\nsuccessfulRxPacketsPerSecond: 1.3079028153232894\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:28:12][350973429546587][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:28:12][350973429546587][952 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.435/333.435/333.435/0.000 ms\n [2025-09-09 18:28:12][350973429546587][952 ms][DEBUG] check_internet: online [2025-09-09 18:28:12][350973429546587][952 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:28:12][350973429546587][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973429546587\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9764\"}'\'' -e'"" [2025-09-09 18:28:12][350973429546587][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:28:12][350973429546587][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973429546587\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9764\"}'\'' -e'"" [2025-09-09 18:28:17][350973429546587][5701 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dba9bf1-64de-4084-b021-11542f5671d1","id":"QR_5dba9bf1-64de-4084-b021-11542f5671d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:28:17][350973429546587][5857 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 18:28:17][350973429546587][5857 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 18:28:17][350973429546587][5857 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:29:04][354106684198473][1 ms][INFO] === Request start === [2025-09-09 18:29:04][354106684198473][1 ms][DEBUG] START check_scloud [2025-09-09 18:29:04][354106684198473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:29:04][354106684198473][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 18936 5016 24572388 208356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:29:04][354106684198473][268 ms][DEBUG] targetPkg: running [2025-09-09 18:29:04][354106684198473][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-09 18:29:04][354106684198473][268 ms][DEBUG] START check_boot_completed [2025-09-09 18:29:04][354106684198473][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:29:04][354106684198473][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:29:04][354106684198473][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:29:04][354106684198473][363 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:29:04][354106684198473][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:29:04][354106684198473][363 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:29:04][354106684198473][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106684198473\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1924\"}'\'' -e'"" [2025-09-09 18:29:04][354106684198473][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:29:04][354106684198473][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106684198473\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1924\"}'\'' -e'"" [2025-09-09 18:29:07][354106684198473][3720 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0cde1022-4538-46cf-9db0-d8b0cfab884a","id":"QR_0cde1022-4538-46cf-9db0-d8b0cfab884a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:29:07][354106684198473][3876 ms][DEBUG] proc_open done in 3513 ms; code=255; res.len=3343 [2025-09-09 18:29:07][354106684198473][3876 ms][DEBUG] END runCmdUntilRes#1 in 3513 ms [2025-09-09 18:29:07][354106684198473][3876 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:29:10][354106684198473][0 ms][INFO] === Request start === [2025-09-09 18:29:10][354106684198473][1 ms][DEBUG] START check_scloud [2025-09-09 18:29:10][354106684198473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:29:10][354106684198473][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18936 5016 24741612 219240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:29:10][354106684198473][311 ms][DEBUG] targetPkg: running [2025-09-09 18:29:10][354106684198473][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 18:29:10][354106684198473][311 ms][DEBUG] START check_boot_completed [2025-09-09 18:29:10][354106684198473][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:29:10][354106684198473][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:29:10][354106684198473][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:29:10][354106684198473][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:29:10][354106684198473][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:29:10][354106684198473][404 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:29:10][354106684198473][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106684198473\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9416\"}'\'' -e'"" [2025-09-09 18:29:10][354106684198473][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:29:10][354106684198473][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106684198473\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9416\"}'\'' -e'"" [2025-09-09 18:29:14][354106684198473][4716 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c727daf-86dc-4f72-8621-5f885213dee5","id":"QR_8c727daf-86dc-4f72-8621-5f885213dee5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:29:15][354106684198473][4872 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-09-09 18:29:15][354106684198473][4872 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-09 18:29:15][354106684198473][4872 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:31:04][350792521059301][1 ms][INFO] === Request start === [2025-09-09 18:31:04][350792521059301][1 ms][DEBUG] START check_scloud [2025-09-09 18:31:04][350792521059301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:31:04][350792521059301][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18936 5016 24865584 231160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:31:04][350792521059301][305 ms][DEBUG] targetPkg: running [2025-09-09 18:31:04][350792521059301][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 18:31:04][350792521059301][305 ms][DEBUG] START check_boot_completed [2025-09-09 18:31:04][350792521059301][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:31:04][350792521059301][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:31:04][350792521059301][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:31:05][350792521059301][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:31:05][350792521059301][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:31:05][350792521059301][383 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:31:05][350792521059301][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792521059301\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8023\"}'\'' -e'"" [2025-09-09 18:31:05][350792521059301][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:31:05][350792521059301][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792521059301\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8023\"}'\'' -e'"" [2025-09-09 18:31:10][350792521059301][5944 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27ea6012-2c60-48e0-8994-d1249bd8ab82","id":"QR_27ea6012-2c60-48e0-8994-d1249bd8ab82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:31:10][350792521059301][6100 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-09 18:31:10][350792521059301][6100 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-09 18:31:10][350792521059301][6100 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:31:14][350792521059301][0 ms][INFO] === Request start === [2025-09-09 18:31:14][350792521059301][1 ms][DEBUG] START check_scloud [2025-09-09 18:31:14][350792521059301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:31:14][350792521059301][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 18936 5016 25004088 242144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:31:14][350792521059301][314 ms][DEBUG] targetPkg: running [2025-09-09 18:31:14][350792521059301][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 18:31:14][350792521059301][314 ms][DEBUG] START check_boot_completed [2025-09-09 18:31:14][350792521059301][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:31:14][350792521059301][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:31:14][350792521059301][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:31:14][350792521059301][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:31:14][350792521059301][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:31:14][350792521059301][408 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:31:14][350792521059301][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792521059301\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6033\"}'\'' -e'"" [2025-09-09 18:31:14][350792521059301][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:31:14][350792521059301][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792521059301\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6033\"}'\'' -e'"" [2025-09-09 18:31:18][350792521059301][4234 ms][DEBUG] proc_open done in 3826 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 18:31:18][350792521059301][4235 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-09 18:31:18][350792521059301][4235 ms][WARN] Detected error: Process with pid 18936 either refused to load frida-agent, or terminated during injectionProcess with pid 18936 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 18:31:18][350792521059301][4235 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:31:18][350792521059301][4531 ms][DEBUG] SU: done in 296 ms; outsystem 5438 5016 12977848 262340 ep_poll 0 S system_server\n [2025-09-09 18:31:18][350792521059301][4531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 18:31:18][350792521059301][4672 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 18:31:18][350792521059301][4672 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 18:31:18][350792521059301][4672 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:31:19][350792521059301][4797 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 18:31:19][350792521059301][4797 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:31:19][350792521059301][4953 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 18:31:21][350792521059301][6968 ms][DEBUG] START check_boot_completed [2025-09-09 18:31:21][350792521059301][6968 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:31:21][350792521059301][7015 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:31:21][350792521059301][7015 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:31:21][350792521059301][7062 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:31:21][350792521059301][7062 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:31:24][350792521059301][10077 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 18:31:24][350792521059301][10077 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792521059301\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6033\"}'\'' -e'"" [2025-09-09 18:31:28][350792521059301][13748 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db4121a7-6eb2-4923-abdc-aadc632c2e1a","id":"QR_db4121a7-6eb2-4923-abdc-aadc632c2e1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:31:28][350792521059301][13904 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-09-09 18:31:28][350792521059301][13904 ms][DEBUG] END runCmdUntilRes#2 in 3827 ms [2025-09-09 18:31:28][350792521059301][13904 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:32:03][352353131176205][0 ms][INFO] === Request start === [2025-09-09 18:32:03][352353131176205][1 ms][DEBUG] START check_scloud [2025-09-09 18:32:03][352353131176205][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:32:03][352353131176205][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 20213 5016 23636948 128396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:32:03][352353131176205][314 ms][DEBUG] targetPkg: running [2025-09-09 18:32:03][352353131176205][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 18:32:03][352353131176205][315 ms][DEBUG] START check_boot_completed [2025-09-09 18:32:03][352353131176205][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:32:03][352353131176205][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:32:03][352353131176205][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:32:03][352353131176205][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:32:03][352353131176205][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:32:03][352353131176205][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:32:03][352353131176205][580 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1451\nsuccessfulTxPacketsPerSecond: 1.079239418472594\nretriedTxPackets: 253\nretriedTxPacketsPerSecond: 0.2855833538112095\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1430\nsuccessfulRxPacketsPerSecond: 0.9231647948780958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:32:03][352353131176205][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:32:04][352353131176205][986 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.200/262.200/262.200/0.000 ms\n [2025-09-09 18:32:04][352353131176205][986 ms][DEBUG] check_internet: online [2025-09-09 18:32:04][352353131176205][986 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:32:04][352353131176205][986 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353131176205\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6635\"}'\'' -e'"" [2025-09-09 18:32:04][352353131176205][987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:32:04][352353131176205][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353131176205\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6635\"}'\'' -e'"" [2025-09-09 18:32:08][352353131176205][5329 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df108511-1edb-40e1-8e0b-791677ce0ec4","id":"QR_df108511-1edb-40e1-8e0b-791677ce0ec4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:32:08][352353131176205][5485 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-09-09 18:32:08][352353131176205][5485 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-09-09 18:32:08][352353131176205][5485 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:32:11][352353131176205][0 ms][INFO] === Request start === [2025-09-09 18:32:11][352353131176205][1 ms][DEBUG] START check_scloud [2025-09-09 18:32:11][352353131176205][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:32:11][352353131176205][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 20213 5016 23771228 139860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:32:11][352353131176205][283 ms][DEBUG] targetPkg: running [2025-09-09 18:32:11][352353131176205][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-09 18:32:11][352353131176205][283 ms][DEBUG] START check_boot_completed [2025-09-09 18:32:11][352353131176205][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:32:11][352353131176205][329 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:32:11][352353131176205][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:32:11][352353131176205][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:32:11][352353131176205][376 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:32:11][352353131176205][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:32:11][352353131176205][501 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1451\nsuccessfulTxPacketsPerSecond: 1.079239418472594\nretriedTxPackets: 253\nretriedTxPacketsPerSecond: 0.2855833538112095\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1430\nsuccessfulRxPacketsPerSecond: 0.9231647948780958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:32:11][352353131176205][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:32:11][352353131176205][845 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.361/261.361/261.361/0.000 ms\n [2025-09-09 18:32:11][352353131176205][845 ms][DEBUG] check_internet: online [2025-09-09 18:32:11][352353131176205][845 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:32:11][352353131176205][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353131176205\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8148\"}'\'' -e'"" [2025-09-09 18:32:11][352353131176205][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:32:11][352353131176205][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353131176205\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8148\"}'\'' -e'"" [2025-09-09 18:32:17][352353131176205][6219 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2925856-eff2-4c4b-ab5f-387a6904b435","id":"QR_c2925856-eff2-4c4b-ab5f-387a6904b435","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:32:17][352353131176205][6375 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-09 18:32:17][352353131176205][6375 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-09 18:32:17][352353131176205][6375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:33:04][350987120719400][0 ms][INFO] === Request start === [2025-09-09 18:33:04][350987120719400][1 ms][DEBUG] START check_scloud [2025-09-09 18:33:04][350987120719400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:33:04][350987120719400][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20213 5016 23915292 150840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:33:04][350987120719400][308 ms][DEBUG] targetPkg: running [2025-09-09 18:33:04][350987120719400][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 18:33:04][350987120719400][308 ms][DEBUG] START check_boot_completed [2025-09-09 18:33:04][350987120719400][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:33:04][350987120719400][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:33:04][350987120719400][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:33:04][350987120719400][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:33:04][350987120719400][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:33:04][350987120719400][401 ms][DEBUG] rawBody.length=1161 [2025-09-09 18:33:04][350987120719400][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987120719400\",\"model\":\"SM-S366VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-09-09 18:33:04][350987120719400][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:33:04][350987120719400][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987120719400\",\"model\":\"SM-S366VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-09-09 18:33:09][350987120719400][4900 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c66e9d5-6323-47c1-af3f-7ad57a51575c","id":"QR_0c66e9d5-6323-47c1-af3f-7ad57a51575c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:33:09][350987120719400][5056 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-09 18:33:09][350987120719400][5056 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-09 18:33:09][350987120719400][5057 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:33:13][350987120719400][1 ms][INFO] === Request start === [2025-09-09 18:33:13][350987120719400][1 ms][DEBUG] START check_scloud [2025-09-09 18:33:13][350987120719400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:33:13][350987120719400][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 20213 5016 24061928 161964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:33:13][350987120719400][310 ms][DEBUG] targetPkg: running [2025-09-09 18:33:13][350987120719400][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 18:33:13][350987120719400][310 ms][DEBUG] START check_boot_completed [2025-09-09 18:33:13][350987120719400][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:33:13][350987120719400][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:33:13][350987120719400][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:33:13][350987120719400][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:33:13][350987120719400][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:33:13][350987120719400][419 ms][DEBUG] rawBody.length=1151 [2025-09-09 18:33:13][350987120719400][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987120719400\",\"model\":\"SM-S366VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5417\"}'\'' -e'"" [2025-09-09 18:33:13][350987120719400][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:33:13][350987120719400][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987120719400\",\"model\":\"SM-S366VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5417\"}'\'' -e'"" [2025-09-09 18:33:19][350987120719400][6011 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46ae0747-1653-4af7-b6f1-02f9800650a3","id":"QR_46ae0747-1653-4af7-b6f1-02f9800650a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:33:19][350987120719400][6167 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-09-09 18:33:19][350987120719400][6168 ms][DEBUG] END runCmdUntilRes#1 in 5748 ms [2025-09-09 18:33:19][350987120719400][6168 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:34:04][351062770102171][0 ms][INFO] === Request start === [2025-09-09 18:34:04][351062770102171][1 ms][DEBUG] START check_scloud [2025-09-09 18:34:04][351062770102171][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:34:04][351062770102171][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20213 5016 24139740 173336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:34:04][351062770102171][299 ms][DEBUG] targetPkg: running [2025-09-09 18:34:04][351062770102171][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 18:34:04][351062770102171][299 ms][DEBUG] START check_boot_completed [2025-09-09 18:34:04][351062770102171][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:34:04][351062770102171][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:34:04][351062770102171][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:34:04][351062770102171][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:34:04][351062770102171][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:34:04][351062770102171][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:34:04][351062770102171][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1451\nsuccessfulTxPacketsPerSecond: 1.079239418472594\nretriedTxPackets: 253\nretriedTxPacketsPerSecond: 0.2855833538112095\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1430\nsuccessfulRxPacketsPerSecond: 0.9231647948780958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:34:04][351062770102171][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:34:06][351062770102171][1971 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.243/304.243/304.243/0.000 ms\n [2025-09-09 18:34:06][351062770102171][1971 ms][DEBUG] check_internet: online [2025-09-09 18:34:06][351062770102171][1971 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:34:06][351062770102171][1971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062770102171\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8715\"}'\'' -e'"" [2025-09-09 18:34:06][351062770102171][1971 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:34:06][351062770102171][1971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062770102171\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8715\"}'\'' -e'"" [2025-09-09 18:34:09][351062770102171][5345 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c08bd8e-d10d-41e1-8fa4-441381deed26","id":"QR_8c08bd8e-d10d-41e1-8fa4-441381deed26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:34:09][351062770102171][5501 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 18:34:09][351062770102171][5501 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 18:34:09][351062770102171][5501 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:34:12][351062770102171][0 ms][INFO] === Request start === [2025-09-09 18:34:12][351062770102171][1 ms][DEBUG] START check_scloud [2025-09-09 18:34:12][351062770102171][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:34:12][351062770102171][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 20213 5016 24296548 185084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:34:12][351062770102171][302 ms][DEBUG] targetPkg: running [2025-09-09 18:34:12][351062770102171][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 18:34:12][351062770102171][303 ms][DEBUG] START check_boot_completed [2025-09-09 18:34:12][351062770102171][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:34:12][351062770102171][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:34:12][351062770102171][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:34:12][351062770102171][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:34:12][351062770102171][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:34:12][351062770102171][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:34:12][351062770102171][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1451\nsuccessfulTxPacketsPerSecond: 1.079239418472594\nretriedTxPackets: 253\nretriedTxPacketsPerSecond: 0.2855833538112095\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1430\nsuccessfulRxPacketsPerSecond: 0.9231647948780958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:34:12][351062770102171][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:34:12][351062770102171][897 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.786/264.786/264.786/0.000 ms\n [2025-09-09 18:34:12][351062770102171][897 ms][DEBUG] check_internet: online [2025-09-09 18:34:12][351062770102171][897 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:34:12][351062770102171][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062770102171\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7868\"}'\'' -e'"" [2025-09-09 18:34:12][351062770102171][897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:34:12][351062770102171][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062770102171\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7868\"}'\'' -e'"" [2025-09-09 18:34:18][351062770102171][6270 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2bd2d104-e3fd-4d55-b8f2-3fad7667453b","id":"QR_2bd2d104-e3fd-4d55-b8f2-3fad7667453b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:34:18][351062770102171][6426 ms][DEBUG] proc_open done in 5528 ms; code=255; res.len=3343 [2025-09-09 18:34:18][351062770102171][6426 ms][DEBUG] END runCmdUntilRes#1 in 5528 ms [2025-09-09 18:34:18][351062770102171][6426 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:35:03][355008378935096][0 ms][INFO] === Request start === [2025-09-09 18:35:03][355008378935096][1 ms][DEBUG] START check_scloud [2025-09-09 18:35:03][355008378935096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:35:03][355008378935096][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 20213 5016 24410276 196196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:35:03][355008378935096][263 ms][DEBUG] targetPkg: running [2025-09-09 18:35:03][355008378935096][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 18:35:03][355008378935096][263 ms][DEBUG] START check_boot_completed [2025-09-09 18:35:03][355008378935096][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:35:03][355008378935096][294 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:35:03][355008378935096][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:35:04][355008378935096][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:35:04][355008378935096][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:35:04][355008378935096][342 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:35:04][355008378935096][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355008378935096\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6546\"}'\'' -e'"" [2025-09-09 18:35:04][355008378935096][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:35:04][355008378935096][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355008378935096\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6546\"}'\'' -e'"" [2025-09-09 18:35:09][355008378935096][5574 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76c25631-20e9-4c0d-a366-ce6054a0188b","id":"QR_76c25631-20e9-4c0d-a366-ce6054a0188b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:35:09][355008378935096][5731 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-09 18:35:09][355008378935096][5731 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-09 18:35:09][355008378935096][5731 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:35:11][355008378935096][0 ms][INFO] === Request start === [2025-09-09 18:35:11][355008378935096][1 ms][DEBUG] START check_scloud [2025-09-09 18:35:11][355008378935096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:35:12][355008378935096][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 20213 5016 24583596 207984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:35:12][355008378935096][295 ms][DEBUG] targetPkg: running [2025-09-09 18:35:12][355008378935096][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 18:35:12][355008378935096][296 ms][DEBUG] START check_boot_completed [2025-09-09 18:35:12][355008378935096][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:35:12][355008378935096][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:35:12][355008378935096][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:35:12][355008378935096][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:35:12][355008378935096][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:35:12][355008378935096][405 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:35:12][355008378935096][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355008378935096\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6768\"}'\'' -e'"" [2025-09-09 18:35:12][355008378935096][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:35:12][355008378935096][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355008378935096\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6768\"}'\'' -e'"" [2025-09-09 18:35:16][355008378935096][4482 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5468ea48-7ac2-48ae-9f23-d455f71066f4","id":"QR_5468ea48-7ac2-48ae-9f23-d455f71066f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:35:16][355008378935096][4638 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-09 18:35:16][355008378935096][4638 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 18:35:16][355008378935096][4638 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:40:03][351328113519656][1 ms][INFO] === Request start === [2025-09-09 18:40:03][351328113519656][1 ms][DEBUG] START check_scloud [2025-09-09 18:40:03][351328113519656][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:40:03][351328113519656][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 20213 5016 24743560 151612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:40:03][351328113519656][326 ms][DEBUG] targetPkg: running [2025-09-09 18:40:03][351328113519656][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-09 18:40:03][351328113519656][326 ms][DEBUG] START check_boot_completed [2025-09-09 18:40:03][351328113519656][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:40:03][351328113519656][357 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:40:03][351328113519656][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:40:03][351328113519656][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:40:03][351328113519656][405 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:40:03][351328113519656][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:40:03][351328113519656][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1792\nsuccessfulTxPacketsPerSecond: 0.5597901937027437\nretriedTxPackets: 343\nretriedTxPacketsPerSecond: 0.1303620999033787\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1721\nsuccessfulRxPacketsPerSecond: 0.4754382467064399\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:40:03][351328113519656][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:40:05][351328113519656][1904 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.365/303.365/303.365/0.000 ms\n [2025-09-09 18:40:05][351328113519656][1904 ms][DEBUG] check_internet: online [2025-09-09 18:40:05][351328113519656][1904 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:40:05][351328113519656][1904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328113519656\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2552\"}'\'' -e'"" [2025-09-09 18:40:05][351328113519656][1904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:40:05][351328113519656][1904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328113519656\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2552\"}'\'' -e'"" [2025-09-09 18:40:09][351328113519656][5825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_767a5141-60cb-4c72-a729-7b69bdbf2880","id":"QR_767a5141-60cb-4c72-a729-7b69bdbf2880","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:40:09][351328113519656][5981 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-09-09 18:40:09][351328113519656][5981 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-09 18:40:09][351328113519656][5981 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:40:11][351328113519656][0 ms][INFO] === Request start === [2025-09-09 18:40:11][351328113519656][1 ms][DEBUG] START check_scloud [2025-09-09 18:40:11][351328113519656][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:40:11][351328113519656][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 20213 5016 24870672 146980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:40:11][351328113519656][305 ms][DEBUG] targetPkg: running [2025-09-09 18:40:11][351328113519656][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 18:40:11][351328113519656][305 ms][DEBUG] START check_boot_completed [2025-09-09 18:40:11][351328113519656][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:40:11][351328113519656][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:40:11][351328113519656][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:40:12][351328113519656][430 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 18:40:12][351328113519656][430 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 18:40:12][351328113519656][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:40:12][351328113519656][586 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1792\nsuccessfulTxPacketsPerSecond: 0.5597901937027437\nretriedTxPackets: 343\nretriedTxPacketsPerSecond: 0.1303620999033787\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1721\nsuccessfulRxPacketsPerSecond: 0.4754382467064399\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:40:12][351328113519656][586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:40:12][351328113519656][914 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.359/218.359/218.359/0.000 ms\n [2025-09-09 18:40:12][351328113519656][914 ms][DEBUG] check_internet: online [2025-09-09 18:40:12][351328113519656][914 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:40:12][351328113519656][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328113519656\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2445\"}'\'' -e'"" [2025-09-09 18:40:12][351328113519656][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:40:12][351328113519656][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328113519656\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2445\"}'\'' -e'"" [2025-09-09 18:40:17][351328113519656][5741 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4013131a-1279-4c09-a46d-097ec8e662e4","id":"QR_4013131a-1279-4c09-a46d-097ec8e662e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:40:17][351328113519656][5897 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-09 18:40:17][351328113519656][5897 ms][DEBUG] END runCmdUntilRes#1 in 4982 ms [2025-09-09 18:40:17][351328113519656][5897 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:41:04][357436147499557][0 ms][INFO] === Request start === [2025-09-09 18:41:04][357436147499557][1 ms][DEBUG] START check_scloud [2025-09-09 18:41:04][357436147499557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:41:04][357436147499557][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 20213 5016 24967952 164440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:41:04][357436147499557][314 ms][DEBUG] targetPkg: running [2025-09-09 18:41:04][357436147499557][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 18:41:04][357436147499557][314 ms][DEBUG] START check_boot_completed [2025-09-09 18:41:04][357436147499557][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:41:04][357436147499557][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:41:04][357436147499557][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:41:04][357436147499557][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:41:04][357436147499557][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:41:04][357436147499557][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:41:04][357436147499557][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357436147499557\",\"model\":\"SM-A826S\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9679\"}'\'' -e'"" [2025-09-09 18:41:04][357436147499557][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:41:04][357436147499557][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357436147499557\",\"model\":\"SM-A826S\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9679\"}'\'' -e'"" [2025-09-09 18:41:08][357436147499557][4562 ms][DEBUG] proc_open done in 4155 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 18:41:08][357436147499557][4562 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-09 18:41:08][357436147499557][4562 ms][WARN] Detected error: Process with pid 20213 either refused to load frida-agent, or terminated during injectionProcess with pid 20213 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 18:41:08][357436147499557][4562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:41:08][357436147499557][4830 ms][DEBUG] SU: done in 267 ms; outsystem 5438 5016 12921612 218988 ep_poll 0 S system_server\n [2025-09-09 18:41:08][357436147499557][4830 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 18:41:09][357436147499557][4969 ms][DEBUG] SU: done in 138 ms; out [2025-09-09 18:41:09][357436147499557][4969 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 18:41:09][357436147499557][4969 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:41:09][357436147499557][5094 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 18:41:09][357436147499557][5094 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:41:09][357436147499557][5265 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 18:41:11][357436147499557][7280 ms][DEBUG] START check_boot_completed [2025-09-09 18:41:11][357436147499557][7281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:41:11][357436147499557][7327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:41:11][357436147499557][7327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:41:11][357436147499557][7374 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:41:11][357436147499557][7374 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:41:14][357436147499557][10389 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 18:41:14][357436147499557][10389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357436147499557\",\"model\":\"SM-A826S\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9679\"}'\'' -e'"" [2025-09-09 18:41:18][357436147499557][14732 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d690d54-fcab-4f08-8cb6-b3b575accf16","id":"QR_8d690d54-fcab-4f08-8cb6-b3b575accf16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:41:18][357436147499557][14888 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-09-09 18:41:18][357436147499557][14888 ms][DEBUG] END runCmdUntilRes#2 in 4499 ms [2025-09-09 18:41:18][357436147499557][14888 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:41:21][351885212746209][0 ms][INFO] === Request start === [2025-09-09 18:41:21][351885212746209][1 ms][DEBUG] START check_scloud [2025-09-09 18:41:21][351885212746209][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:41:21][351885212746209][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 22242 5016 23593120 125640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:41:21][351885212746209][258 ms][DEBUG] targetPkg: running [2025-09-09 18:41:21][351885212746209][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 18:41:21][351885212746209][258 ms][DEBUG] START check_boot_completed [2025-09-09 18:41:21][351885212746209][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:41:21][351885212746209][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:41:21][351885212746209][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:41:21][351885212746209][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:41:21][351885212746209][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:41:21][351885212746209][352 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:41:21][351885212746209][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885212746209\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3777\"}'\'' -e'"" [2025-09-09 18:41:21][351885212746209][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:41:21][351885212746209][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885212746209\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3777\"}'\'' -e'"" [2025-09-09 18:41:24][351885212746209][3570 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b94ba71-8fef-4ee2-90c0-afa6f379ce0e","id":"QR_3b94ba71-8fef-4ee2-90c0-afa6f379ce0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:41:24][351885212746209][3726 ms][DEBUG] proc_open done in 3373 ms; code=255; res.len=3343 [2025-09-09 18:41:24][351885212746209][3726 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-09 18:41:24][351885212746209][3726 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:41:26][355857110479635][0 ms][INFO] === Request start === [2025-09-09 18:41:26][355857110479635][0 ms][DEBUG] START check_scloud [2025-09-09 18:41:26][355857110479635][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:41:27][355857110479635][251 ms][DEBUG] SU: done in 251 ms; outu0_a118 22242 5016 23736628 138396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:41:27][355857110479635][251 ms][DEBUG] targetPkg: running [2025-09-09 18:41:27][355857110479635][251 ms][DEBUG] END check_scloud in 251 ms [2025-09-09 18:41:27][355857110479635][251 ms][DEBUG] START check_boot_completed [2025-09-09 18:41:27][355857110479635][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:41:27][355857110479635][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:41:27][355857110479635][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:41:27][355857110479635][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:41:27][355857110479635][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:41:27][355857110479635][345 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:41:27][355857110479635][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857110479635\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9706\"}'\'' -e'"" [2025-09-09 18:41:27][355857110479635][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:41:27][355857110479635][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857110479635\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9706\"}'\'' -e'"" [2025-09-09 18:41:31][355857110479635][4219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35b7ddc6-8f70-46fd-91ce-9ab04d07136c","id":"QR_35b7ddc6-8f70-46fd-91ce-9ab04d07136c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:41:31][355857110479635][4375 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 18:41:31][355857110479635][4375 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 18:41:31][355857110479635][4375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:41:33][352375455435339][0 ms][INFO] === Request start === [2025-09-09 18:41:33][352375455435339][1 ms][DEBUG] START check_scloud [2025-09-09 18:41:33][352375455435339][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:41:33][352375455435339][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 22242 5016 23884284 150536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:41:33][352375455435339][313 ms][DEBUG] targetPkg: running [2025-09-09 18:41:33][352375455435339][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 18:41:33][352375455435339][313 ms][DEBUG] START check_boot_completed [2025-09-09 18:41:33][352375455435339][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:41:33][352375455435339][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:41:33][352375455435339][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:41:33][352375455435339][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 18:41:33][352375455435339][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:41:33][352375455435339][423 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:41:33][352375455435339][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375455435339\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7620\"}'\'' -e'"" [2025-09-09 18:41:33][352375455435339][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:41:33][352375455435339][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375455435339\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7620\"}'\'' -e'"" [2025-09-09 18:41:36][352375455435339][3718 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82af34a4-2fee-4326-b87b-14d6081a22a5","id":"QR_82af34a4-2fee-4326-b87b-14d6081a22a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:41:37][352375455435339][3875 ms][DEBUG] proc_open done in 3451 ms; code=255; res.len=3343 [2025-09-09 18:41:37][352375455435339][3875 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-09 18:41:37][352375455435339][3875 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:44:04][353459960155522][1 ms][INFO] === Request start === [2025-09-09 18:44:04][353459960155522][1 ms][DEBUG] START check_scloud [2025-09-09 18:44:04][353459960155522][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:44:05][353459960155522][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 22242 5016 23891092 161796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:44:05][353459960155522][304 ms][DEBUG] targetPkg: running [2025-09-09 18:44:05][353459960155522][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 18:44:05][353459960155522][304 ms][DEBUG] START check_boot_completed [2025-09-09 18:44:05][353459960155522][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:44:05][353459960155522][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:44:05][353459960155522][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:44:05][353459960155522][414 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 18:44:05][353459960155522][414 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 18:44:05][353459960155522][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:44:05][353459960155522][569 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2047\nsuccessfulTxPacketsPerSecond: 0.8458805616646929\nretriedTxPackets: 412\nretriedTxPacketsPerSecond: 0.22888532845044632\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1939\nsuccessfulRxPacketsPerSecond: 0.7231449507564826\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:44:05][353459960155522][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:44:06][353459960155522][1944 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.227/302.227/302.227/0.000 ms\n [2025-09-09 18:44:06][353459960155522][1944 ms][DEBUG] check_internet: online [2025-09-09 18:44:06][353459960155522][1944 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:44:06][353459960155522][1944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459960155522\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3515\"}'\'' -e'"" [2025-09-09 18:44:06][353459960155522][1944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:44:06][353459960155522][1944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459960155522\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3515\"}'\'' -e'"" [2025-09-09 18:44:11][353459960155522][6583 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f281dc93-d979-447d-857f-5a7a29329094","id":"QR_f281dc93-d979-447d-857f-5a7a29329094","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:44:11][353459960155522][6739 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 18:44:11][353459960155522][6739 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 18:44:11][353459960155522][6739 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:44:15][353459960155522][0 ms][INFO] === Request start === [2025-09-09 18:44:15][353459960155522][1 ms][DEBUG] START check_scloud [2025-09-09 18:44:15][353459960155522][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:44:15][353459960155522][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 22242 5016 24054172 172824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:44:15][353459960155522][293 ms][DEBUG] targetPkg: running [2025-09-09 18:44:15][353459960155522][293 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 18:44:15][353459960155522][293 ms][DEBUG] START check_boot_completed [2025-09-09 18:44:15][353459960155522][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:44:15][353459960155522][339 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 18:44:15][353459960155522][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:44:15][353459960155522][388 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 18:44:15][353459960155522][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:44:15][353459960155522][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:44:15][353459960155522][510 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2047\nsuccessfulTxPacketsPerSecond: 0.8458805616646929\nretriedTxPackets: 412\nretriedTxPacketsPerSecond: 0.22888532845044632\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1939\nsuccessfulRxPacketsPerSecond: 0.7231449507564826\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:44:15][353459960155522][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:44:15][353459960155522][839 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.599/243.599/243.599/0.000 ms\n [2025-09-09 18:44:15][353459960155522][839 ms][DEBUG] check_internet: online [2025-09-09 18:44:15][353459960155522][839 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:44:15][353459960155522][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459960155522\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4366\"}'\'' -e'"" [2025-09-09 18:44:15][353459960155522][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:44:15][353459960155522][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353459960155522\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4366\"}'\'' -e'"" [2025-09-09 18:44:20][353459960155522][5603 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e224512-10eb-4535-b305-6e3c1890f121","id":"QR_8e224512-10eb-4535-b305-6e3c1890f121","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:44:20][353459960155522][5759 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-09 18:44:20][353459960155522][5759 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-09 18:44:20][353459960155522][5759 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:46:03][354255815989779][0 ms][INFO] === Request start === [2025-09-09 18:46:03][354255815989779][1 ms][DEBUG] START check_scloud [2025-09-09 18:46:03][354255815989779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:46:03][354255815989779][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22242 5016 24200796 184920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:46:03][354255815989779][314 ms][DEBUG] targetPkg: running [2025-09-09 18:46:03][354255815989779][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 18:46:03][354255815989779][314 ms][DEBUG] START check_boot_completed [2025-09-09 18:46:03][354255815989779][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:46:03][354255815989779][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:46:03][354255815989779][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:46:03][354255815989779][439 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 18:46:03][354255815989779][439 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 18:46:03][354255815989779][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:46:04][354255815989779][564 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2047\nsuccessfulTxPacketsPerSecond: 0.8458805616646929\nretriedTxPackets: 412\nretriedTxPacketsPerSecond: 0.22888532845044632\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1939\nsuccessfulRxPacketsPerSecond: 0.7231449507564826\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:46:04][354255815989779][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:46:05][354255815989779][1923 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.677/300.677/300.677/0.000 ms\n [2025-09-09 18:46:05][354255815989779][1923 ms][DEBUG] check_internet: online [2025-09-09 18:46:05][354255815989779][1923 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:46:05][354255815989779][1923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255815989779\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2811\"}'\'' -e'"" [2025-09-09 18:46:05][354255815989779][1923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:46:05][354255815989779][1923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255815989779\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2811\"}'\'' -e'"" [2025-09-09 18:46:09][354255815989779][5781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6217cd16-8aed-49e0-91e8-d945fadfd119","id":"QR_6217cd16-8aed-49e0-91e8-d945fadfd119","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:46:09][354255815989779][5938 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-09 18:46:09][354255815989779][5938 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-09 18:46:09][354255815989779][5938 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:46:11][354255815989779][1 ms][INFO] === Request start === [2025-09-09 18:46:11][354255815989779][1 ms][DEBUG] START check_scloud [2025-09-09 18:46:11][354255815989779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:46:12][354255815989779][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 22242 5016 24341284 195780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:46:12][354255815989779][300 ms][DEBUG] targetPkg: running [2025-09-09 18:46:12][354255815989779][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 18:46:12][354255815989779][300 ms][DEBUG] START check_boot_completed [2025-09-09 18:46:12][354255815989779][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:46:12][354255815989779][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:46:12][354255815989779][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:46:12][354255815989779][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:46:12][354255815989779][378 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 18:46:12][354255815989779][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:46:12][354255815989779][503 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2047\nsuccessfulTxPacketsPerSecond: 0.8458805616646929\nretriedTxPackets: 412\nretriedTxPacketsPerSecond: 0.22888532845044632\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1939\nsuccessfulRxPacketsPerSecond: 0.7231449507564826\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:46:12][354255815989779][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:46:12][354255815989779][987 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=381 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 381.889/381.889/381.889/0.000 ms\n [2025-09-09 18:46:12][354255815989779][987 ms][DEBUG] check_internet: online [2025-09-09 18:46:12][354255815989779][987 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:46:12][354255815989779][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255815989779\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4075\"}'\'' -e'"" [2025-09-09 18:46:12][354255815989779][987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:46:12][354255815989779][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255815989779\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4075\"}'\'' -e'"" [2025-09-09 18:46:17][354255815989779][5939 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03202116-abca-476b-8813-08242dfa7006","id":"QR_03202116-abca-476b-8813-08242dfa7006","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:46:17][354255815989779][6095 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 18:46:17][354255815989779][6095 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 18:46:17][354255815989779][6095 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:47:04][351587326764900][0 ms][INFO] === Request start === [2025-09-09 18:47:04][351587326764900][1 ms][DEBUG] START check_scloud [2025-09-09 18:47:04][351587326764900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:47:04][351587326764900][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 22242 5016 24428388 207908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:47:04][351587326764900][306 ms][DEBUG] targetPkg: running [2025-09-09 18:47:04][351587326764900][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 18:47:04][351587326764900][306 ms][DEBUG] START check_boot_completed [2025-09-09 18:47:04][351587326764900][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:47:04][351587326764900][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:47:04][351587326764900][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:47:04][351587326764900][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:47:04][351587326764900][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:47:04][351587326764900][399 ms][DEBUG] rawBody.length=1159 [2025-09-09 18:47:04][351587326764900][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351587326764900\",\"model\":\"SM-T225\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7324\"}'\'' -e'"" [2025-09-09 18:47:04][351587326764900][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:47:04][351587326764900][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351587326764900\",\"model\":\"SM-T225\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7324\"}'\'' -e'"" [2025-09-09 18:47:08][351587326764900][4508 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0e37ff4-460e-4a0c-827a-67f3bed9869a","id":"QR_e0e37ff4-460e-4a0c-827a-67f3bed9869a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:47:09][351587326764900][4664 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-09 18:47:09][351587326764900][4664 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-09 18:47:09][351587326764900][4664 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:47:12][351587326764900][1 ms][INFO] === Request start === [2025-09-09 18:47:12][351587326764900][1 ms][DEBUG] START check_scloud [2025-09-09 18:47:12][351587326764900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:47:12][351587326764900][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 22242 5016 24591340 218500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:47:12][351587326764900][296 ms][DEBUG] targetPkg: running [2025-09-09 18:47:12][351587326764900][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-09 18:47:12][351587326764900][296 ms][DEBUG] START check_boot_completed [2025-09-09 18:47:12][351587326764900][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:47:12][351587326764900][343 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:47:12][351587326764900][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:47:12][351587326764900][408 ms][DEBUG] SU: done in 65 ms; out [2025-09-09 18:47:12][351587326764900][408 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 18:47:12][351587326764900][408 ms][DEBUG] rawBody.length=1149 [2025-09-09 18:47:12][351587326764900][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351587326764900\",\"model\":\"SM-T225\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3078\"}'\'' -e'"" [2025-09-09 18:47:12][351587326764900][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:47:12][351587326764900][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351587326764900\",\"model\":\"SM-T225\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3078\"}'\'' -e'"" [2025-09-09 18:47:18][351587326764900][5560 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_607fb45a-6ee0-496c-aad6-7b59231666b1","id":"QR_607fb45a-6ee0-496c-aad6-7b59231666b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:47:18][351587326764900][5717 ms][DEBUG] proc_open done in 5308 ms; code=255; res.len=3343 [2025-09-09 18:47:18][351587326764900][5717 ms][DEBUG] END runCmdUntilRes#1 in 5309 ms [2025-09-09 18:47:18][351587326764900][5717 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:47:21][358997694493516][0 ms][INFO] === Request start === [2025-09-09 18:47:21][358997694493516][1 ms][DEBUG] START check_scloud [2025-09-09 18:47:21][358997694493516][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:47:21][358997694493516][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 22242 5016 24719476 230252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:47:21][358997694493516][265 ms][DEBUG] targetPkg: running [2025-09-09 18:47:21][358997694493516][265 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 18:47:21][358997694493516][265 ms][DEBUG] START check_boot_completed [2025-09-09 18:47:21][358997694493516][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:47:21][358997694493516][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:47:21][358997694493516][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:47:21][358997694493516][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:47:21][358997694493516][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:47:21][358997694493516][359 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:47:21][358997694493516][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997694493516\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5341\"}'\'' -e'"" [2025-09-09 18:47:21][358997694493516][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:47:21][358997694493516][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997694493516\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5341\"}'\'' -e'"" [2025-09-09 18:47:26][358997694493516][5420 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ddde4022-be2f-4166-8bf3-0ec2e1c8874f","id":"QR_ddde4022-be2f-4166-8bf3-0ec2e1c8874f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:47:26][358997694493516][5576 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 18:47:26][358997694493516][5576 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-09 18:47:26][358997694493516][5576 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:47:30][358997694493516][0 ms][INFO] === Request start === [2025-09-09 18:47:30][358997694493516][1 ms][DEBUG] START check_scloud [2025-09-09 18:47:30][358997694493516][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:47:30][358997694493516][264 ms][DEBUG] SU: done in 264 ms; outu0_a118 22242 5016 24845144 241352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:47:30][358997694493516][264 ms][DEBUG] targetPkg: running [2025-09-09 18:47:30][358997694493516][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 18:47:30][358997694493516][265 ms][DEBUG] START check_boot_completed [2025-09-09 18:47:30][358997694493516][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:47:30][358997694493516][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:47:30][358997694493516][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:47:30][358997694493516][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:47:30][358997694493516][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:47:30][358997694493516][358 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:47:30][358997694493516][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997694493516\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8864\"}'\'' -e'"" [2025-09-09 18:47:30][358997694493516][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:47:30][358997694493516][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997694493516\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8864\"}'\'' -e'"" [2025-09-09 18:47:34][358997694493516][3998 ms][DEBUG] proc_open done in 3640 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 18:47:34][358997694493516][3998 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-09 18:47:34][358997694493516][3998 ms][WARN] Detected error: Process with pid 22242 either refused to load frida-agent, or terminated during injectionProcess with pid 22242 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 18:47:34][358997694493516][3998 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 18:47:34][358997694493516][4263 ms][DEBUG] SU: done in 266 ms; outsystem 5438 5016 12921612 215804 ep_poll 0 S system_server\n [2025-09-09 18:47:34][358997694493516][4263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 18:47:34][358997694493516][4404 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 18:47:34][358997694493516][4404 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 18:47:34][358997694493516][4404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 18:47:34][358997694493516][4560 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 18:47:34][358997694493516][4560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 18:47:35][358997694493516][4716 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 18:47:37][358997694493516][6731 ms][DEBUG] START check_boot_completed [2025-09-09 18:47:37][358997694493516][6732 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:47:37][358997694493516][6778 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:47:37][358997694493516][6779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:47:37][358997694493516][6825 ms][DEBUG] SU: done in 46 ms; out [2025-09-09 18:47:37][358997694493516][6825 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 18:47:40][358997694493516][9840 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 18:47:40][358997694493516][9840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997694493516\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8864\"}'\'' -e'"" [2025-09-09 18:47:43][358997694493516][13042 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cdc8adc-bcd3-4703-8cc5-f7e9f0d3bcac","id":"QR_1cdc8adc-bcd3-4703-8cc5-f7e9f0d3bcac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:47:43][358997694493516][13199 ms][DEBUG] proc_open done in 3359 ms; code=255; res.len=3343 [2025-09-09 18:47:43][358997694493516][13199 ms][DEBUG] END runCmdUntilRes#2 in 3359 ms [2025-09-09 18:47:43][358997694493516][13199 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:51:07][356414810576101][1 ms][INFO] === Request start === [2025-09-09 18:51:07][356414810576101][1 ms][DEBUG] START check_scloud [2025-09-09 18:51:07][356414810576101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:51:07][356414810576101][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23532 5016 23547660 127120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:51:07][356414810576101][311 ms][DEBUG] targetPkg: running [2025-09-09 18:51:07][356414810576101][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 18:51:07][356414810576101][311 ms][DEBUG] START check_boot_completed [2025-09-09 18:51:07][356414810576101][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:51:07][356414810576101][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:51:07][356414810576101][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:51:07][356414810576101][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:51:07][356414810576101][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:51:07][356414810576101][389 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:51:07][356414810576101][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810576101\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3121\"}'\'' -e'"" [2025-09-09 18:51:07][356414810576101][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:51:07][356414810576101][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810576101\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3121\"}'\'' -e'"" [2025-09-09 18:51:14][356414810576101][7137 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e592e715-eae7-4921-b084-07ffe970ca24","id":"QR_e592e715-eae7-4921-b084-07ffe970ca24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:51:14][356414810576101][7294 ms][DEBUG] proc_open done in 6904 ms; code=255; res.len=3343 [2025-09-09 18:51:14][356414810576101][7294 ms][DEBUG] END runCmdUntilRes#1 in 6905 ms [2025-09-09 18:51:14][356414810576101][7294 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:54:04][351456832260433][1 ms][INFO] === Request start === [2025-09-09 18:54:04][351456832260433][1 ms][DEBUG] START check_scloud [2025-09-09 18:54:04][351456832260433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:54:05][351456832260433][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 23532 5016 23702320 137764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:54:05][351456832260433][306 ms][DEBUG] targetPkg: running [2025-09-09 18:54:05][351456832260433][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 18:54:05][351456832260433][306 ms][DEBUG] START check_boot_completed [2025-09-09 18:54:05][351456832260433][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:54:05][351456832260433][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:54:05][351456832260433][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:54:05][351456832260433][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:54:05][351456832260433][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 18:54:05][351456832260433][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:54:05][351456832260433][509 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2327\nsuccessfulTxPacketsPerSecond: 0.6801608279020913\nretriedTxPackets: 485\nretriedTxPacketsPerSecond: 0.1980215068575709\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2176\nsuccessfulRxPacketsPerSecond: 0.5596259976409612\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:54:05][351456832260433][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:54:06][351456832260433][1915 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.340/300.340/300.340/0.000 ms\n [2025-09-09 18:54:06][351456832260433][1915 ms][DEBUG] check_internet: online [2025-09-09 18:54:06][351456832260433][1915 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:54:06][351456832260433][1915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351456832260433\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1109\"}'\'' -e'"" [2025-09-09 18:54:06][351456832260433][1915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:54:06][351456832260433][1915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351456832260433\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1109\"}'\'' -e'"" [2025-09-09 18:54:11][351456832260433][6554 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b29fca68-03f6-4e6b-a77f-9603c90b4305","id":"QR_b29fca68-03f6-4e6b-a77f-9603c90b4305","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:54:11][351456832260433][6711 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-09 18:54:11][351456832260433][6711 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-09 18:54:11][351456832260433][6711 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:54:15][351456832260433][0 ms][INFO] === Request start === [2025-09-09 18:54:15][351456832260433][1 ms][DEBUG] START check_scloud [2025-09-09 18:54:15][351456832260433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:54:15][351456832260433][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 23532 5016 23879736 149516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:54:15][351456832260433][298 ms][DEBUG] targetPkg: running [2025-09-09 18:54:15][351456832260433][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 18:54:15][351456832260433][298 ms][DEBUG] START check_boot_completed [2025-09-09 18:54:15][351456832260433][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:54:15][351456832260433][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:54:15][351456832260433][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:54:15][351456832260433][409 ms][DEBUG] SU: done in 64 ms; out [2025-09-09 18:54:15][351456832260433][409 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-09 18:54:15][351456832260433][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 18:54:15][351456832260433][532 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2327\nsuccessfulTxPacketsPerSecond: 0.6801608279020913\nretriedTxPackets: 485\nretriedTxPacketsPerSecond: 0.1980215068575709\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2176\nsuccessfulRxPacketsPerSecond: 0.5596259976409612\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 18:54:15][351456832260433][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 18:54:15][351456832260433][923 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=281 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 281.136/281.136/281.136/0.000 ms\n [2025-09-09 18:54:15][351456832260433][923 ms][DEBUG] check_internet: online [2025-09-09 18:54:15][351456832260433][923 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:54:15][351456832260433][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351456832260433\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4971\"}'\'' -e'"" [2025-09-09 18:54:15][351456832260433][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:54:15][351456832260433][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351456832260433\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4971\"}'\'' -e'"" [2025-09-09 18:54:21][351456832260433][6968 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5f169f2-2110-4f05-9b31-362780e26d17","id":"QR_c5f169f2-2110-4f05-9b31-362780e26d17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:54:22][351456832260433][7125 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-09-09 18:54:22][351456832260433][7125 ms][DEBUG] END runCmdUntilRes#1 in 6201 ms [2025-09-09 18:54:22][351456832260433][7125 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:57:04][351770111867134][1 ms][INFO] === Request start === [2025-09-09 18:57:04][351770111867134][1 ms][DEBUG] START check_scloud [2025-09-09 18:57:04][351770111867134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:57:04][351770111867134][329 ms][DEBUG] SU: done in 327 ms; outu0_a118 23532 5016 24012948 140188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:57:04][351770111867134][329 ms][DEBUG] targetPkg: running [2025-09-09 18:57:04][351770111867134][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-09 18:57:04][351770111867134][329 ms][DEBUG] START check_boot_completed [2025-09-09 18:57:04][351770111867134][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:57:04][351770111867134][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 18:57:04][351770111867134][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:57:04][351770111867134][408 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 18:57:04][351770111867134][408 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 18:57:04][351770111867134][408 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:57:04][351770111867134][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351770111867134\",\"model\":\"SM-A307F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4892\"}'\'' -e'"" [2025-09-09 18:57:04][351770111867134][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:57:04][351770111867134][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351770111867134\",\"model\":\"SM-A307F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4892\"}'\'' -e'"" [2025-09-09 18:57:09][351770111867134][5280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69040d5f-c01d-44bd-aee5-0f5494b87547","id":"QR_69040d5f-c01d-44bd-aee5-0f5494b87547","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:57:09][351770111867134][5437 ms][DEBUG] proc_open done in 5028 ms; code=255; res.len=3343 [2025-09-09 18:57:09][351770111867134][5437 ms][DEBUG] END runCmdUntilRes#1 in 5028 ms [2025-09-09 18:57:09][351770111867134][5437 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:57:11][351770111867134][0 ms][INFO] === Request start === [2025-09-09 18:57:11][351770111867134][1 ms][DEBUG] START check_scloud [2025-09-09 18:57:11][351770111867134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:57:12][351770111867134][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 23532 5016 24162652 129720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:57:12][351770111867134][324 ms][DEBUG] targetPkg: running [2025-09-09 18:57:12][351770111867134][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-09 18:57:12][351770111867134][324 ms][DEBUG] START check_boot_completed [2025-09-09 18:57:12][351770111867134][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:57:12][351770111867134][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 18:57:12][351770111867134][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:57:12][351770111867134][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:57:12][351770111867134][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:57:12][351770111867134][433 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:57:12][351770111867134][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351770111867134\",\"model\":\"SM-A307F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XFV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7794\"}'\'' -e'"" [2025-09-09 18:57:12][351770111867134][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:57:12][351770111867134][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351770111867134\",\"model\":\"SM-A307F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XFV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7794\"}'\'' -e'"" [2025-09-09 18:57:17][351770111867134][5448 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22c81667-fea1-43a9-b009-2db7b5ae442a","id":"QR_22c81667-fea1-43a9-b009-2db7b5ae442a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:57:17][351770111867134][5604 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-09 18:57:17][351770111867134][5604 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-09 18:57:17][351770111867134][5604 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:57:21][352288963917575][0 ms][INFO] === Request start === [2025-09-09 18:57:21][352288963917575][1 ms][DEBUG] START check_scloud [2025-09-09 18:57:21][352288963917575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:57:21][352288963917575][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 23532 5016 24325732 141588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:57:21][352288963917575][325 ms][DEBUG] targetPkg: running [2025-09-09 18:57:21][352288963917575][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-09 18:57:21][352288963917575][325 ms][DEBUG] START check_boot_completed [2025-09-09 18:57:21][352288963917575][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:57:21][352288963917575][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:57:21][352288963917575][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:57:21][352288963917575][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 18:57:21][352288963917575][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 18:57:21][352288963917575][434 ms][DEBUG] rawBody.length=1150 [2025-09-09 18:57:21][352288963917575][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963917575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1427\"}'\'' -e'"" [2025-09-09 18:57:21][352288963917575][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:57:21][352288963917575][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963917575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1427\"}'\'' -e'"" [2025-09-09 18:57:25][352288963917575][3824 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_387b5f0f-9ad5-49a7-bb60-ba6f00593a79","id":"QR_387b5f0f-9ad5-49a7-bb60-ba6f00593a79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:57:25][352288963917575][3980 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-09 18:57:25][352288963917575][3980 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 18:57:25][352288963917575][3980 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 18:57:27][352288963917575][0 ms][INFO] === Request start === [2025-09-09 18:57:27][352288963917575][1 ms][DEBUG] START check_scloud [2025-09-09 18:57:27][352288963917575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 18:57:28][352288963917575][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 23532 5016 24488776 152692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 18:57:28][352288963917575][307 ms][DEBUG] targetPkg: running [2025-09-09 18:57:28][352288963917575][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 18:57:28][352288963917575][307 ms][DEBUG] START check_boot_completed [2025-09-09 18:57:28][352288963917575][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 18:57:28][352288963917575][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 18:57:28][352288963917575][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 18:57:28][352288963917575][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 18:57:28][352288963917575][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 18:57:28][352288963917575][401 ms][DEBUG] rawBody.length=1160 [2025-09-09 18:57:28][352288963917575][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963917575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6558\"}'\'' -e'"" [2025-09-09 18:57:28][352288963917575][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 18:57:28][352288963917575][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963917575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6558\"}'\'' -e'"" [2025-09-09 18:57:33][352288963917575][5524 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e02244fd-47a8-4c7f-ac79-39ae7f40f5f8","id":"QR_e02244fd-47a8-4c7f-ac79-39ae7f40f5f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 18:57:33][352288963917575][5681 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-09 18:57:33][352288963917575][5681 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-09 18:57:33][352288963917575][5681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:05:05][356686102069800][1 ms][INFO] === Request start === [2025-09-09 19:05:05][356686102069800][1 ms][DEBUG] START check_scloud [2025-09-09 19:05:05][356686102069800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:05:06][356686102069800][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 23532 5016 24590616 166152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:05:06][356686102069800][312 ms][DEBUG] targetPkg: running [2025-09-09 19:05:06][356686102069800][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 19:05:06][356686102069800][312 ms][DEBUG] START check_boot_completed [2025-09-09 19:05:06][356686102069800][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:05:06][356686102069800][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:05:06][356686102069800][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:05:06][356686102069800][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:05:06][356686102069800][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:05:06][356686102069800][390 ms][DEBUG] rawBody.length=1170 [2025-09-09 19:05:06][356686102069800][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356686102069800\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWB05TE0J\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7041\"}'\'' -e'"" [2025-09-09 19:05:06][356686102069800][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:05:06][356686102069800][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356686102069800\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWB05TE0J\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7041\"}'\'' -e'"" [2025-09-09 19:05:11][356686102069800][5638 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"NON_SAMSUNG_DEVICE"}\r\n [2025-09-09 19:05:11][356686102069800][5795 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=80 [2025-09-09 19:05:11][356686102069800][5795 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-09 19:05:11][356686102069800][5795 ms][INFO] SUCCESS response from frida (len=80) [2025-09-09 19:05:12][359147522813001][0 ms][INFO] === Request start === [2025-09-09 19:05:12][359147522813001][1 ms][DEBUG] START check_scloud [2025-09-09 19:05:12][359147522813001][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:05:12][359147522813001][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 23532 5016 24739492 176536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:05:12][359147522813001][308 ms][DEBUG] targetPkg: running [2025-09-09 19:05:12][359147522813001][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 19:05:12][359147522813001][308 ms][DEBUG] START check_boot_completed [2025-09-09 19:05:12][359147522813001][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:05:12][359147522813001][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:05:12][359147522813001][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:05:12][359147522813001][417 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 19:05:12][359147522813001][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:05:12][359147522813001][417 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:05:12][359147522813001][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147522813001\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YWB05TE0J\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4067\"}'\'' -e'"" [2025-09-09 19:05:12][359147522813001][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:05:12][359147522813001][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147522813001\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YWB05TE0J\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4067\"}'\'' -e'"" [2025-09-09 19:05:16][359147522813001][4088 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0573648e-304d-4855-b107-d01ad36e884b","id":"QR_0573648e-304d-4855-b107-d01ad36e884b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:05:16][359147522813001][4244 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-09-09 19:05:16][359147522813001][4244 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-09 19:05:16][359147522813001][4244 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:06:03][355744470582184][0 ms][INFO] === Request start === [2025-09-09 19:06:03][355744470582184][1 ms][DEBUG] START check_scloud [2025-09-09 19:06:03][355744470582184][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:06:03][355744470582184][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 23532 5016 24849252 188584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:06:03][355744470582184][301 ms][DEBUG] targetPkg: running [2025-09-09 19:06:03][355744470582184][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 19:06:03][355744470582184][301 ms][DEBUG] START check_boot_completed [2025-09-09 19:06:03][355744470582184][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:06:03][355744470582184][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:06:03][355744470582184][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:06:03][355744470582184][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:06:03][355744470582184][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:06:03][355744470582184][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:06:03][355744470582184][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2839\nsuccessfulTxPacketsPerSecond: 1.1779227415405238\nretriedTxPackets: 596\nretriedTxPacketsPerSecond: 0.23558454830810477\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2633\nsuccessfulRxPacketsPerSecond: 1.0551533290419342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:06:03][355744470582184][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:06:04][355744470582184][1864 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.421/304.421/304.421/0.000 ms\n [2025-09-09 19:06:04][355744470582184][1864 ms][DEBUG] check_internet: online [2025-09-09 19:06:04][355744470582184][1864 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:06:04][355744470582184][1864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744470582184\",\"model\":\"SM-E556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1930\"}'\'' -e'"" [2025-09-09 19:06:04][355744470582184][1864 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:06:04][355744470582184][1864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744470582184\",\"model\":\"SM-E556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1930\"}'\'' -e'"" [2025-09-09 19:06:08][355744470582184][5206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e85ba8e-5a57-4ec4-a25c-af432752bf7a","id":"QR_6e85ba8e-5a57-4ec4-a25c-af432752bf7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:06:08][355744470582184][5363 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-09 19:06:08][355744470582184][5363 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-09 19:06:08][355744470582184][5363 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:06:10][355744470582184][1 ms][INFO] === Request start === [2025-09-09 19:06:10][355744470582184][1 ms][DEBUG] START check_scloud [2025-09-09 19:06:10][355744470582184][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:06:11][355744470582184][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 23532 5016 25016432 199664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:06:11][355744470582184][284 ms][DEBUG] targetPkg: running [2025-09-09 19:06:11][355744470582184][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-09 19:06:11][355744470582184][284 ms][DEBUG] START check_boot_completed [2025-09-09 19:06:11][355744470582184][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:06:11][355744470582184][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:06:11][355744470582184][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:06:11][355744470582184][393 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:06:11][355744470582184][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:06:11][355744470582184][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:06:11][355744470582184][518 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31280 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2839\nsuccessfulTxPacketsPerSecond: 1.1779227415405238\nretriedTxPackets: 596\nretriedTxPacketsPerSecond: 0.23558454830810477\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2633\nsuccessfulRxPacketsPerSecond: 1.0551533290419342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:06:11][355744470582184][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:06:11][355744470582184][940 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.716/329.716/329.716/0.000 ms\n [2025-09-09 19:06:11][355744470582184][940 ms][DEBUG] check_internet: online [2025-09-09 19:06:11][355744470582184][940 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:06:11][355744470582184][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744470582184\",\"model\":\"SM-E556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8253\"}'\'' -e'"" [2025-09-09 19:06:11][355744470582184][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:06:11][355744470582184][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744470582184\",\"model\":\"SM-E556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8253\"}'\'' -e'"" [2025-09-09 19:06:15][355744470582184][4861 ms][DEBUG] proc_open done in 3920 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 19:06:15][355744470582184][4861 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-09 19:06:15][355744470582184][4861 ms][WARN] Detected error: Process with pid 23532 either refused to load frida-agent, or terminated during injectionProcess with pid 23532 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 19:06:15][355744470582184][4861 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 19:06:15][355744470582184][5142 ms][DEBUG] SU: done in 281 ms; outsystem 5438 5016 12919952 192532 ep_poll 0 S system_server\n [2025-09-09 19:06:15][355744470582184][5142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 19:06:16][355744470582184][5267 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 19:06:16][355744470582184][5267 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 19:06:16][355744470582184][5267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 19:06:16][355744470582184][5394 ms][DEBUG] SU: done in 127 ms; out [2025-09-09 19:06:16][355744470582184][5394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 19:06:16][355744470582184][5579 ms][DEBUG] SU: done in 185 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 19:06:18][355744470582184][7594 ms][DEBUG] START check_boot_completed [2025-09-09 19:06:18][355744470582184][7594 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:06:18][355744470582184][7641 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:06:18][355744470582184][7641 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:06:18][355744470582184][7688 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:06:18][355744470582184][7688 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 19:06:21][355744470582184][10703 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 19:06:21][355744470582184][10703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744470582184\",\"model\":\"SM-E556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8253\"}'\'' -e'"" [2025-09-09 19:06:26][355744470582184][15405 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfcd76ae-4630-4bc4-9d65-be2eb99fbd89","id":"QR_cfcd76ae-4630-4bc4-9d65-be2eb99fbd89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:06:26][355744470582184][15561 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-09 19:06:26][355744470582184][15561 ms][DEBUG] END runCmdUntilRes#2 in 4858 ms [2025-09-09 19:06:26][355744470582184][15562 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:07:05][350525793659378][0 ms][INFO] === Request start === [2025-09-09 19:07:05][350525793659378][1 ms][DEBUG] START check_scloud [2025-09-09 19:07:05][350525793659378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:07:05][350525793659378][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 26431 5016 23558996 127288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:07:05][350525793659378][319 ms][DEBUG] targetPkg: running [2025-09-09 19:07:05][350525793659378][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 19:07:05][350525793659378][319 ms][DEBUG] START check_boot_completed [2025-09-09 19:07:05][350525793659378][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:07:05][350525793659378][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:07:05][350525793659378][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:07:05][350525793659378][444 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 19:07:05][350525793659378][444 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 19:07:05][350525793659378][444 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:07:05][350525793659378][444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525793659378\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2879\"}'\'' -e'"" [2025-09-09 19:07:05][350525793659378][444 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:07:05][350525793659378][445 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525793659378\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2879\"}'\'' -e'"" [2025-09-09 19:07:10][350525793659378][5818 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed4dcf28-3de8-4fd6-8291-4a7a56af4953","id":"QR_ed4dcf28-3de8-4fd6-8291-4a7a56af4953","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:07:11][350525793659378][5974 ms][DEBUG] proc_open done in 5529 ms; code=255; res.len=3343 [2025-09-09 19:07:11][350525793659378][5974 ms][DEBUG] END runCmdUntilRes#1 in 5529 ms [2025-09-09 19:07:11][350525793659378][5974 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:07:14][350525793659378][0 ms][INFO] === Request start === [2025-09-09 19:07:14][350525793659378][1 ms][DEBUG] START check_scloud [2025-09-09 19:07:14][350525793659378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:07:14][350525793659378][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 26431 5016 23732124 139040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:07:14][350525793659378][309 ms][DEBUG] targetPkg: running [2025-09-09 19:07:14][350525793659378][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 19:07:14][350525793659378][309 ms][DEBUG] START check_boot_completed [2025-09-09 19:07:14][350525793659378][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:07:15][350525793659378][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:07:15][350525793659378][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:07:15][350525793659378][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:07:15][350525793659378][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 19:07:15][350525793659378][403 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:07:15][350525793659378][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525793659378\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1380\"}'\'' -e'"" [2025-09-09 19:07:15][350525793659378][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:07:15][350525793659378][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525793659378\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1380\"}'\'' -e'"" [2025-09-09 19:07:19][350525793659378][5026 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c120d6c-31bc-4d86-b0ae-d37dd705ac37","id":"QR_9c120d6c-31bc-4d86-b0ae-d37dd705ac37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:07:19][350525793659378][5183 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-09 19:07:19][350525793659378][5183 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-09 19:07:19][350525793659378][5183 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:09:04][358558826320884][1 ms][INFO] === Request start === [2025-09-09 19:09:04][358558826320884][1 ms][DEBUG] START check_scloud [2025-09-09 19:09:04][358558826320884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:09:05][358558826320884][410 ms][DEBUG] SU: done in 409 ms; out [2025-09-09 19:09:05][358558826320884][410 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 19:09:05][358558826320884][441 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 19:09:05][358558826320884][441 ms][DEBUG] check_devices: device found [2025-09-09 19:09:05][358558826320884][441 ms][WARN] targetPkg: not running, restarting [2025-09-09 19:09:05][358558826320884][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 19:09:05][358558826320884][597 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 19:09:05][358558826320884][598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 19:09:05][358558826320884][832 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 19:09:07][358558826320884][2847 ms][DEBUG] END check_scloud in 2846 ms [2025-09-09 19:09:07][358558826320884][2847 ms][DEBUG] START check_boot_completed [2025-09-09 19:09:07][358558826320884][2847 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:09:07][358558826320884][2894 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:09:07][358558826320884][2894 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:09:07][358558826320884][2956 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:09:07][358558826320884][2956 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:09:07][358558826320884][2956 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:09:07][358558826320884][2956 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558826320884\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1418\"}'\'' -e'"" [2025-09-09 19:09:07][358558826320884][2956 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:09:07][358558826320884][2956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558826320884\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1418\"}'\'' -e'"" [2025-09-09 19:09:14][358558826320884][9595 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebc209fe-b3cc-4202-bda4-6a99941c718f","id":"QR_ebc209fe-b3cc-4202-bda4-6a99941c718f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:09:14][358558826320884][9752 ms][DEBUG] proc_open done in 6795 ms; code=255; res.len=3343 [2025-09-09 19:09:14][358558826320884][9752 ms][DEBUG] END runCmdUntilRes#1 in 6795 ms [2025-09-09 19:09:14][358558826320884][9752 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:09:18][358558826320884][0 ms][INFO] === Request start === [2025-09-09 19:09:18][358558826320884][1 ms][DEBUG] START check_scloud [2025-09-09 19:09:18][358558826320884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:09:18][358558826320884][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 4731 26882 23469472 123744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:09:18][358558826320884][297 ms][DEBUG] targetPkg: running [2025-09-09 19:09:18][358558826320884][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-09 19:09:18][358558826320884][298 ms][DEBUG] START check_boot_completed [2025-09-09 19:09:18][358558826320884][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:09:18][358558826320884][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:09:18][358558826320884][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:09:18][358558826320884][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:09:18][358558826320884][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:09:18][358558826320884][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:09:18][358558826320884][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558826320884\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1407\"}'\'' -e'"" [2025-09-09 19:09:18][358558826320884][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:09:18][358558826320884][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558826320884\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1407\"}'\'' -e'"" [2025-09-09 19:09:22][358558826320884][4421 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14d1cbf8-3f44-4d4f-9e2c-b3629ed9dd7e","id":"QR_14d1cbf8-3f44-4d4f-9e2c-b3629ed9dd7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:09:22][358558826320884][4577 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-09 19:09:22][358558826320884][4577 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-09 19:09:22][358558826320884][4577 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:09:25][350603385559478][0 ms][INFO] === Request start === [2025-09-09 19:09:25][350603385559478][1 ms][DEBUG] START check_scloud [2025-09-09 19:09:25][350603385559478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:09:25][350603385559478][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 4731 26882 23636600 137496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:09:25][350603385559478][264 ms][DEBUG] targetPkg: running [2025-09-09 19:09:25][350603385559478][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 19:09:25][350603385559478][264 ms][DEBUG] START check_boot_completed [2025-09-09 19:09:25][350603385559478][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:09:25][350603385559478][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:09:25][350603385559478][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:09:26][350603385559478][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:09:26][350603385559478][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:09:26][350603385559478][342 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:09:26][350603385559478][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603385559478\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4381\"}'\'' -e'"" [2025-09-09 19:09:26][350603385559478][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:09:26][350603385559478][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603385559478\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4381\"}'\'' -e'"" [2025-09-09 19:09:30][350603385559478][5154 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c1956d3-0b24-4251-89b2-0ce74b5cce72","id":"QR_8c1956d3-0b24-4251-89b2-0ce74b5cce72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:09:30][350603385559478][5310 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-09 19:09:30][350603385559478][5310 ms][DEBUG] END runCmdUntilRes#1 in 4968 ms [2025-09-09 19:09:30][350603385559478][5310 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:09:34][350603385559478][0 ms][INFO] === Request start === [2025-09-09 19:09:34][350603385559478][1 ms][DEBUG] START check_scloud [2025-09-09 19:09:34][350603385559478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:09:34][350603385559478][263 ms][DEBUG] SU: done in 263 ms; outu0_a118 4731 26882 23774940 149564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:09:34][350603385559478][264 ms][DEBUG] targetPkg: running [2025-09-09 19:09:34][350603385559478][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 19:09:34][350603385559478][264 ms][DEBUG] START check_boot_completed [2025-09-09 19:09:34][350603385559478][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:09:34][350603385559478][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:09:34][350603385559478][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:09:34][350603385559478][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:09:34][350603385559478][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:09:34][350603385559478][357 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:09:34][350603385559478][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603385559478\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8166\"}'\'' -e'"" [2025-09-09 19:09:34][350603385559478][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:09:34][350603385559478][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603385559478\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8166\"}'\'' -e'"" [2025-09-09 19:09:38][350603385559478][3622 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2bb1036-2620-4914-bc83-da9278dbc91e","id":"QR_e2bb1036-2620-4914-bc83-da9278dbc91e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:09:38][350603385559478][3778 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=3343 [2025-09-09 19:09:38][350603385559478][3778 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-09 19:09:38][350603385559478][3778 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:13:04][357521605217086][1 ms][INFO] === Request start === [2025-09-09 19:13:04][357521605217086][1 ms][DEBUG] START check_scloud [2025-09-09 19:13:04][357521605217086][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:13:05][357521605217086][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 4731 26882 23790012 158664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:13:05][357521605217086][277 ms][DEBUG] targetPkg: running [2025-09-09 19:13:05][357521605217086][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 19:13:05][357521605217086][277 ms][DEBUG] START check_boot_completed [2025-09-09 19:13:05][357521605217086][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:13:05][357521605217086][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:13:05][357521605217086][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:13:05][357521605217086][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:13:05][357521605217086][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:13:05][357521605217086][356 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:13:05][357521605217086][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357521605217086\",\"model\":\"SM-S906E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9387\"}'\'' -e'"" [2025-09-09 19:13:05][357521605217086][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:13:05][357521605217086][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357521605217086\",\"model\":\"SM-S906E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9387\"}'\'' -e'"" [2025-09-09 19:13:11][357521605217086][6745 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26442b25-eba6-49c3-97c8-bf374ae224d7","id":"QR_26442b25-eba6-49c3-97c8-bf374ae224d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:13:11][357521605217086][6901 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=3343 [2025-09-09 19:13:11][357521605217086][6901 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-09-09 19:13:11][357521605217086][6901 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:13:15][357521605217086][0 ms][INFO] === Request start === [2025-09-09 19:13:15][357521605217086][0 ms][DEBUG] START check_scloud [2025-09-09 19:13:15][357521605217086][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:13:15][357521605217086][277 ms][DEBUG] SU: done in 277 ms; outu0_a118 4731 26882 23967428 166616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:13:15][357521605217086][277 ms][DEBUG] targetPkg: running [2025-09-09 19:13:15][357521605217086][277 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 19:13:15][357521605217086][277 ms][DEBUG] START check_boot_completed [2025-09-09 19:13:15][357521605217086][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:13:15][357521605217086][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:13:15][357521605217086][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:13:15][357521605217086][417 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 19:13:15][357521605217086][418 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 19:13:15][357521605217086][418 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:13:15][357521605217086][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357521605217086\",\"model\":\"SM-S906E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1900\"}'\'' -e'"" [2025-09-09 19:13:15][357521605217086][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:13:15][357521605217086][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357521605217086\",\"model\":\"SM-S906E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1900\"}'\'' -e'"" [2025-09-09 19:13:19][357521605217086][4401 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58965b32-c90f-4a4f-a1e6-557c7cb1e2e8","id":"QR_58965b32-c90f-4a4f-a1e6-557c7cb1e2e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:13:19][357521605217086][4557 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-09 19:13:19][357521605217086][4557 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-09 19:13:19][357521605217086][4557 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:13:22][353600810068767][0 ms][INFO] === Request start === [2025-09-09 19:13:22][353600810068767][1 ms][DEBUG] START check_scloud [2025-09-09 19:13:22][353600810068767][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:13:23][353600810068767][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 4731 26882 24093580 177152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:13:23][353600810068767][325 ms][DEBUG] targetPkg: running [2025-09-09 19:13:23][353600810068767][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 19:13:23][353600810068767][325 ms][DEBUG] START check_boot_completed [2025-09-09 19:13:23][353600810068767][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:13:23][353600810068767][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:13:23][353600810068767][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:13:23][353600810068767][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:13:23][353600810068767][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:13:23][353600810068767][418 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:13:23][353600810068767][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810068767\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9164\"}'\'' -e'"" [2025-09-09 19:13:23][353600810068767][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:13:23][353600810068767][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810068767\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9164\"}'\'' -e'"" [2025-09-09 19:13:27][353600810068767][4901 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21f3d5aa-5a82-4660-8b0e-4ba8817d2e69","id":"QR_21f3d5aa-5a82-4660-8b0e-4ba8817d2e69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:13:28][353600810068767][5058 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-09 19:13:28][353600810068767][5058 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-09 19:13:28][353600810068767][5058 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:13:31][353600810068767][0 ms][INFO] === Request start === [2025-09-09 19:13:31][353600810068767][1 ms][DEBUG] START check_scloud [2025-09-09 19:13:31][353600810068767][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:13:31][353600810068767][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 4731 26882 24209328 188724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:13:31][353600810068767][329 ms][DEBUG] targetPkg: running [2025-09-09 19:13:31][353600810068767][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-09 19:13:31][353600810068767][329 ms][DEBUG] START check_boot_completed [2025-09-09 19:13:31][353600810068767][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:13:31][353600810068767][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:13:31][353600810068767][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:13:31][353600810068767][408 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 19:13:31][353600810068767][408 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 19:13:31][353600810068767][408 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:13:31][353600810068767][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810068767\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3778\"}'\'' -e'"" [2025-09-09 19:13:31][353600810068767][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:13:31][353600810068767][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810068767\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3778\"}'\'' -e'"" [2025-09-09 19:13:35][353600810068767][3765 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5896df15-3192-47e0-92a0-73779d35a08a","id":"QR_5896df15-3192-47e0-92a0-73779d35a08a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:13:35][353600810068767][3922 ms][DEBUG] proc_open done in 3513 ms; code=255; res.len=3343 [2025-09-09 19:13:35][353600810068767][3922 ms][DEBUG] END runCmdUntilRes#1 in 3513 ms [2025-09-09 19:13:35][353600810068767][3922 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:16:03][351642486854411][1 ms][INFO] === Request start === [2025-09-09 19:16:03][351642486854411][1 ms][DEBUG] START check_scloud [2025-09-09 19:16:03][351642486854411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:16:04][351642486854411][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 4731 26882 24319108 200244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:16:04][351642486854411][311 ms][DEBUG] targetPkg: running [2025-09-09 19:16:04][351642486854411][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 19:16:04][351642486854411][311 ms][DEBUG] START check_boot_completed [2025-09-09 19:16:04][351642486854411][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:16:04][351642486854411][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:16:04][351642486854411][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:16:04][351642486854411][451 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 19:16:04][351642486854411][451 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 19:16:04][351642486854411][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:16:04][351642486854411][592 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1062\nsuccessfulTxPacketsPerSecond: 2.380351677764005\nretriedTxPackets: 173\nretriedTxPacketsPerSecond: 0.34736314806079954\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1055\nsuccessfulRxPacketsPerSecond: 2.588769566600485\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:16:04][351642486854411][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:16:06][351642486854411][2248 ms][DEBUG] SU: done in 1656 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.636/302.636/302.636/0.000 ms\n [2025-09-09 19:16:06][351642486854411][2248 ms][DEBUG] check_internet: online [2025-09-09 19:16:06][351642486854411][2248 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:16:06][351642486854411][2248 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486854411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6505\"}'\'' -e'"" [2025-09-09 19:16:06][351642486854411][2248 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:16:06][351642486854411][2248 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486854411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6505\"}'\'' -e'"" [2025-09-09 19:16:13][351642486854411][9683 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a77adfc4-58e0-4b1f-90c2-2636a80de05d","id":"QR_a77adfc4-58e0-4b1f-90c2-2636a80de05d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:16:13][351642486854411][9839 ms][DEBUG] proc_open done in 7591 ms; code=255; res.len=3343 [2025-09-09 19:16:13][351642486854411][9839 ms][DEBUG] END runCmdUntilRes#1 in 7592 ms [2025-09-09 19:16:13][351642486854411][9840 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:16:16][351642486854411][0 ms][INFO] === Request start === [2025-09-09 19:16:16][351642486854411][1 ms][DEBUG] START check_scloud [2025-09-09 19:16:16][351642486854411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:16:16][351642486854411][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 4731 26882 24450956 208736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:16:16][351642486854411][314 ms][DEBUG] targetPkg: running [2025-09-09 19:16:16][351642486854411][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 19:16:16][351642486854411][314 ms][DEBUG] START check_boot_completed [2025-09-09 19:16:16][351642486854411][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:16:16][351642486854411][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:16:16][351642486854411][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:16:16][351642486854411][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:16:16][351642486854411][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:16:16][351642486854411][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:16:16][351642486854411][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1062\nsuccessfulTxPacketsPerSecond: 2.380351677764005\nretriedTxPackets: 173\nretriedTxPacketsPerSecond: 0.34736314806079954\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1055\nsuccessfulRxPacketsPerSecond: 2.588769566600485\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:16:16][351642486854411][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:16:17][351642486854411][970 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.488/324.488/324.488/0.000 ms\n [2025-09-09 19:16:17][351642486854411][970 ms][DEBUG] check_internet: online [2025-09-09 19:16:17][351642486854411][970 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:16:17][351642486854411][970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486854411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5270\"}'\'' -e'"" [2025-09-09 19:16:17][351642486854411][970 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:16:17][351642486854411][970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486854411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5270\"}'\'' -e'"" [2025-09-09 19:16:23][351642486854411][7343 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4dcc8cf9-db43-4377-8c81-3d5345ed0497","id":"QR_4dcc8cf9-db43-4377-8c81-3d5345ed0497","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:16:23][351642486854411][7499 ms][DEBUG] proc_open done in 6530 ms; code=255; res.len=3343 [2025-09-09 19:16:23][351642486854411][7499 ms][DEBUG] END runCmdUntilRes#1 in 6530 ms [2025-09-09 19:16:23][351642486854411][7499 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:19:04][353204665812450][1 ms][INFO] === Request start === [2025-09-09 19:19:04][353204665812450][1 ms][DEBUG] START check_scloud [2025-09-09 19:19:04][353204665812450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:19:04][353204665812450][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 4731 26882 24564812 216444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:19:04][353204665812450][315 ms][DEBUG] targetPkg: running [2025-09-09 19:19:04][353204665812450][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 19:19:04][353204665812450][316 ms][DEBUG] START check_boot_completed [2025-09-09 19:19:04][353204665812450][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:19:05][353204665812450][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:19:05][353204665812450][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:19:05][353204665812450][411 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 19:19:05][353204665812450][411 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-09 19:19:05][353204665812450][411 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:19:05][353204665812450][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204665812450\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3089\"}'\'' -e'"" [2025-09-09 19:19:05][353204665812450][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:19:05][353204665812450][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204665812450\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3089\"}'\'' -e'"" [2025-09-09 19:19:14][353204665812450][9532 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7480a262-2c04-4984-a1d1-c03cf26aa99d","id":"QR_7480a262-2c04-4984-a1d1-c03cf26aa99d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:19:14][353204665812450][9688 ms][DEBUG] proc_open done in 9277 ms; code=255; res.len=3343 [2025-09-09 19:19:14][353204665812450][9688 ms][DEBUG] END runCmdUntilRes#1 in 9277 ms [2025-09-09 19:19:14][353204665812450][9688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:19:17][353204665812450][0 ms][INFO] === Request start === [2025-09-09 19:19:17][353204665812450][1 ms][DEBUG] START check_scloud [2025-09-09 19:19:17][353204665812450][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:19:18][353204665812450][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 4731 26882 24742232 225952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:19:18][353204665812450][299 ms][DEBUG] targetPkg: running [2025-09-09 19:19:18][353204665812450][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 19:19:18][353204665812450][299 ms][DEBUG] START check_boot_completed [2025-09-09 19:19:18][353204665812450][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:19:18][353204665812450][328 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 19:19:18][353204665812450][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:19:18][353204665812450][391 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 19:19:18][353204665812450][391 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 19:19:18][353204665812450][391 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:19:18][353204665812450][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204665812450\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5813\"}'\'' -e'"" [2025-09-09 19:19:18][353204665812450][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:19:18][353204665812450][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204665812450\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5813\"}'\'' -e'"" [2025-09-09 19:19:22][353204665812450][4593 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 19:19:22][353204665812450][4593 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-09 19:19:22][353204665812450][4593 ms][WARN] Detected error: Process with pid 4731 either refused to load frida-agent, or terminated during injectionProcess with pid 4731 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 19:19:22][353204665812450][4593 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 19:19:22][353204665812450][4859 ms][DEBUG] SU: done in 266 ms; outsystem 27084 26882 12483204 255468 ep_poll 0 S system_server\n [2025-09-09 19:19:22][353204665812450][4859 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 19:19:22][353204665812450][5015 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 19:19:22][353204665812450][5015 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 19:19:22][353204665812450][5015 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 19:19:22][353204665812450][5140 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 19:19:22][353204665812450][5140 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 19:19:23][353204665812450][5343 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 19:19:25][353204665812450][7358 ms][DEBUG] START check_boot_completed [2025-09-09 19:19:25][353204665812450][7358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:19:25][353204665812450][7405 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:19:25][353204665812450][7405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:19:25][353204665812450][7452 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:19:25][353204665812450][7452 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 19:19:28][353204665812450][10466 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 19:19:28][353204665812450][10467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204665812450\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5813\"}'\'' -e'"" [2025-09-09 19:19:31][353204665812450][14044 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa534805-dede-4228-9a56-655b2dd34c36","id":"QR_fa534805-dede-4228-9a56-655b2dd34c36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:19:31][353204665812450][14200 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-09 19:19:31][353204665812450][14200 ms][DEBUG] END runCmdUntilRes#2 in 3734 ms [2025-09-09 19:19:31][353204665812450][14200 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:20:04][352967350423160][0 ms][INFO] === Request start === [2025-09-09 19:20:04][352967350423160][1 ms][DEBUG] START check_scloud [2025-09-09 19:20:04][352967350423160][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:20:04][352967350423160][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7375 26882 23430452 127852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:20:04][352967350423160][314 ms][DEBUG] targetPkg: running [2025-09-09 19:20:04][352967350423160][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 19:20:04][352967350423160][314 ms][DEBUG] START check_boot_completed [2025-09-09 19:20:04][352967350423160][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:20:04][352967350423160][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:20:04][352967350423160][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:20:04][352967350423160][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:20:04][352967350423160][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:20:04][352967350423160][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:20:04][352967350423160][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1317\nsuccessfulTxPacketsPerSecond: 0.34325615856244174\nretriedTxPackets: 237\nretriedTxPacketsPerSecond: 0.1507060564131908\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1272\nsuccessfulRxPacketsPerSecond: 0.4603551861167496\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:20:04][352967350423160][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:20:04][352967350423160][892 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.886/269.886/269.886/0.000 ms\n [2025-09-09 19:20:04][352967350423160][892 ms][DEBUG] check_internet: online [2025-09-09 19:20:04][352967350423160][892 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:20:04][352967350423160][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967350423160\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6183\"}'\'' -e'"" [2025-09-09 19:20:04][352967350423160][892 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:20:04][352967350423160][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967350423160\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6183\"}'\'' -e'"" [2025-09-09 19:20:08][352967350423160][4344 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37458be8-f24c-4cbf-868d-fb4aee746ee1","id":"QR_37458be8-f24c-4cbf-868d-fb4aee746ee1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:20:08][352967350423160][4500 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-09 19:20:08][352967350423160][4500 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-09 19:20:08][352967350423160][4500 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:20:10][352967350423160][0 ms][INFO] === Request start === [2025-09-09 19:20:10][352967350423160][1 ms][DEBUG] START check_scloud [2025-09-09 19:20:10][352967350423160][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:20:11][352967350423160][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 7375 26882 23623128 138600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:20:11][352967350423160][311 ms][DEBUG] targetPkg: running [2025-09-09 19:20:11][352967350423160][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 19:20:11][352967350423160][311 ms][DEBUG] START check_boot_completed [2025-09-09 19:20:11][352967350423160][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:20:11][352967350423160][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:20:11][352967350423160][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:20:11][352967350423160][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:20:11][352967350423160][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:20:11][352967350423160][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:20:11][352967350423160][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1317\nsuccessfulTxPacketsPerSecond: 0.34325615856244174\nretriedTxPackets: 237\nretriedTxPacketsPerSecond: 0.1507060564131908\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1272\nsuccessfulRxPacketsPerSecond: 0.4603551861167496\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:20:11][352967350423160][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:20:11][352967350423160][873 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.748/274.748/274.748/0.000 ms\n [2025-09-09 19:20:11][352967350423160][873 ms][DEBUG] check_internet: online [2025-09-09 19:20:11][352967350423160][873 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:20:11][352967350423160][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967350423160\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1045\"}'\'' -e'"" [2025-09-09 19:20:11][352967350423160][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:20:11][352967350423160][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967350423160\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1045\"}'\'' -e'"" [2025-09-09 19:20:17][352967350423160][6544 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37d76cb2-1fb2-4ea1-a81b-07c123523fbf","id":"QR_37d76cb2-1fb2-4ea1-a81b-07c123523fbf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:20:17][352967350423160][6700 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-09-09 19:20:17][352967350423160][6700 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-09-09 19:20:17][352967350423160][6700 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:23:03][358697433327781][1 ms][INFO] === Request start === [2025-09-09 19:23:03][358697433327781][1 ms][DEBUG] START check_scloud [2025-09-09 19:23:03][358697433327781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:23:03][358697433327781][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 7375 26882 23733452 150020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:23:03][358697433327781][265 ms][DEBUG] targetPkg: running [2025-09-09 19:23:03][358697433327781][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 19:23:03][358697433327781][265 ms][DEBUG] START check_boot_completed [2025-09-09 19:23:03][358697433327781][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:23:03][358697433327781][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:23:03][358697433327781][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:23:03][358697433327781][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:23:03][358697433327781][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:23:03][358697433327781][374 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:23:03][358697433327781][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433327781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5020\"}'\'' -e'"" [2025-09-09 19:23:03][358697433327781][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:23:03][358697433327781][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433327781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5020\"}'\'' -e'"" [2025-09-09 19:23:09][358697433327781][5795 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7b761d0-75b5-40e3-bc89-8a9e778cbd5c","id":"QR_e7b761d0-75b5-40e3-bc89-8a9e778cbd5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:23:09][358697433327781][5951 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3343 [2025-09-09 19:23:09][358697433327781][5951 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-09-09 19:23:09][358697433327781][5951 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:23:11][358697433327781][0 ms][INFO] === Request start === [2025-09-09 19:23:11][358697433327781][1 ms][DEBUG] START check_scloud [2025-09-09 19:23:11][358697433327781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:23:12][358697433327781][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 7375 26882 23893516 161152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:23:12][358697433327781][294 ms][DEBUG] targetPkg: running [2025-09-09 19:23:12][358697433327781][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 19:23:12][358697433327781][294 ms][DEBUG] START check_boot_completed [2025-09-09 19:23:12][358697433327781][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:23:12][358697433327781][340 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 19:23:12][358697433327781][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:23:12][358697433327781][402 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:23:12][358697433327781][402 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 19:23:12][358697433327781][402 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:23:12][358697433327781][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433327781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7081\"}'\'' -e'"" [2025-09-09 19:23:12][358697433327781][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:23:12][358697433327781][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433327781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7081\"}'\'' -e'"" [2025-09-09 19:23:17][358697433327781][5354 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50af39b1-e5a4-475c-90a1-ba974f569473","id":"QR_50af39b1-e5a4-475c-90a1-ba974f569473","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:23:17][358697433327781][5510 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-09 19:23:17][358697433327781][5510 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 19:23:17][358697433327781][5510 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:25:04][352612261632240][1 ms][INFO] === Request start === [2025-09-09 19:25:04][352612261632240][1 ms][DEBUG] START check_scloud [2025-09-09 19:25:04][352612261632240][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:25:05][352612261632240][278 ms][DEBUG] SU: done in 276 ms; outu0_a118 7375 26882 24035916 172564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:25:05][352612261632240][278 ms][DEBUG] targetPkg: running [2025-09-09 19:25:05][352612261632240][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 19:25:05][352612261632240][278 ms][DEBUG] START check_boot_completed [2025-09-09 19:25:05][352612261632240][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:25:05][352612261632240][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:25:05][352612261632240][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:25:05][352612261632240][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:25:05][352612261632240][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:25:05][352612261632240][356 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:25:05][352612261632240][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352612261632240\",\"model\":\"SM-T510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N60E8DRA\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4563\"}'\'' -e'"" [2025-09-09 19:25:05][352612261632240][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:25:05][352612261632240][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352612261632240\",\"model\":\"SM-T510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N60E8DRA\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4563\"}'\'' -e'"" [2025-09-09 19:25:11][352612261632240][6510 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daf9b332-e32d-4eef-ba80-d08ecfb2100a","id":"QR_daf9b332-e32d-4eef-ba80-d08ecfb2100a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:25:11][352612261632240][6667 ms][DEBUG] proc_open done in 6310 ms; code=255; res.len=3343 [2025-09-09 19:25:11][352612261632240][6667 ms][DEBUG] END runCmdUntilRes#1 in 6311 ms [2025-09-09 19:25:11][352612261632240][6667 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:26:04][351007061317806][0 ms][INFO] === Request start === [2025-09-09 19:26:04][351007061317806][1 ms][DEBUG] START check_scloud [2025-09-09 19:26:04][351007061317806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:26:05][351007061317806][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 7375 26882 24178480 184744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:26:05][351007061317806][322 ms][DEBUG] targetPkg: running [2025-09-09 19:26:05][351007061317806][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 19:26:05][351007061317806][322 ms][DEBUG] START check_boot_completed [2025-09-09 19:26:05][351007061317806][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:26:05][351007061317806][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:26:05][351007061317806][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:26:05][351007061317806][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:26:05][351007061317806][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:26:05][351007061317806][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:26:05][351007061317806][540 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1480\nsuccessfulTxPacketsPerSecond: 0.5541993349607981\nretriedTxPackets: 284\nretriedTxPacketsPerSecond: 0.1597998082402301\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1407\nsuccessfulRxPacketsPerSecond: 0.45899944920066094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:26:05][351007061317806][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:26:06][351007061317806][1915 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.379/301.379/301.379/0.000 ms\n [2025-09-09 19:26:06][351007061317806][1915 ms][DEBUG] check_internet: online [2025-09-09 19:26:06][351007061317806][1916 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:26:06][351007061317806][1916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007061317806\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4174\"}'\'' -e'"" [2025-09-09 19:26:06][351007061317806][1916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:26:06][351007061317806][1916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007061317806\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4174\"}'\'' -e'"" [2025-09-09 19:26:11][351007061317806][6852 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2f01b86-ca68-497c-a8ac-75ab61792f1e","id":"QR_f2f01b86-ca68-497c-a8ac-75ab61792f1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:26:11][351007061317806][7008 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-09 19:26:11][351007061317806][7008 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-09 19:26:11][351007061317806][7008 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:26:15][351007061317806][0 ms][INFO] === Request start === [2025-09-09 19:26:15][351007061317806][1 ms][DEBUG] START check_scloud [2025-09-09 19:26:15][351007061317806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:26:15][351007061317806][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 7375 26882 24331320 195664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:26:15][351007061317806][312 ms][DEBUG] targetPkg: running [2025-09-09 19:26:15][351007061317806][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 19:26:15][351007061317806][312 ms][DEBUG] START check_boot_completed [2025-09-09 19:26:15][351007061317806][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:26:15][351007061317806][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:26:15][351007061317806][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:26:15][351007061317806][407 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 19:26:15][351007061317806][407 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 19:26:15][351007061317806][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:26:16][351007061317806][562 ms][DEBUG] SU: done in 154 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1480\nsuccessfulTxPacketsPerSecond: 0.5541993349607981\nretriedTxPackets: 284\nretriedTxPacketsPerSecond: 0.1597998082402301\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1407\nsuccessfulRxPacketsPerSecond: 0.45899944920066094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:26:16][351007061317806][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:26:16][351007061317806][952 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.405/278.405/278.405/0.000 ms\n [2025-09-09 19:26:16][351007061317806][952 ms][DEBUG] check_internet: online [2025-09-09 19:26:16][351007061317806][952 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:26:16][351007061317806][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007061317806\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2590\"}'\'' -e'"" [2025-09-09 19:26:16][351007061317806][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:26:16][351007061317806][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007061317806\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2590\"}'\'' -e'"" [2025-09-09 19:26:20][351007061317806][5060 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bafa5655-c271-453e-be2c-059862214875","id":"QR_bafa5655-c271-453e-be2c-059862214875","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:26:20][351007061317806][5217 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-09 19:26:20][351007061317806][5217 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-09 19:26:20][351007061317806][5217 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:26:23][359147525477218][0 ms][INFO] === Request start === [2025-09-09 19:26:23][359147525477218][1 ms][DEBUG] START check_scloud [2025-09-09 19:26:23][359147525477218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:26:24][359147525477218][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 7375 26882 24502592 207228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:26:24][359147525477218][312 ms][DEBUG] targetPkg: running [2025-09-09 19:26:24][359147525477218][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 19:26:24][359147525477218][312 ms][DEBUG] START check_boot_completed [2025-09-09 19:26:24][359147525477218][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:26:24][359147525477218][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:26:24][359147525477218][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:26:24][359147525477218][420 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 19:26:24][359147525477218][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:26:24][359147525477218][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:26:24][359147525477218][545 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1480\nsuccessfulTxPacketsPerSecond: 0.5541993349607981\nretriedTxPackets: 284\nretriedTxPacketsPerSecond: 0.1597998082402301\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1407\nsuccessfulRxPacketsPerSecond: 0.45899944920066094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:26:24][359147525477218][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:26:24][359147525477218][1014 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.335/319.335/319.335/0.000 ms\n [2025-09-09 19:26:24][359147525477218][1014 ms][DEBUG] check_internet: online [2025-09-09 19:26:24][359147525477218][1014 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:26:24][359147525477218][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147525477218\",\"model\":\"SM-A236U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7909\"}'\'' -e'"" [2025-09-09 19:26:24][359147525477218][1015 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:26:24][359147525477218][1015 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147525477218\",\"model\":\"SM-A236U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7909\"}'\'' -e'"" [2025-09-09 19:26:29][359147525477218][5607 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc1b5a5e-3c66-420f-9f05-447fd775cf41","id":"QR_dc1b5a5e-3c66-420f-9f05-447fd775cf41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:26:29][359147525477218][5763 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-09 19:26:29][359147525477218][5763 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-09 19:26:29][359147525477218][5763 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:26:33][359147525477218][0 ms][INFO] === Request start === [2025-09-09 19:26:33][359147525477218][1 ms][DEBUG] START check_scloud [2025-09-09 19:26:33][359147525477218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:26:33][359147525477218][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 7375 26882 24651236 217852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:26:33][359147525477218][315 ms][DEBUG] targetPkg: running [2025-09-09 19:26:33][359147525477218][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 19:26:33][359147525477218][315 ms][DEBUG] START check_boot_completed [2025-09-09 19:26:33][359147525477218][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:26:33][359147525477218][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:26:33][359147525477218][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:26:33][359147525477218][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:26:33][359147525477218][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:26:33][359147525477218][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:26:33][359147525477218][580 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1480\nsuccessfulTxPacketsPerSecond: 0.5541993349607981\nretriedTxPackets: 284\nretriedTxPacketsPerSecond: 0.1597998082402301\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1407\nsuccessfulRxPacketsPerSecond: 0.45899944920066094\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:26:33][359147525477218][581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:26:34][359147525477218][971 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.311/291.311/291.311/0.000 ms\n [2025-09-09 19:26:34][359147525477218][971 ms][DEBUG] check_internet: online [2025-09-09 19:26:34][359147525477218][971 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:26:34][359147525477218][971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147525477218\",\"model\":\"SM-A236U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7605\"}'\'' -e'"" [2025-09-09 19:26:34][359147525477218][971 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:26:34][359147525477218][971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359147525477218\",\"model\":\"SM-A236U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7605\"}'\'' -e'"" [2025-09-09 19:26:39][359147525477218][6766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1229f768-0cf1-49ee-a9cc-8cc12abdcf14","id":"QR_1229f768-0cf1-49ee-a9cc-8cc12abdcf14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:26:40][359147525477218][6922 ms][DEBUG] proc_open done in 5952 ms; code=255; res.len=3343 [2025-09-09 19:26:40][359147525477218][6923 ms][DEBUG] END runCmdUntilRes#1 in 5952 ms [2025-09-09 19:26:40][359147525477218][6923 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:27:04][352749380281366][0 ms][INFO] === Request start === [2025-09-09 19:27:04][352749380281366][1 ms][DEBUG] START check_scloud [2025-09-09 19:27:04][352749380281366][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:27:04][352749380281366][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 7375 26882 24750592 229924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:27:04][352749380281366][297 ms][DEBUG] targetPkg: running [2025-09-09 19:27:04][352749380281366][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 19:27:04][352749380281366][297 ms][DEBUG] START check_boot_completed [2025-09-09 19:27:04][352749380281366][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:27:04][352749380281366][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:27:04][352749380281366][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:27:04][352749380281366][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:27:04][352749380281366][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:27:04][352749380281366][375 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:27:04][352749380281366][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749380281366\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7252\"}'\'' -e'"" [2025-09-09 19:27:04][352749380281366][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:27:04][352749380281366][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749380281366\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7252\"}'\'' -e'"" [2025-09-09 19:27:09][352749380281366][5249 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5adb65f9-a3f9-449f-a517-ea8a9033239b","id":"QR_5adb65f9-a3f9-449f-a517-ea8a9033239b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:27:09][352749380281366][5405 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-09 19:27:09][352749380281366][5405 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-09 19:27:09][352749380281366][5405 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:28:05][351088371074691][1 ms][INFO] === Request start === [2025-09-09 19:28:05][351088371074691][1 ms][DEBUG] START check_scloud [2025-09-09 19:28:05][351088371074691][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:28:05][351088371074691][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 7375 26882 24864488 240972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:28:05][351088371074691][317 ms][DEBUG] targetPkg: running [2025-09-09 19:28:05][351088371074691][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 19:28:05][351088371074691][317 ms][DEBUG] START check_boot_completed [2025-09-09 19:28:05][351088371074691][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:28:05][351088371074691][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:28:05][351088371074691][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:28:05][351088371074691][411 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 19:28:05][351088371074691][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 19:28:05][351088371074691][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:28:05][351088371074691][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.8761187937437154\nretriedTxPackets: 353\nretriedTxPacketsPerSecond: 0.22898559381938013\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1632\nsuccessfulRxPacketsPerSecond: 0.7466921537588483\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:28:05][351088371074691][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:28:06][351088371074691][989 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.288/318.288/318.288/0.000 ms\n [2025-09-09 19:28:06][351088371074691][989 ms][DEBUG] check_internet: online [2025-09-09 19:28:06][351088371074691][989 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:28:06][351088371074691][989 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088371074691\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1244\"}'\'' -e'"" [2025-09-09 19:28:06][351088371074691][989 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:28:06][351088371074691][989 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088371074691\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1244\"}'\'' -e'"" [2025-09-09 19:28:10][351088371074691][5128 ms][DEBUG] proc_open done in 4139 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 19:28:10][351088371074691][5128 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-09 19:28:10][351088371074691][5128 ms][WARN] Detected error: Process with pid 7375 either refused to load frida-agent, or terminated during injectionProcess with pid 7375 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 19:28:10][351088371074691][5128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 19:28:10][351088371074691][5410 ms][DEBUG] SU: done in 282 ms; outsystem 27084 26882 12441344 239372 ep_poll 0 S system_server\n [2025-09-09 19:28:10][351088371074691][5410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 19:28:10][351088371074691][5566 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 19:28:10][351088371074691][5566 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 19:28:10][351088371074691][5566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 19:28:10][351088371074691][5706 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 19:28:10][351088371074691][5706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 19:28:11][351088371074691][5909 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 19:28:13][351088371074691][7924 ms][DEBUG] START check_boot_completed [2025-09-09 19:28:13][351088371074691][7924 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:28:13][351088371074691][7971 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:28:13][351088371074691][7971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:28:13][351088371074691][8020 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 19:28:13][351088371074691][8020 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 19:28:16][351088371074691][11033 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 19:28:16][351088371074691][11033 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088371074691\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1244\"}'\'' -e'"" [2025-09-09 19:28:21][351088371074691][16688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81e25999-8be7-4051-a2b1-567af797d265","id":"QR_81e25999-8be7-4051-a2b1-567af797d265","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:28:21][351088371074691][16844 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-09 19:28:21][351088371074691][16844 ms][DEBUG] END runCmdUntilRes#2 in 5811 ms [2025-09-09 19:28:21][351088371074691][16844 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:28:25][351088371074691][0 ms][INFO] === Request start === [2025-09-09 19:28:25][351088371074691][1 ms][DEBUG] START check_scloud [2025-09-09 19:28:25][351088371074691][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:28:25][351088371074691][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 9339 26882 23511484 124852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:28:25][351088371074691][266 ms][DEBUG] targetPkg: running [2025-09-09 19:28:25][351088371074691][266 ms][DEBUG] END check_scloud in 266 ms [2025-09-09 19:28:25][351088371074691][266 ms][DEBUG] START check_boot_completed [2025-09-09 19:28:25][351088371074691][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:28:25][351088371074691][297 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:28:25][351088371074691][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:28:25][351088371074691][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:28:25][351088371074691][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:28:25][351088371074691][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:28:25][351088371074691][454 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.8761187937437154\nretriedTxPackets: 353\nretriedTxPacketsPerSecond: 0.22898559381938013\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1632\nsuccessfulRxPacketsPerSecond: 0.7466921537588483\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:28:25][351088371074691][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:28:26][351088371074691][938 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.295/336.295/336.295/0.000 ms\n [2025-09-09 19:28:26][351088371074691][938 ms][DEBUG] check_internet: online [2025-09-09 19:28:26][351088371074691][938 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:28:26][351088371074691][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088371074691\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7095\"}'\'' -e'"" [2025-09-09 19:28:26][351088371074691][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:28:26][351088371074691][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088371074691\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7095\"}'\'' -e'"" [2025-09-09 19:28:30][351088371074691][5171 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18dec623-48e1-4c8f-af1a-8d3b302c653d","id":"QR_18dec623-48e1-4c8f-af1a-8d3b302c653d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:28:30][351088371074691][5327 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 19:28:30][351088371074691][5327 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 19:28:30][351088371074691][5328 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:34:03][352887812101610][1 ms][INFO] === Request start === [2025-09-09 19:34:03][352887812101610][1 ms][DEBUG] START check_scloud [2025-09-09 19:34:03][352887812101610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:34:03][352887812101610][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 9339 26882 23530700 138388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:34:03][352887812101610][301 ms][DEBUG] targetPkg: running [2025-09-09 19:34:03][352887812101610][301 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 19:34:03][352887812101610][301 ms][DEBUG] START check_boot_completed [2025-09-09 19:34:03][352887812101610][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:34:04][352887812101610][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:34:04][352887812101610][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:34:04][352887812101610][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:34:04][352887812101610][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 19:34:04][352887812101610][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:34:04][352887812101610][503 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1861\nsuccessfulTxPacketsPerSecond: 0.52005316098979\nretriedTxPackets: 379\nretriedTxPacketsPerSecond: 0.11556736910884224\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1739\nsuccessfulRxPacketsPerSecond: 0.4756041728710046\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:34:04][352887812101610][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:34:05][352887812101610][1878 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.283/300.283/300.283/0.000 ms\n [2025-09-09 19:34:05][352887812101610][1878 ms][DEBUG] check_internet: online [2025-09-09 19:34:05][352887812101610][1878 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:34:05][352887812101610][1878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887812101610\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1695\"}'\'' -e'"" [2025-09-09 19:34:05][352887812101610][1878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:34:05][352887812101610][1878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887812101610\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1695\"}'\'' -e'"" [2025-09-09 19:34:09][352887812101610][5846 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b9a2cd5-b332-4af3-b2e0-20c0d7b51534","id":"QR_1b9a2cd5-b332-4af3-b2e0-20c0d7b51534","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:34:09][352887812101610][6002 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-09-09 19:34:09][352887812101610][6002 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-09 19:34:09][352887812101610][6002 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:34:12][352887812101610][0 ms][INFO] === Request start === [2025-09-09 19:34:12][352887812101610][1 ms][DEBUG] START check_scloud [2025-09-09 19:34:12][352887812101610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:34:12][352887812101610][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 9339 26882 23660884 149600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:34:12][352887812101610][278 ms][DEBUG] targetPkg: running [2025-09-09 19:34:12][352887812101610][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 19:34:12][352887812101610][278 ms][DEBUG] START check_boot_completed [2025-09-09 19:34:12][352887812101610][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:34:12][352887812101610][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:34:12][352887812101610][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:34:12][352887812101610][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:34:12][352887812101610][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:34:12][352887812101610][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:34:12][352887812101610][466 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1861\nsuccessfulTxPacketsPerSecond: 0.52005316098979\nretriedTxPackets: 379\nretriedTxPacketsPerSecond: 0.11556736910884224\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1739\nsuccessfulRxPacketsPerSecond: 0.4756041728710046\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 81Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:34:12][352887812101610][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:34:12][352887812101610][810 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.227/242.227/242.227/0.000 ms\n [2025-09-09 19:34:12][352887812101610][810 ms][DEBUG] check_internet: online [2025-09-09 19:34:12][352887812101610][810 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:34:12][352887812101610][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887812101610\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1871\"}'\'' -e'"" [2025-09-09 19:34:12][352887812101610][810 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:34:12][352887812101610][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887812101610\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1871\"}'\'' -e'"" [2025-09-09 19:34:17][352887812101610][5855 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f8a7d4e-d5cd-44ef-b62a-565c90fb8343","id":"QR_4f8a7d4e-d5cd-44ef-b62a-565c90fb8343","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:34:18][352887812101610][6011 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 19:34:18][352887812101610][6011 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 19:34:18][352887812101610][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:38:03][357674437639710][1 ms][INFO] === Request start === [2025-09-09 19:38:03][357674437639710][1 ms][DEBUG] START check_scloud [2025-09-09 19:38:03][357674437639710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:38:04][357674437639710][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 9339 26882 23774612 160684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:38:04][357674437639710][262 ms][DEBUG] targetPkg: running [2025-09-09 19:38:04][357674437639710][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 19:38:04][357674437639710][262 ms][DEBUG] START check_boot_completed [2025-09-09 19:38:04][357674437639710][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:38:04][357674437639710][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:38:04][357674437639710][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:38:04][357674437639710][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:38:04][357674437639710][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:38:04][357674437639710][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:38:04][357674437639710][466 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1973\nsuccessfulTxPacketsPerSecond: 0.1493591123022308\nretriedTxPackets: 405\nretriedTxPacketsPerSecond: 0.029871989528970466\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1840\nsuccessfulRxPacketsPerSecond: 0.1194878188921116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:38:04][357674437639710][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:38:04][357674437639710][918 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=348 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 348.292/348.292/348.292/0.000 ms\n [2025-09-09 19:38:04][357674437639710][918 ms][DEBUG] check_internet: online [2025-09-09 19:38:04][357674437639710][918 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:38:04][357674437639710][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437639710\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8407\"}'\'' -e'"" [2025-09-09 19:38:04][357674437639710][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:38:04][357674437639710][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437639710\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8407\"}'\'' -e'"" [2025-09-09 19:38:09][357674437639710][5448 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7940d9ad-64b4-4fc4-8cd5-0101ffe0d94c","id":"QR_7940d9ad-64b4-4fc4-8cd5-0101ffe0d94c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:38:09][357674437639710][5604 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 19:38:09][357674437639710][5604 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 19:38:09][357674437639710][5604 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:38:11][357674437639710][0 ms][INFO] === Request start === [2025-09-09 19:38:11][357674437639710][1 ms][DEBUG] START check_scloud [2025-09-09 19:38:11][357674437639710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:38:12][357674437639710][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 9339 26882 23954012 171504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:38:12][357674437639710][272 ms][DEBUG] targetPkg: running [2025-09-09 19:38:12][357674437639710][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 19:38:12][357674437639710][272 ms][DEBUG] START check_boot_completed [2025-09-09 19:38:12][357674437639710][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:38:12][357674437639710][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:38:12][357674437639710][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:38:12][357674437639710][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:38:12][357674437639710][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:38:12][357674437639710][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:38:12][357674437639710][491 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1973\nsuccessfulTxPacketsPerSecond: 0.1493591123022308\nretriedTxPackets: 405\nretriedTxPacketsPerSecond: 0.029871989528970466\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1840\nsuccessfulRxPacketsPerSecond: 0.1194878188921116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:38:12][357674437639710][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:38:12][357674437639710][944 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=339 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 339.731/339.731/339.731/0.000 ms\n [2025-09-09 19:38:12][357674437639710][944 ms][DEBUG] check_internet: online [2025-09-09 19:38:12][357674437639710][944 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:38:12][357674437639710][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437639710\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4317\"}'\'' -e'"" [2025-09-09 19:38:12][357674437639710][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:38:12][357674437639710][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437639710\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4317\"}'\'' -e'"" [2025-09-09 19:38:19][357674437639710][7536 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4519dbc-2958-48ba-9a9f-3d6c48b861e1","id":"QR_e4519dbc-2958-48ba-9a9f-3d6c48b861e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:38:19][357674437639710][7692 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=3343 [2025-09-09 19:38:19][357674437639710][7692 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-09-09 19:38:19][357674437639710][7692 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:40:04][353530673154166][1 ms][INFO] === Request start === [2025-09-09 19:40:04][353530673154166][1 ms][DEBUG] START check_scloud [2025-09-09 19:40:04][353530673154166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:40:04][353530673154166][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 9339 26882 24069916 183796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:40:04][353530673154166][287 ms][DEBUG] targetPkg: running [2025-09-09 19:40:04][353530673154166][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-09 19:40:04][353530673154166][287 ms][DEBUG] START check_boot_completed [2025-09-09 19:40:04][353530673154166][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:40:04][353530673154166][332 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 19:40:04][353530673154166][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:40:04][353530673154166][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 19:40:04][353530673154166][395 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 19:40:04][353530673154166][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:40:04][353530673154166][551 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1973\nsuccessfulTxPacketsPerSecond: 0.1493591123022308\nretriedTxPackets: 405\nretriedTxPacketsPerSecond: 0.029871989528970466\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1840\nsuccessfulRxPacketsPerSecond: 0.1194878188921116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:40:04][353530673154166][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:40:06][353530673154166][1910 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.637/300.637/300.637/0.000 ms\n [2025-09-09 19:40:06][353530673154166][1910 ms][DEBUG] check_internet: online [2025-09-09 19:40:06][353530673154166][1910 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:40:06][353530673154166][1910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673154166\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2620\"}'\'' -e'"" [2025-09-09 19:40:06][353530673154166][1910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:40:06][353530673154166][1910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673154166\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2620\"}'\'' -e'"" [2025-09-09 19:40:09][353530673154166][5612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0c768b9-f9d4-42b1-b16d-9f5f3af1528c","id":"QR_e0c768b9-f9d4-42b1-b16d-9f5f3af1528c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:40:10][353530673154166][5768 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-09 19:40:10][353530673154166][5768 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 19:40:10][353530673154166][5768 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:40:12][353530673154166][0 ms][INFO] === Request start === [2025-09-09 19:40:12][353530673154166][1 ms][DEBUG] START check_scloud [2025-09-09 19:40:12][353530673154166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:40:12][353530673154166][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 9339 26882 24249252 194556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:40:12][353530673154166][305 ms][DEBUG] targetPkg: running [2025-09-09 19:40:12][353530673154166][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 19:40:12][353530673154166][305 ms][DEBUG] START check_boot_completed [2025-09-09 19:40:12][353530673154166][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:40:12][353530673154166][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:40:12][353530673154166][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:40:12][353530673154166][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:40:12][353530673154166][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:40:12][353530673154166][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:40:12][353530673154166][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1973\nsuccessfulTxPacketsPerSecond: 0.1493591123022308\nretriedTxPackets: 405\nretriedTxPacketsPerSecond: 0.029871989528970466\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1840\nsuccessfulRxPacketsPerSecond: 0.1194878188921116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:40:12][353530673154166][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:40:13][353530673154166][914 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.579/283.579/283.579/0.000 ms\n [2025-09-09 19:40:13][353530673154166][914 ms][DEBUG] check_internet: online [2025-09-09 19:40:13][353530673154166][914 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:40:13][353530673154166][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673154166\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4533\"}'\'' -e'"" [2025-09-09 19:40:13][353530673154166][914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:40:13][353530673154166][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673154166\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4533\"}'\'' -e'"" [2025-09-09 19:40:18][353530673154166][5866 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef247da3-69ce-4286-bf18-120e65265172","id":"QR_ef247da3-69ce-4286-bf18-120e65265172","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:40:18][353530673154166][6022 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-09 19:40:18][353530673154166][6022 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-09 19:40:18][353530673154166][6022 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:41:05][351024051467293][0 ms][INFO] === Request start === [2025-09-09 19:41:05][351024051467293][1 ms][DEBUG] START check_scloud [2025-09-09 19:41:05][351024051467293][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:41:05][351024051467293][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 9339 26882 24395876 206192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:41:05][351024051467293][306 ms][DEBUG] targetPkg: running [2025-09-09 19:41:05][351024051467293][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 19:41:05][351024051467293][306 ms][DEBUG] START check_boot_completed [2025-09-09 19:41:05][351024051467293][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:41:05][351024051467293][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:41:05][351024051467293][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:41:05][351024051467293][431 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 19:41:05][351024051467293][431 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 19:41:05][351024051467293][431 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:41:05][351024051467293][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024051467293\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7339\"}'\'' -e'"" [2025-09-09 19:41:05][351024051467293][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:41:05][351024051467293][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024051467293\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7339\"}'\'' -e'"" [2025-09-09 19:41:10][351024051467293][5227 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4d4c87e-c200-45d6-91ce-8727e7eeafa3","id":"QR_c4d4c87e-c200-45d6-91ce-8727e7eeafa3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:41:10][351024051467293][5383 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-09 19:41:10][351024051467293][5383 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-09 19:41:10][351024051467293][5383 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:46:04][350341124641113][1 ms][INFO] === Request start === [2025-09-09 19:46:04][350341124641113][1 ms][DEBUG] START check_scloud [2025-09-09 19:46:04][350341124641113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:46:05][350341124641113][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 9339 26882 24501576 115148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:46:05][350341124641113][334 ms][DEBUG] targetPkg: running [2025-09-09 19:46:05][350341124641113][334 ms][DEBUG] END check_scloud in 333 ms [2025-09-09 19:46:05][350341124641113][334 ms][DEBUG] START check_boot_completed [2025-09-09 19:46:05][350341124641113][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:46:05][350341124641113][381 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:46:05][350341124641113][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:46:05][350341124641113][428 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:46:05][350341124641113][428 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 19:46:05][350341124641113][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:46:05][350341124641113][568 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2173\nsuccessfulTxPacketsPerSecond: 0.17254518527039267\nretriedTxPackets: 456\nretriedTxPacketsPerSecond: 0.04313629631759817\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2016\nsuccessfulRxPacketsPerSecond: 0.1437876543919939\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:46:05][350341124641113][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:46:06][350341124641113][2005 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=407 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 407.273/407.273/407.273/0.000 ms\n [2025-09-09 19:46:06][350341124641113][2005 ms][DEBUG] check_internet: online [2025-09-09 19:46:06][350341124641113][2006 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:46:06][350341124641113][2006 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124641113\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8265\"}'\'' -e'"" [2025-09-09 19:46:06][350341124641113][2006 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:46:06][350341124641113][2006 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124641113\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8265\"}'\'' -e'"" [2025-09-09 19:46:12][350341124641113][7457 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae1a5185-b359-44c5-8d10-0c96f3d3d1b0","id":"QR_ae1a5185-b359-44c5-8d10-0c96f3d3d1b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:46:12][350341124641113][7613 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-09 19:46:12][350341124641113][7613 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 19:46:12][350341124641113][7613 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:46:15][350341124641113][0 ms][INFO] === Request start === [2025-09-09 19:46:15][350341124641113][1 ms][DEBUG] START check_scloud [2025-09-09 19:46:15][350341124641113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:46:16][350341124641113][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 9339 26882 24666704 119272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:46:16][350341124641113][315 ms][DEBUG] targetPkg: running [2025-09-09 19:46:16][350341124641113][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 19:46:16][350341124641113][315 ms][DEBUG] START check_boot_completed [2025-09-09 19:46:16][350341124641113][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:46:16][350341124641113][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:46:16][350341124641113][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:46:16][350341124641113][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:46:16][350341124641113][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:46:16][350341124641113][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:46:16][350341124641113][534 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2173\nsuccessfulTxPacketsPerSecond: 0.17254518527039267\nretriedTxPackets: 456\nretriedTxPacketsPerSecond: 0.04313629631759817\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2016\nsuccessfulRxPacketsPerSecond: 0.1437876543919939\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:46:16][350341124641113][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:46:16][350341124641113][925 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.531/274.531/274.531/0.000 ms\n [2025-09-09 19:46:16][350341124641113][925 ms][DEBUG] check_internet: online [2025-09-09 19:46:16][350341124641113][925 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:46:16][350341124641113][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124641113\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1652\"}'\'' -e'"" [2025-09-09 19:46:16][350341124641113][925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:46:16][350341124641113][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124641113\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1652\"}'\'' -e'"" [2025-09-09 19:46:20][350341124641113][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb551e59-fe51-4d83-95ab-9267f985864d","id":"QR_fb551e59-fe51-4d83-95ab-9267f985864d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:46:20][350341124641113][4783 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-09 19:46:20][350341124641113][4783 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 19:46:20][350341124641113][4783 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:50:03][352792441698533][1 ms][INFO] === Request start === [2025-09-09 19:50:03][352792441698533][1 ms][DEBUG] START check_scloud [2025-09-09 19:50:03][352792441698533][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:50:04][352792441698533][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 9339 26882 24755728 127952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:50:04][352792441698533][316 ms][DEBUG] targetPkg: running [2025-09-09 19:50:04][352792441698533][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 19:50:04][352792441698533][316 ms][DEBUG] START check_boot_completed [2025-09-09 19:50:04][352792441698533][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:50:04][352792441698533][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:50:04][352792441698533][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:50:04][352792441698533][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:50:04][352792441698533][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:50:04][352792441698533][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:50:04][352792441698533][519 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2359\nsuccessfulTxPacketsPerSecond: 0.5951085913203732\nretriedTxPackets: 496\nretriedTxPacketsPerSecond: 0.1279803422194351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2188\nsuccessfulRxPacketsPerSecond: 0.5503154715435709\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:50:04][352792441698533][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:50:04][352792441698533][909 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.874/283.874/283.874/0.000 ms\n [2025-09-09 19:50:04][352792441698533][909 ms][DEBUG] check_internet: online [2025-09-09 19:50:04][352792441698533][909 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:50:04][352792441698533][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352792441698533\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-09-09 19:50:04][352792441698533][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:50:04][352792441698533][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352792441698533\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-09-09 19:50:09][352792441698533][5377 ms][DEBUG] proc_open done in 4467 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 19:50:09][352792441698533][5377 ms][DEBUG] END runCmdUntilRes#1 in 4468 ms [2025-09-09 19:50:09][352792441698533][5377 ms][WARN] Detected error: Process with pid 9339 either refused to load frida-agent, or terminated during injectionProcess with pid 9339 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 19:50:09][352792441698533][5377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 19:50:09][352792441698533][5643 ms][DEBUG] SU: done in 266 ms; outsystem 27084 26882 12436168 170228 ep_poll 0 S system_server\n [2025-09-09 19:50:09][352792441698533][5643 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 19:50:09][352792441698533][5783 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 19:50:09][352792441698533][5783 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 19:50:09][352792441698533][5783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 19:50:09][352792441698533][5924 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 19:50:09][352792441698533][5924 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 19:50:10][352792441698533][6142 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 19:50:12][352792441698533][8157 ms][DEBUG] START check_boot_completed [2025-09-09 19:50:12][352792441698533][8158 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:50:12][352792441698533][8204 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:50:12][352792441698533][8204 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:50:12][352792441698533][8251 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:50:12][352792441698533][8251 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 19:50:15][352792441698533][11266 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 19:50:15][352792441698533][11266 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352792441698533\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-09-09 19:50:20][352792441698533][16280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e82fa5a-c778-47b8-8816-342722cefe0c","id":"QR_9e82fa5a-c778-47b8-8816-342722cefe0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:50:20][352792441698533][16437 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-09-09 19:50:20][352792441698533][16437 ms][DEBUG] END runCmdUntilRes#2 in 5171 ms [2025-09-09 19:50:20][352792441698533][16437 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:50:22][352792441698533][0 ms][INFO] === Request start === [2025-09-09 19:50:22][352792441698533][1 ms][DEBUG] START check_scloud [2025-09-09 19:50:22][352792441698533][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:50:22][352792441698533][242 ms][DEBUG] SU: done in 242 ms; outu0_a118 12706 26882 23476128 124900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:50:22][352792441698533][242 ms][DEBUG] targetPkg: running [2025-09-09 19:50:22][352792441698533][242 ms][DEBUG] END check_scloud in 242 ms [2025-09-09 19:50:22][352792441698533][242 ms][DEBUG] START check_boot_completed [2025-09-09 19:50:22][352792441698533][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:50:23][352792441698533][274 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:50:23][352792441698533][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:50:23][352792441698533][320 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:50:23][352792441698533][320 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:50:23][352792441698533][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:50:23][352792441698533][416 ms][DEBUG] SU: done in 95 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2359\nsuccessfulTxPacketsPerSecond: 0.5951085913203732\nretriedTxPackets: 496\nretriedTxPacketsPerSecond: 0.1279803422194351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2188\nsuccessfulRxPacketsPerSecond: 0.5503154715435709\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:50:23][352792441698533][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:50:23][352792441698533][1039 ms][DEBUG] SU: done in 624 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.434/304.434/304.434/0.000 ms\n [2025-09-09 19:50:23][352792441698533][1039 ms][DEBUG] check_internet: online [2025-09-09 19:50:23][352792441698533][1039 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:50:23][352792441698533][1039 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352792441698533\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7730\"}'\'' -e'"" [2025-09-09 19:50:23][352792441698533][1039 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:50:23][352792441698533][1040 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352792441698533\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7730\"}'\'' -e'"" [2025-09-09 19:50:30][352792441698533][7522 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c822918-8fdb-496e-9c56-5336ef2101c6","id":"QR_7c822918-8fdb-496e-9c56-5336ef2101c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:50:30][352792441698533][7678 ms][DEBUG] proc_open done in 6638 ms; code=255; res.len=3343 [2025-09-09 19:50:30][352792441698533][7678 ms][DEBUG] END runCmdUntilRes#1 in 6639 ms [2025-09-09 19:50:30][352792441698533][7678 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:58:04][354952835148978][1 ms][INFO] === Request start === [2025-09-09 19:58:04][354952835148978][1 ms][DEBUG] START check_scloud [2025-09-09 19:58:04][354952835148978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:58:04][354952835148978][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 12706 26882 23531648 139068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:58:04][354952835148978][261 ms][DEBUG] targetPkg: running [2025-09-09 19:58:04][354952835148978][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 19:58:04][354952835148978][261 ms][DEBUG] START check_boot_completed [2025-09-09 19:58:04][354952835148978][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:58:04][354952835148978][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:58:04][354952835148978][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:58:04][354952835148978][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:58:04][354952835148978][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:58:04][354952835148978][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:58:05][354952835148978][448 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2464\nsuccessfulTxPacketsPerSecond: 0.3491109308294876\nretriedTxPackets: 524\nretriedTxPacketsPerSecond: 0.09309624822119669\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2277\nsuccessfulRxPacketsPerSecond: 0.2959130747030895\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:58:05][354952835148978][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:58:06][354952835148978][1807 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.469/301.469/301.469/0.000 ms\n [2025-09-09 19:58:06][354952835148978][1808 ms][DEBUG] check_internet: online [2025-09-09 19:58:06][354952835148978][1808 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:58:06][354952835148978][1808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952835148978\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1490\"}'\'' -e'"" [2025-09-09 19:58:06][354952835148978][1808 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:58:06][354952835148978][1808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952835148978\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1490\"}'\'' -e'"" [2025-09-09 19:58:11][354952835148978][6947 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7314b0a-885c-434e-969e-93fb5aaa9dca","id":"QR_c7314b0a-885c-434e-969e-93fb5aaa9dca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:58:11][354952835148978][7103 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 19:58:11][354952835148978][7103 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 19:58:11][354952835148978][7103 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:58:15][354952835148978][0 ms][INFO] === Request start === [2025-09-09 19:58:15][354952835148978][1 ms][DEBUG] START check_scloud [2025-09-09 19:58:15][354952835148978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:58:15][354952835148978][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 12706 26882 23703956 150564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:58:15][354952835148978][313 ms][DEBUG] targetPkg: running [2025-09-09 19:58:15][354952835148978][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 19:58:15][354952835148978][313 ms][DEBUG] START check_boot_completed [2025-09-09 19:58:15][354952835148978][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:58:15][354952835148978][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:58:15][354952835148978][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:58:15][354952835148978][438 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 19:58:15][354952835148978][438 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 19:58:15][354952835148978][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:58:15][354952835148978][578 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2464\nsuccessfulTxPacketsPerSecond: 0.3491109308294876\nretriedTxPackets: 524\nretriedTxPacketsPerSecond: 0.09309624822119669\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2277\nsuccessfulRxPacketsPerSecond: 0.2959130747030895\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:58:15][354952835148978][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:58:16][354952835148978][969 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.763/296.763/296.763/0.000 ms\n [2025-09-09 19:58:16][354952835148978][969 ms][DEBUG] check_internet: online [2025-09-09 19:58:16][354952835148978][969 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:58:16][354952835148978][970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952835148978\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1997\"}'\'' -e'"" [2025-09-09 19:58:16][354952835148978][970 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:58:16][354952835148978][970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952835148978\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1997\"}'\'' -e'"" [2025-09-09 19:58:19][354952835148978][4765 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac9c6ced-9c6e-4764-8a4f-b9a4a908677a","id":"QR_ac9c6ced-9c6e-4764-8a4f-b9a4a908677a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:58:20][354952835148978][4921 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-09-09 19:58:20][354952835148978][4921 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-09-09 19:58:20][354952835148978][4921 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:58:23][350547662759121][0 ms][INFO] === Request start === [2025-09-09 19:58:23][350547662759121][1 ms][DEBUG] START check_scloud [2025-09-09 19:58:23][350547662759121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:58:23][350547662759121][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 12706 26882 23830044 161204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:58:23][350547662759121][297 ms][DEBUG] targetPkg: running [2025-09-09 19:58:23][350547662759121][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-09 19:58:23][350547662759121][297 ms][DEBUG] START check_boot_completed [2025-09-09 19:58:23][350547662759121][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:58:23][350547662759121][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:58:23][350547662759121][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:58:23][350547662759121][376 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 19:58:23][350547662759121][376 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 19:58:23][350547662759121][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:58:23][350547662759121][500 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2464\nsuccessfulTxPacketsPerSecond: 0.3491109308294876\nretriedTxPackets: 524\nretriedTxPacketsPerSecond: 0.09309624822119669\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2277\nsuccessfulRxPacketsPerSecond: 0.2959130747030895\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:58:23][350547662759121][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:58:24][350547662759121][922 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=284 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 284.788/284.788/284.788/0.000 ms\n [2025-09-09 19:58:24][350547662759121][922 ms][DEBUG] check_internet: online [2025-09-09 19:58:24][350547662759121][922 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:58:24][350547662759121][922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662759121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3475\"}'\'' -e'"" [2025-09-09 19:58:24][350547662759121][922 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:58:24][350547662759121][922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662759121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3475\"}'\'' -e'"" [2025-09-09 19:58:28][350547662759121][5248 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_536a3c7c-e54f-4e07-8e61-edd3c1903ddf","id":"QR_536a3c7c-e54f-4e07-8e61-edd3c1903ddf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:58:28][350547662759121][5405 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-09 19:58:28][350547662759121][5405 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-09 19:58:28][350547662759121][5405 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:58:32][350547662759121][0 ms][INFO] === Request start === [2025-09-09 19:58:32][350547662759121][1 ms][DEBUG] START check_scloud [2025-09-09 19:58:32][350547662759121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:58:32][350547662759121][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 12706 26882 23980672 171268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:58:32][350547662759121][258 ms][DEBUG] targetPkg: running [2025-09-09 19:58:32][350547662759121][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 19:58:32][350547662759121][258 ms][DEBUG] START check_boot_completed [2025-09-09 19:58:32][350547662759121][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:58:32][350547662759121][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:58:32][350547662759121][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:58:32][350547662759121][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:58:32][350547662759121][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:58:32][350547662759121][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 19:58:32][350547662759121][463 ms][DEBUG] SU: done in 112 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2464\nsuccessfulTxPacketsPerSecond: 0.3491109308294876\nretriedTxPackets: 524\nretriedTxPacketsPerSecond: 0.09309624822119669\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2277\nsuccessfulRxPacketsPerSecond: 0.2959130747030895\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 19:58:32][350547662759121][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 19:58:32][350547662759121][851 ms][DEBUG] SU: done in 388 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.576/247.576/247.576/0.000 ms\n [2025-09-09 19:58:32][350547662759121][852 ms][DEBUG] check_internet: online [2025-09-09 19:58:32][350547662759121][852 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:58:32][350547662759121][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662759121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3700\"}'\'' -e'"" [2025-09-09 19:58:32][350547662759121][852 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:58:32][350547662759121][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662759121\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3700\"}'\'' -e'"" [2025-09-09 19:58:37][350547662759121][5085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_befc8dbd-1283-4cb6-a686-e2c75721b85f","id":"QR_befc8dbd-1283-4cb6-a686-e2c75721b85f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:58:37][350547662759121][5241 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 19:58:37][350547662759121][5241 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 19:58:37][350547662759121][5241 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:59:04][350603382922307][0 ms][INFO] === Request start === [2025-09-09 19:59:04][350603382922307][1 ms][DEBUG] START check_scloud [2025-09-09 19:59:04][350603382922307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:59:04][350603382922307][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 12706 26882 24061724 183424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:59:04][350603382922307][265 ms][DEBUG] targetPkg: running [2025-09-09 19:59:04][350603382922307][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-09 19:59:04][350603382922307][265 ms][DEBUG] START check_boot_completed [2025-09-09 19:59:04][350603382922307][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:59:04][350603382922307][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 19:59:04][350603382922307][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:59:04][350603382922307][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 19:59:04][350603382922307][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 19:59:04][350603382922307][374 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:59:04][350603382922307][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603382922307\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7210\"}'\'' -e'"" [2025-09-09 19:59:04][350603382922307][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:59:04][350603382922307][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603382922307\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7210\"}'\'' -e'"" [2025-09-09 19:59:09][350603382922307][5341 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2b6d2f9-3d98-41e5-a7b3-7c2a9df54bb0","id":"QR_e2b6d2f9-3d98-41e5-a7b3-7c2a9df54bb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:59:10][350603382922307][5497 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-09 19:59:10][350603382922307][5497 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-09 19:59:10][350603382922307][5497 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:59:13][350603382922307][0 ms][INFO] === Request start === [2025-09-09 19:59:13][350603382922307][1 ms][DEBUG] START check_scloud [2025-09-09 19:59:13][350603382922307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:59:13][350603382922307][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 12706 26882 24241188 194388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:59:13][350603382922307][273 ms][DEBUG] targetPkg: running [2025-09-09 19:59:13][350603382922307][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 19:59:13][350603382922307][273 ms][DEBUG] START check_boot_completed [2025-09-09 19:59:13][350603382922307][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:59:13][350603382922307][304 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:59:13][350603382922307][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:59:13][350603382922307][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:59:13][350603382922307][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:59:13][350603382922307][351 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:59:13][350603382922307][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603382922307\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7673\"}'\'' -e'"" [2025-09-09 19:59:13][350603382922307][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:59:13][350603382922307][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603382922307\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7673\"}'\'' -e'"" [2025-09-09 19:59:17][350603382922307][3725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5aa8f336-7331-4c44-ab96-4ce231b66ebe","id":"QR_5aa8f336-7331-4c44-ab96-4ce231b66ebe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:59:17][350603382922307][3881 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-09 19:59:17][350603382922307][3882 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-09 19:59:17][350603382922307][3882 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:59:20][350915069467749][0 ms][INFO] === Request start === [2025-09-09 19:59:20][350915069467749][1 ms][DEBUG] START check_scloud [2025-09-09 19:59:20][350915069467749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:59:20][350915069467749][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 12706 26882 24363308 206268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:59:20][350915069467749][321 ms][DEBUG] targetPkg: running [2025-09-09 19:59:20][350915069467749][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 19:59:20][350915069467749][321 ms][DEBUG] START check_boot_completed [2025-09-09 19:59:20][350915069467749][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:59:20][350915069467749][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 19:59:20][350915069467749][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:59:20][350915069467749][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:59:20][350915069467749][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 19:59:20][350915069467749][399 ms][DEBUG] rawBody.length=1160 [2025-09-09 19:59:20][350915069467749][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069467749\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3848\"}'\'' -e'"" [2025-09-09 19:59:20][350915069467749][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:59:20][350915069467749][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069467749\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3848\"}'\'' -e'"" [2025-09-09 19:59:28][350915069467749][7663 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5f991c3-e509-43df-9a5d-781b0e6ed932","id":"QR_c5f991c3-e509-43df-9a5d-781b0e6ed932","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:59:28][350915069467749][7819 ms][DEBUG] proc_open done in 7420 ms; code=255; res.len=3343 [2025-09-09 19:59:28][350915069467749][7819 ms][DEBUG] END runCmdUntilRes#1 in 7420 ms [2025-09-09 19:59:28][350915069467749][7819 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 19:59:31][350915069467749][0 ms][INFO] === Request start === [2025-09-09 19:59:31][350915069467749][1 ms][DEBUG] START check_scloud [2025-09-09 19:59:31][350915069467749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 19:59:32][350915069467749][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 12706 26882 24501776 217084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 19:59:32][350915069467749][254 ms][DEBUG] targetPkg: running [2025-09-09 19:59:32][350915069467749][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-09 19:59:32][350915069467749][254 ms][DEBUG] START check_boot_completed [2025-09-09 19:59:32][350915069467749][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 19:59:32][350915069467749][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 19:59:32][350915069467749][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 19:59:32][350915069467749][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 19:59:32][350915069467749][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 19:59:32][350915069467749][348 ms][DEBUG] rawBody.length=1150 [2025-09-09 19:59:32][350915069467749][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069467749\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2153\"}'\'' -e'"" [2025-09-09 19:59:32][350915069467749][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 19:59:32][350915069467749][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069467749\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2153\"}'\'' -e'"" [2025-09-09 19:59:35][350915069467749][4050 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66f3d49d-5de4-4357-988a-65048c705f10","id":"QR_66f3d49d-5de4-4357-988a-65048c705f10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 19:59:36][350915069467749][4206 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-09 19:59:36][350915069467749][4206 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 19:59:36][350915069467749][4206 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:00:04][354106701157403][0 ms][INFO] === Request start === [2025-09-09 20:00:04][354106701157403][1 ms][DEBUG] START check_scloud [2025-09-09 20:00:04][354106701157403][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:00:04][354106701157403][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 12706 26882 24588844 228956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:00:04][354106701157403][300 ms][DEBUG] targetPkg: running [2025-09-09 20:00:04][354106701157403][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 20:00:04][354106701157403][301 ms][DEBUG] START check_boot_completed [2025-09-09 20:00:04][354106701157403][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:00:04][354106701157403][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:00:04][354106701157403][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:00:04][354106701157403][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 20:00:04][354106701157403][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:00:04][354106701157403][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:00:04][354106701157403][550 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2773\nsuccessfulTxPacketsPerSecond: 1.026312118454354\nretriedTxPackets: 592\nretriedTxPacketsPerSecond: 0.2258550940287899\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2545\nsuccessfulRxPacketsPerSecond: 0.8901347823487601\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:00:04][354106701157403][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:00:05][354106701157403][987 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=328 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 328.845/328.845/328.845/0.000 ms\n [2025-09-09 20:00:05][354106701157403][987 ms][DEBUG] check_internet: online [2025-09-09 20:00:05][354106701157403][988 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:00:05][354106701157403][988 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106701157403\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6882\"}'\'' -e'"" [2025-09-09 20:00:05][354106701157403][988 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:00:05][354106701157403][988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106701157403\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6882\"}'\'' -e'"" [2025-09-09 20:00:10][354106701157403][6548 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_451c76b0-eec8-478f-bfcb-92419260c8a5","id":"QR_451c76b0-eec8-478f-bfcb-92419260c8a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:00:11][354106701157403][6704 ms][DEBUG] proc_open done in 5716 ms; code=255; res.len=3343 [2025-09-09 20:00:11][354106701157403][6704 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-09 20:00:11][354106701157403][6705 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:07:03][352502219464129][1 ms][INFO] === Request start === [2025-09-09 20:07:03][352502219464129][1 ms][DEBUG] START check_scloud [2025-09-09 20:07:03][352502219464129][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:07:03][352502219464129][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 12706 26882 24707900 240632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:07:03][352502219464129][241 ms][DEBUG] targetPkg: running [2025-09-09 20:07:03][352502219464129][241 ms][DEBUG] END check_scloud in 240 ms [2025-09-09 20:07:03][352502219464129][241 ms][DEBUG] START check_boot_completed [2025-09-09 20:07:03][352502219464129][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:07:03][352502219464129][271 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 20:07:03][352502219464129][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:07:03][352502219464129][318 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:07:03][352502219464129][318 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 20:07:03][352502219464129][318 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:07:03][352502219464129][318 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502219464129\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1885\"}'\'' -e'"" [2025-09-09 20:07:03][352502219464129][318 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:07:03][352502219464129][318 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502219464129\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1885\"}'\'' -e'"" [2025-09-09 20:07:07][352502219464129][4332 ms][DEBUG] proc_open done in 4014 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 20:07:07][352502219464129][4332 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-09 20:07:07][352502219464129][4332 ms][WARN] Detected error: Process with pid 12706 either refused to load frida-agent, or terminated during injectionProcess with pid 12706 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 20:07:07][352502219464129][4332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 20:07:08][352502219464129][4598 ms][DEBUG] SU: done in 266 ms; outsystem 27084 26882 12453604 164448 ep_poll 0 S system_server\n [2025-09-09 20:07:08][352502219464129][4598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 20:07:08][352502219464129][4723 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 20:07:08][352502219464129][4723 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 20:07:08][352502219464129][4723 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 20:07:08][352502219464129][4879 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 20:07:08][352502219464129][4879 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 20:07:08][352502219464129][5098 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 20:07:10][352502219464129][7113 ms][DEBUG] START check_boot_completed [2025-09-09 20:07:10][352502219464129][7113 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:07:10][352502219464129][7160 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:07:10][352502219464129][7160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:07:10][352502219464129][7254 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 20:07:10][352502219464129][7254 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-09 20:07:13][352502219464129][10268 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 20:07:13][352502219464129][10269 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502219464129\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1885\"}'\'' -e'"" [2025-09-09 20:07:17][352502219464129][14096 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83ca0064-69b2-4661-8e38-485f2b5cdbb0","id":"QR_83ca0064-69b2-4661-8e38-485f2b5cdbb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:07:17][352502219464129][14252 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-09 20:07:17][352502219464129][14252 ms][DEBUG] END runCmdUntilRes#2 in 3983 ms [2025-09-09 20:07:17][352502219464129][14252 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:07:20][352502219464129][0 ms][INFO] === Request start === [2025-09-09 20:07:20][352502219464129][1 ms][DEBUG] START check_scloud [2025-09-09 20:07:20][352502219464129][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:07:20][352502219464129][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 14335 26882 23408612 123664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:07:20][352502219464129][241 ms][DEBUG] targetPkg: running [2025-09-09 20:07:20][352502219464129][241 ms][DEBUG] END check_scloud in 241 ms [2025-09-09 20:07:20][352502219464129][241 ms][DEBUG] START check_boot_completed [2025-09-09 20:07:20][352502219464129][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:07:20][352502219464129][288 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:07:20][352502219464129][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:07:20][352502219464129][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:07:20][352502219464129][335 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:07:20][352502219464129][335 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:07:20][352502219464129][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502219464129\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1863\"}'\'' -e'"" [2025-09-09 20:07:20][352502219464129][335 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:07:20][352502219464129][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502219464129\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1863\"}'\'' -e'"" [2025-09-09 20:07:25][352502219464129][5240 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_030bb06f-9302-4eae-92bf-12de0e288fa8","id":"QR_030bb06f-9302-4eae-92bf-12de0e288fa8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:07:25][352502219464129][5396 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-09 20:07:25][352502219464129][5396 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-09 20:07:25][352502219464129][5396 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:08:05][350153253028248][0 ms][INFO] === Request start === [2025-09-09 20:08:05][350153253028248][1 ms][DEBUG] START check_scloud [2025-09-09 20:08:05][350153253028248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:08:05][350153253028248][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 14335 26882 23505756 137352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:08:05][350153253028248][309 ms][DEBUG] targetPkg: running [2025-09-09 20:08:05][350153253028248][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 20:08:05][350153253028248][309 ms][DEBUG] START check_boot_completed [2025-09-09 20:08:05][350153253028248][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:08:05][350153253028248][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:08:05][350153253028248][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:08:05][350153253028248][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:08:05][350153253028248][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:08:05][350153253028248][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:08:05][350153253028248][512 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2965\nsuccessfulTxPacketsPerSecond: 0.4669926237671113\nretriedTxPackets: 640\nretriedTxPacketsPerSecond: 0.10127550876877113\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2711\nsuccessfulRxPacketsPerSecond: 0.41635486938272576\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:08:05][350153253028248][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:08:07][350153253028248][1871 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.560/304.560/304.560/0.000 ms\n [2025-09-09 20:08:07][350153253028248][1871 ms][DEBUG] check_internet: online [2025-09-09 20:08:07][350153253028248][1871 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:08:07][350153253028248][1871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350153253028248\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1036\"}'\'' -e'"" [2025-09-09 20:08:07][350153253028248][1871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:08:07][350153253028248][1871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350153253028248\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1036\"}'\'' -e'"" [2025-09-09 20:08:11][350153253028248][6697 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9040e185-9969-4e60-b3f4-2c794ef4a0bc","id":"QR_9040e185-9969-4e60-b3f4-2c794ef4a0bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:08:12][350153253028248][6854 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-09 20:08:12][350153253028248][6854 ms][DEBUG] END runCmdUntilRes#1 in 4982 ms [2025-09-09 20:08:12][350153253028248][6854 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:08:15][350153253028248][0 ms][INFO] === Request start === [2025-09-09 20:08:15][350153253028248][1 ms][DEBUG] START check_scloud [2025-09-09 20:08:15][350153253028248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:08:15][350153253028248][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 14335 26882 23666724 148488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:08:15][350153253028248][316 ms][DEBUG] targetPkg: running [2025-09-09 20:08:15][350153253028248][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 20:08:15][350153253028248][316 ms][DEBUG] START check_boot_completed [2025-09-09 20:08:15][350153253028248][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:08:15][350153253028248][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:08:15][350153253028248][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:08:16][350153253028248][425 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 20:08:16][350153253028248][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:08:16][350153253028248][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:08:16][350153253028248][565 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2965\nsuccessfulTxPacketsPerSecond: 0.4669926237671113\nretriedTxPackets: 640\nretriedTxPacketsPerSecond: 0.10127550876877113\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2711\nsuccessfulRxPacketsPerSecond: 0.41635486938272576\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:08:16][350153253028248][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:08:16][350153253028248][1018 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.520/320.520/320.520/0.000 ms\n [2025-09-09 20:08:16][350153253028248][1019 ms][DEBUG] check_internet: online [2025-09-09 20:08:16][350153253028248][1019 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:08:16][350153253028248][1019 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350153253028248\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6209\"}'\'' -e'"" [2025-09-09 20:08:16][350153253028248][1019 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:08:16][350153253028248][1019 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350153253028248\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6209\"}'\'' -e'"" [2025-09-09 20:08:20][350153253028248][5283 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bffd704a-252b-4855-92b3-d0d472b353b3","id":"QR_bffd704a-252b-4855-92b3-d0d472b353b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:08:21][350153253028248][5439 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-09-09 20:08:21][350153253028248][5439 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-09-09 20:08:21][350153253028248][5439 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:14:03][356080123632301][1 ms][INFO] === Request start === [2025-09-09 20:14:03][356080123632301][1 ms][DEBUG] START check_scloud [2025-09-09 20:14:03][356080123632301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:14:03][356080123632301][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 14335 26882 23786548 159400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:14:03][356080123632301][311 ms][DEBUG] targetPkg: running [2025-09-09 20:14:03][356080123632301][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 20:14:03][356080123632301][311 ms][DEBUG] START check_boot_completed [2025-09-09 20:14:03][356080123632301][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:14:03][356080123632301][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:14:03][356080123632301][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:14:03][356080123632301][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:14:03][356080123632301][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:14:03][356080123632301][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:14:03][356080123632301][530 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3047\nsuccessfulTxPacketsPerSecond: 0.713409488346195\nretriedTxPackets: 663\nretriedTxPacketsPerSecond: 0.20010266136539617\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2785\nsuccessfulRxPacketsPerSecond: 0.6438085626538833\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:14:03][356080123632301][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:14:05][356080123632301][1873 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.661/303.661/303.661/0.000 ms\n [2025-09-09 20:14:05][356080123632301][1873 ms][DEBUG] check_internet: online [2025-09-09 20:14:05][356080123632301][1873 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:14:05][356080123632301][1873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080123632301\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7687\"}'\'' -e'"" [2025-09-09 20:14:05][356080123632301][1874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:14:05][356080123632301][1874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080123632301\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7687\"}'\'' -e'"" [2025-09-09 20:14:09][356080123632301][5935 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b06af87-55ea-494f-98ac-9572c5e93295","id":"QR_9b06af87-55ea-494f-98ac-9572c5e93295","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:14:09][356080123632301][6091 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-09 20:14:09][356080123632301][6091 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-09 20:14:09][356080123632301][6091 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:14:11][356080123632301][0 ms][INFO] === Request start === [2025-09-09 20:14:11][356080123632301][1 ms][DEBUG] START check_scloud [2025-09-09 20:14:11][356080123632301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:14:12][356080123632301][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 14335 26882 23941308 166820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:14:12][356080123632301][281 ms][DEBUG] targetPkg: running [2025-09-09 20:14:12][356080123632301][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-09 20:14:12][356080123632301][281 ms][DEBUG] START check_boot_completed [2025-09-09 20:14:12][356080123632301][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:14:12][356080123632301][328 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:14:12][356080123632301][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:14:12][356080123632301][421 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 20:14:12][356080123632301][421 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 20:14:12][356080123632301][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:14:12][356080123632301][577 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3047\nsuccessfulTxPacketsPerSecond: 0.713409488346195\nretriedTxPackets: 663\nretriedTxPacketsPerSecond: 0.20010266136539617\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2785\nsuccessfulRxPacketsPerSecond: 0.6438085626538833\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:14:12][356080123632301][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:14:12][356080123632301][936 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.389/251.389/251.389/0.000 ms\n [2025-09-09 20:14:12][356080123632301][937 ms][DEBUG] check_internet: online [2025-09-09 20:14:12][356080123632301][937 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:14:12][356080123632301][937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080123632301\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3499\"}'\'' -e'"" [2025-09-09 20:14:12][356080123632301][937 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:14:12][356080123632301][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080123632301\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3499\"}'\'' -e'"" [2025-09-09 20:14:17][356080123632301][5998 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_022e7d43-d956-4ff1-be59-6451029b3fff","id":"QR_022e7d43-d956-4ff1-be59-6451029b3fff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:14:17][356080123632301][6154 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-09 20:14:17][356080123632301][6154 ms][DEBUG] END runCmdUntilRes#1 in 5218 ms [2025-09-09 20:14:17][356080123632301][6154 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:17:04][353600810232819][1 ms][INFO] === Request start === [2025-09-09 20:17:04][353600810232819][1 ms][DEBUG] START check_scloud [2025-09-09 20:17:04][353600810232819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:17:04][353600810232819][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 14335 26882 24039796 172832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:17:04][353600810232819][309 ms][DEBUG] targetPkg: running [2025-09-09 20:17:04][353600810232819][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 20:17:04][353600810232819][309 ms][DEBUG] START check_boot_completed [2025-09-09 20:17:04][353600810232819][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:17:04][353600810232819][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:17:04][353600810232819][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:17:04][353600810232819][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:17:04][353600810232819][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:17:04][353600810232819][387 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:17:04][353600810232819][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810232819\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9294\"}'\'' -e'"" [2025-09-09 20:17:04][353600810232819][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:17:04][353600810232819][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810232819\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9294\"}'\'' -e'"" [2025-09-09 20:17:10][353600810232819][6323 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d8ffd19-61ad-449d-ba2c-13e735baa59d","id":"QR_1d8ffd19-61ad-449d-ba2c-13e735baa59d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:17:11][353600810232819][6479 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=3343 [2025-09-09 20:17:11][353600810232819][6479 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-09 20:17:11][353600810232819][6479 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:17:14][353600810232819][0 ms][INFO] === Request start === [2025-09-09 20:17:14][353600810232819][1 ms][DEBUG] START check_scloud [2025-09-09 20:17:14][353600810232819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:17:14][353600810232819][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 14335 26882 24194684 183980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:17:14][353600810232819][323 ms][DEBUG] targetPkg: running [2025-09-09 20:17:14][353600810232819][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 20:17:14][353600810232819][323 ms][DEBUG] START check_boot_completed [2025-09-09 20:17:14][353600810232819][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:17:14][353600810232819][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:17:14][353600810232819][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:17:14][353600810232819][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:17:14][353600810232819][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:17:14][353600810232819][416 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:17:14][353600810232819][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810232819\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5802\"}'\'' -e'"" [2025-09-09 20:17:14][353600810232819][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:17:14][353600810232819][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810232819\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5802\"}'\'' -e'"" [2025-09-09 20:17:18][353600810232819][4290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68b57742-eb1c-42eb-8e3b-584f3de83308","id":"QR_68b57742-eb1c-42eb-8e3b-584f3de83308","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:17:18][353600810232819][4446 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 20:17:18][353600810232819][4446 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-09 20:17:18][353600810232819][4446 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:18:05][351736901959373][0 ms][INFO] === Request start === [2025-09-09 20:18:05][351736901959373][1 ms][DEBUG] START check_scloud [2025-09-09 20:18:05][351736901959373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:18:05][351736901959373][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 14335 26882 24307572 194236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:18:05][351736901959373][317 ms][DEBUG] targetPkg: running [2025-09-09 20:18:05][351736901959373][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 20:18:05][351736901959373][317 ms][DEBUG] START check_boot_completed [2025-09-09 20:18:05][351736901959373][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:18:05][351736901959373][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:18:05][351736901959373][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:18:05][351736901959373][412 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 20:18:05][351736901959373][412 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 20:18:05][351736901959373][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:18:05][351736901959373][536 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3224\nsuccessfulTxPacketsPerSecond: 0.5717737584918094\nretriedTxPackets: 710\nretriedTxPacketsPerSecond: 0.15182693022098895\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2941\nsuccessfulRxPacketsPerSecond: 0.5039361939249846\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:18:05][351736901959373][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:18:07][351736901959373][1973 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.918/299.918/299.918/0.000 ms\n [2025-09-09 20:18:07][351736901959373][1973 ms][DEBUG] check_internet: online [2025-09-09 20:18:07][351736901959373][1973 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:18:07][351736901959373][1973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901959373\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6929\"}'\'' -e'"" [2025-09-09 20:18:07][351736901959373][1973 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:18:07][351736901959373][1973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901959373\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6929\"}'\'' -e'"" [2025-09-09 20:18:12][351736901959373][7425 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7409acbb-5794-4d44-8ad4-00daf9cf1371","id":"QR_7409acbb-5794-4d44-8ad4-00daf9cf1371","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:18:12][351736901959373][7581 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-09 20:18:12][351736901959373][7581 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 20:18:12][351736901959373][7581 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:18:16][351736901959373][0 ms][INFO] === Request start === [2025-09-09 20:18:16][351736901959373][1 ms][DEBUG] START check_scloud [2025-09-09 20:18:16][351736901959373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:18:16][351736901959373][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 14335 26882 24437884 204152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:18:16][351736901959373][327 ms][DEBUG] targetPkg: running [2025-09-09 20:18:16][351736901959373][327 ms][DEBUG] END check_scloud in 327 ms [2025-09-09 20:18:16][351736901959373][327 ms][DEBUG] START check_boot_completed [2025-09-09 20:18:16][351736901959373][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:18:16][351736901959373][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:18:16][351736901959373][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:18:16][351736901959373][420 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:18:16][351736901959373][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:18:16][351736901959373][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:18:16][351736901959373][531 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3224\nsuccessfulTxPacketsPerSecond: 0.5717737584918094\nretriedTxPackets: 710\nretriedTxPacketsPerSecond: 0.15182693022098895\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2941\nsuccessfulRxPacketsPerSecond: 0.5039361939249846\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:18:16][351736901959373][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:18:17][351736901959373][889 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.622/245.622/245.622/0.000 ms\n [2025-09-09 20:18:17][351736901959373][889 ms][DEBUG] check_internet: online [2025-09-09 20:18:17][351736901959373][889 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:18:17][351736901959373][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901959373\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5391\"}'\'' -e'"" [2025-09-09 20:18:17][351736901959373][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:18:17][351736901959373][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901959373\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5391\"}'\'' -e'"" [2025-09-09 20:18:21][351736901959373][4685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3427cfb3-b6ae-4a44-ad06-5710afb93596","id":"QR_3427cfb3-b6ae-4a44-ad06-5710afb93596","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:18:21][351736901959373][4841 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-09 20:18:21][351736901959373][4841 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-09 20:18:21][351736901959373][4841 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:19:03][352600227297547][0 ms][INFO] === Request start === [2025-09-09 20:19:03][352600227297547][1 ms][DEBUG] START check_scloud [2025-09-09 20:19:03][352600227297547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:19:03][352600227297547][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 14335 26882 24561980 193152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:19:03][352600227297547][272 ms][DEBUG] targetPkg: running [2025-09-09 20:19:03][352600227297547][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-09 20:19:03][352600227297547][272 ms][DEBUG] START check_boot_completed [2025-09-09 20:19:03][352600227297547][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:19:03][352600227297547][303 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:19:03][352600227297547][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:19:03][352600227297547][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:19:03][352600227297547][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:19:03][352600227297547][351 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:19:03][352600227297547][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227297547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5731\"}'\'' -e'"" [2025-09-09 20:19:03][352600227297547][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:19:03][352600227297547][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227297547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5731\"}'\'' -e'"" [2025-09-09 20:19:07][352600227297547][4552 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2934c833-a280-431f-98e9-0eeff1d4ef5c","id":"QR_2934c833-a280-431f-98e9-0eeff1d4ef5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:19:07][352600227297547][4709 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-09-09 20:19:07][352600227297547][4709 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-09-09 20:19:07][352600227297547][4709 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:19:10][352600227297547][1 ms][INFO] === Request start === [2025-09-09 20:19:10][352600227297547][1 ms][DEBUG] START check_scloud [2025-09-09 20:19:10][352600227297547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:19:10][352600227297547][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 14335 26882 24712776 203900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:19:10][352600227297547][293 ms][DEBUG] targetPkg: running [2025-09-09 20:19:10][352600227297547][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 20:19:10][352600227297547][293 ms][DEBUG] START check_boot_completed [2025-09-09 20:19:10][352600227297547][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:19:10][352600227297547][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:19:10][352600227297547][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:19:10][352600227297547][387 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 20:19:10][352600227297547][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:19:10][352600227297547][387 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:19:10][352600227297547][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227297547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7824\"}'\'' -e'"" [2025-09-09 20:19:10][352600227297547][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:19:10][352600227297547][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227297547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7824\"}'\'' -e'"" [2025-09-09 20:19:14][352600227297547][4228 ms][DEBUG] proc_open done in 3841 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 20:19:14][352600227297547][4228 ms][DEBUG] END runCmdUntilRes#1 in 3841 ms [2025-09-09 20:19:14][352600227297547][4229 ms][WARN] Detected error: Process with pid 14335 either refused to load frida-agent, or terminated during injectionProcess with pid 14335 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 20:19:14][352600227297547][4229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 20:19:14][352600227297547][4510 ms][DEBUG] SU: done in 281 ms; outsystem 27084 26882 12831024 245032 ep_poll 0 S system_server\n [2025-09-09 20:19:14][352600227297547][4510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 20:19:14][352600227297547][4650 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 20:19:14][352600227297547][4650 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 20:19:14][352600227297547][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 20:19:15][352600227297547][4775 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 20:19:15][352600227297547][4775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 20:19:15][352600227297547][4947 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 20:19:17][352600227297547][6962 ms][DEBUG] START check_boot_completed [2025-09-09 20:19:17][352600227297547][6962 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:19:17][352600227297547][7009 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:19:17][352600227297547][7009 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:19:17][352600227297547][7056 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:19:17][352600227297547][7056 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:19:20][352600227297547][10070 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 20:19:20][352600227297547][10071 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227297547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7824\"}'\'' -e'"" [2025-09-09 20:19:24][352600227297547][14585 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fab46ffe-3557-425e-97f1-eb86bc57f989","id":"QR_fab46ffe-3557-425e-97f1-eb86bc57f989","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:19:24][352600227297547][14741 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-09 20:19:24][352600227297547][14741 ms][DEBUG] END runCmdUntilRes#2 in 4671 ms [2025-09-09 20:19:24][352600227297547][14741 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:22:04][352177392190815][1 ms][INFO] === Request start === [2025-09-09 20:22:04][352177392190815][1 ms][DEBUG] START check_scloud [2025-09-09 20:22:04][352177392190815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:22:05][352177392190815][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 16799 26882 23428680 126828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:22:05][352177392190815][304 ms][DEBUG] targetPkg: running [2025-09-09 20:22:05][352177392190815][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 20:22:05][352177392190815][304 ms][DEBUG] START check_boot_completed [2025-09-09 20:22:05][352177392190815][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:22:05][352177392190815][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:22:05][352177392190815][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:22:05][352177392190815][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:22:05][352177392190815][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:22:05][352177392190815][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:22:05][352177392190815][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3443\nsuccessfulTxPacketsPerSecond: 0.7272195970738543\nretriedTxPackets: 768\nretriedTxPacketsPerSecond: 0.19259697091453676\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3129\nsuccessfulRxPacketsPerSecond: 0.624279836757464\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:22:05][352177392190815][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:22:06][352177392190815][1928 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.721/300.721/300.721/0.000 ms\n [2025-09-09 20:22:06][352177392190815][1928 ms][DEBUG] check_internet: online [2025-09-09 20:22:06][352177392190815][1928 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:22:06][352177392190815][1929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177392190815\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2207\"}'\'' -e'"" [2025-09-09 20:22:06][352177392190815][1929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:22:06][352177392190815][1929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177392190815\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2207\"}'\'' -e'"" [2025-09-09 20:22:11][352177392190815][6927 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35bec4c3-ce7e-43c4-9308-10d88e4f99c1","id":"QR_35bec4c3-ce7e-43c4-9308-10d88e4f99c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:22:12][352177392190815][7083 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-09 20:22:12][352177392190815][7083 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-09-09 20:22:12][352177392190815][7083 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:22:15][352177392190815][0 ms][INFO] === Request start === [2025-09-09 20:22:15][352177392190815][1 ms][DEBUG] START check_scloud [2025-09-09 20:22:15][352177392190815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:22:15][352177392190815][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 16799 26882 23558864 137396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:22:15][352177392190815][294 ms][DEBUG] targetPkg: running [2025-09-09 20:22:15][352177392190815][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 20:22:15][352177392190815][294 ms][DEBUG] START check_boot_completed [2025-09-09 20:22:15][352177392190815][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:22:15][352177392190815][323 ms][DEBUG] ADB: done in 29 ms; out [2025-09-09 20:22:15][352177392190815][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:22:15][352177392190815][386 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 20:22:15][352177392190815][386 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 20:22:15][352177392190815][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:22:16][352177392190815][527 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3443\nsuccessfulTxPacketsPerSecond: 0.7272195970738543\nretriedTxPackets: 768\nretriedTxPacketsPerSecond: 0.19259697091453676\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3129\nsuccessfulRxPacketsPerSecond: 0.624279836757464\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:22:16][352177392190815][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:22:16][352177392190815][964 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=328 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 328.016/328.016/328.016/0.000 ms\n [2025-09-09 20:22:16][352177392190815][964 ms][DEBUG] check_internet: online [2025-09-09 20:22:16][352177392190815][965 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:22:16][352177392190815][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177392190815\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9295\"}'\'' -e'"" [2025-09-09 20:22:16][352177392190815][965 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:22:16][352177392190815][965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177392190815\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9295\"}'\'' -e'"" [2025-09-09 20:22:20][352177392190815][5010 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a947c088-15dc-4210-8f23-77e58378873f","id":"QR_a947c088-15dc-4210-8f23-77e58378873f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:22:20][352177392190815][5166 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-09-09 20:22:20][352177392190815][5166 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-09 20:22:20][352177392190815][5167 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:23:05][356101116110202][0 ms][INFO] === Request start === [2025-09-09 20:23:05][356101116110202][1 ms][DEBUG] START check_scloud [2025-09-09 20:23:05][356101116110202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:23:05][356101116110202][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 16799 26882 23702736 149380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:23:05][356101116110202][323 ms][DEBUG] targetPkg: running [2025-09-09 20:23:05][356101116110202][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 20:23:05][356101116110202][323 ms][DEBUG] START check_boot_completed [2025-09-09 20:23:05][356101116110202][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:23:05][356101116110202][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:23:05][356101116110202][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:23:05][356101116110202][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 20:23:05][356101116110202][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:23:05][356101116110202][432 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:23:05][356101116110202][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356101116110202\",\"model\":\"SM-N981U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6246\"}'\'' -e'"" [2025-09-09 20:23:05][356101116110202][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:23:05][356101116110202][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356101116110202\",\"model\":\"SM-N981U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6246\"}'\'' -e'"" [2025-09-09 20:23:10][356101116110202][5274 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_967980a2-0b75-4d59-9557-aadbd7367f93","id":"QR_967980a2-0b75-4d59-9557-aadbd7367f93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:23:10][356101116110202][5430 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 20:23:10][356101116110202][5430 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 20:23:10][356101116110202][5431 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:23:14][356101116110202][0 ms][INFO] === Request start === [2025-09-09 20:23:14][356101116110202][1 ms][DEBUG] START check_scloud [2025-09-09 20:23:14][356101116110202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:23:14][356101116110202][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 16799 26882 23849304 160428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:23:14][356101116110202][278 ms][DEBUG] targetPkg: running [2025-09-09 20:23:14][356101116110202][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-09 20:23:14][356101116110202][279 ms][DEBUG] START check_boot_completed [2025-09-09 20:23:14][356101116110202][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:23:14][356101116110202][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:23:14][356101116110202][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:23:14][356101116110202][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:23:14][356101116110202][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:23:14][356101116110202][372 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:23:14][356101116110202][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356101116110202\",\"model\":\"SM-N981U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6945\"}'\'' -e'"" [2025-09-09 20:23:14][356101116110202][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:23:14][356101116110202][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356101116110202\",\"model\":\"SM-N981U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6945\"}'\'' -e'"" [2025-09-09 20:23:17][356101116110202][3761 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3503ece9-000a-484f-aba2-1181db930747","id":"QR_3503ece9-000a-484f-aba2-1181db930747","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:23:17][356101116110202][3918 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-09 20:23:17][356101116110202][3918 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-09 20:23:17][356101116110202][3918 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:24:05][350792524513619][1 ms][INFO] === Request start === [2025-09-09 20:24:05][350792524513619][1 ms][DEBUG] START check_scloud [2025-09-09 20:24:05][350792524513619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:24:05][350792524513619][247 ms][DEBUG] SU: done in 245 ms; outu0_a118 16799 26882 23952924 171420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:24:05][350792524513619][247 ms][DEBUG] targetPkg: running [2025-09-09 20:24:05][350792524513619][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-09 20:24:05][350792524513619][247 ms][DEBUG] START check_boot_completed [2025-09-09 20:24:05][350792524513619][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:24:05][350792524513619][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:24:05][350792524513619][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:24:05][350792524513619][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:24:05][350792524513619][340 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:24:05][350792524513619][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:24:05][350792524513619][481 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3443\nsuccessfulTxPacketsPerSecond: 0.7272195970738543\nretriedTxPackets: 768\nretriedTxPacketsPerSecond: 0.19259697091453676\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3129\nsuccessfulRxPacketsPerSecond: 0.624279836757464\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:24:05][350792524513619][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:24:07][350792524513619][1887 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.993/299.993/299.993/0.000 ms\n [2025-09-09 20:24:07][350792524513619][1887 ms][DEBUG] check_internet: online [2025-09-09 20:24:07][350792524513619][1887 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:24:07][350792524513619][1887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792524513619\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1204\"}'\'' -e'"" [2025-09-09 20:24:07][350792524513619][1887 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:24:07][350792524513619][1887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792524513619\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1204\"}'\'' -e'"" [2025-09-09 20:24:11][350792524513619][6526 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b36eb05-fae2-4beb-820e-58bd977695ba","id":"QR_0b36eb05-fae2-4beb-820e-58bd977695ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:24:12][350792524513619][6682 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-09 20:24:12][350792524513619][6682 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-09 20:24:12][350792524513619][6682 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:28:04][350274356389947][1 ms][INFO] === Request start === [2025-09-09 20:28:04][350274356389947][1 ms][DEBUG] START check_scloud [2025-09-09 20:28:04][350274356389947][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:28:05][350274356389947][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 16799 26882 24070912 183672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:28:05][350274356389947][319 ms][DEBUG] targetPkg: running [2025-09-09 20:28:05][350274356389947][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 20:28:05][350274356389947][319 ms][DEBUG] START check_boot_completed [2025-09-09 20:28:05][350274356389947][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:28:05][350274356389947][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:28:05][350274356389947][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:28:05][350274356389947][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:28:05][350274356389947][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:28:05][350274356389947][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:28:05][350274356389947][553 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3622\nsuccessfulTxPacketsPerSecond: 0.5943013473043952\nretriedTxPackets: 811\nretriedTxPacketsPerSecond: 0.1427651281234022\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3292\nsuccessfulRxPacketsPerSecond: 0.5411794391654549\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:28:05][350274356389947][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:28:05][350274356389947][943 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.073/301.073/301.073/0.000 ms\n [2025-09-09 20:28:05][350274356389947][944 ms][DEBUG] check_internet: online [2025-09-09 20:28:05][350274356389947][944 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:28:05][350274356389947][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356389947\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6700\"}'\'' -e'"" [2025-09-09 20:28:05][350274356389947][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:28:05][350274356389947][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356389947\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6700\"}'\'' -e'"" [2025-09-09 20:28:11][350274356389947][6614 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5e12fbe-ada6-4e24-928b-81460fd1e0d3","id":"QR_c5e12fbe-ada6-4e24-928b-81460fd1e0d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:28:11][350274356389947][6770 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-09-09 20:28:11][350274356389947][6770 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-09-09 20:28:11][350274356389947][6770 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:28:14][350274356389947][0 ms][INFO] === Request start === [2025-09-09 20:28:14][350274356389947][1 ms][DEBUG] START check_scloud [2025-09-09 20:28:14][350274356389947][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:28:15][350274356389947][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 16799 26882 24209352 193324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:28:15][350274356389947][290 ms][DEBUG] targetPkg: running [2025-09-09 20:28:15][350274356389947][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-09 20:28:15][350274356389947][291 ms][DEBUG] START check_boot_completed [2025-09-09 20:28:15][350274356389947][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:28:15][350274356389947][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:28:15][350274356389947][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:28:15][350274356389947][415 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 20:28:15][350274356389947][415 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 20:28:15][350274356389947][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:28:15][350274356389947][587 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3622\nsuccessfulTxPacketsPerSecond: 0.5943013473043952\nretriedTxPackets: 811\nretriedTxPacketsPerSecond: 0.1427651281234022\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3292\nsuccessfulRxPacketsPerSecond: 0.5411794391654549\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:28:15][350274356389947][587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:28:15][350274356389947][1009 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.208/283.208/283.208/0.000 ms\n [2025-09-09 20:28:15][350274356389947][1009 ms][DEBUG] check_internet: online [2025-09-09 20:28:15][350274356389947][1009 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:28:15][350274356389947][1009 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356389947\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3426\"}'\'' -e'"" [2025-09-09 20:28:15][350274356389947][1009 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:28:15][350274356389947][1009 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274356389947\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3426\"}'\'' -e'"" [2025-09-09 20:28:20][350274356389947][5570 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26146583-fafb-408f-9894-cf7e4de86f95","id":"QR_26146583-fafb-408f-9894-cf7e4de86f95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:28:20][350274356389947][5726 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-09 20:28:20][350274356389947][5726 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-09 20:28:20][350274356389947][5726 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:28:23][352822350017274][0 ms][INFO] === Request start === [2025-09-09 20:28:23][352822350017274][1 ms][DEBUG] START check_scloud [2025-09-09 20:28:23][352822350017274][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:28:23][352822350017274][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 16799 26882 24349904 205420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:28:23][352822350017274][304 ms][DEBUG] targetPkg: running [2025-09-09 20:28:23][352822350017274][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-09 20:28:23][352822350017274][304 ms][DEBUG] START check_boot_completed [2025-09-09 20:28:23][352822350017274][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:28:23][352822350017274][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:28:23][352822350017274][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:28:24][352822350017274][399 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 20:28:24][352822350017274][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 20:28:24][352822350017274][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:28:24][352822350017274][523 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3622\nsuccessfulTxPacketsPerSecond: 0.5943013473043952\nretriedTxPackets: 811\nretriedTxPacketsPerSecond: 0.1427651281234022\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3292\nsuccessfulRxPacketsPerSecond: 0.5411794391654549\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:28:24][352822350017274][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:28:24][352822350017274][913 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.621/289.621/289.621/0.000 ms\n [2025-09-09 20:28:24][352822350017274][913 ms][DEBUG] check_internet: online [2025-09-09 20:28:24][352822350017274][913 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:28:24][352822350017274][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350017274\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2656\"}'\'' -e'"" [2025-09-09 20:28:24][352822350017274][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:28:24][352822350017274][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350017274\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2656\"}'\'' -e'"" [2025-09-09 20:28:28][352822350017274][5162 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68cdcf49-f42d-4060-b504-e76790afbaef","id":"QR_68cdcf49-f42d-4060-b504-e76790afbaef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:28:28][352822350017274][5318 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-09 20:28:28][352822350017274][5319 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-09 20:28:28][352822350017274][5319 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:28:32][352822350017274][0 ms][INFO] === Request start === [2025-09-09 20:28:32][352822350017274][1 ms][DEBUG] START check_scloud [2025-09-09 20:28:32][352822350017274][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:28:32][352822350017274][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 16799 26882 24459572 216044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:28:32][352822350017274][299 ms][DEBUG] targetPkg: running [2025-09-09 20:28:32][352822350017274][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 20:28:32][352822350017274][299 ms][DEBUG] START check_boot_completed [2025-09-09 20:28:32][352822350017274][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:28:32][352822350017274][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:28:32][352822350017274][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:28:32][352822350017274][408 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 20:28:32][352822350017274][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:28:32][352822350017274][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:28:32][352822350017274][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3622\nsuccessfulTxPacketsPerSecond: 0.5943013473043952\nretriedTxPackets: 811\nretriedTxPacketsPerSecond: 0.1427651281234022\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3292\nsuccessfulRxPacketsPerSecond: 0.5411794391654549\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:28:32][352822350017274][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:28:33][352822350017274][924 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.968/295.968/295.968/0.000 ms\n [2025-09-09 20:28:33][352822350017274][924 ms][DEBUG] check_internet: online [2025-09-09 20:28:33][352822350017274][924 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:28:33][352822350017274][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350017274\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2057\"}'\'' -e'"" [2025-09-09 20:28:33][352822350017274][924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:28:33][352822350017274][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350017274\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2057\"}'\'' -e'"" [2025-09-09 20:28:36][352822350017274][4470 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecae4903-183f-4acc-8a25-195e063bfcf5","id":"QR_ecae4903-183f-4acc-8a25-195e063bfcf5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:28:37][352822350017274][4626 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-09-09 20:28:37][352822350017274][4626 ms][DEBUG] END runCmdUntilRes#1 in 3701 ms [2025-09-09 20:28:37][352822350017274][4626 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:30:04][354747954458848][0 ms][INFO] === Request start === [2025-09-09 20:30:04][354747954458848][0 ms][DEBUG] START check_scloud [2025-09-09 20:30:04][354747954458848][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:30:04][354747954458848][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 16799 26882 24596816 228056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:30:04][354747954458848][291 ms][DEBUG] targetPkg: running [2025-09-09 20:30:04][354747954458848][291 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 20:30:04][354747954458848][291 ms][DEBUG] START check_boot_completed [2025-09-09 20:30:04][354747954458848][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:30:04][354747954458848][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:30:04][354747954458848][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:30:04][354747954458848][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 20:30:04][354747954458848][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:30:04][354747954458848][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:30:04][354747954458848][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3774\nsuccessfulTxPacketsPerSecond: 0.5050538613361333\nretriedTxPackets: 855\nretriedTxPacketsPerSecond: 0.1461998019657228\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3424\nsuccessfulRxPacketsPerSecond: 0.4385994058971684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:30:04][354747954458848][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:30:06][354747954458848][2056 ms][DEBUG] SU: done in 1546 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.494/299.494/299.494/0.000 ms\n [2025-09-09 20:30:06][354747954458848][2056 ms][DEBUG] check_internet: online [2025-09-09 20:30:06][354747954458848][2056 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:30:06][354747954458848][2056 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954458848\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3295\"}'\'' -e'"" [2025-09-09 20:30:06][354747954458848][2056 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:30:06][354747954458848][2056 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954458848\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3295\"}'\'' -e'"" [2025-09-09 20:30:10][354747954458848][6602 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3a7fc0b-3645-4a59-acb4-3f43066c9ac5","id":"QR_e3a7fc0b-3645-4a59-acb4-3f43066c9ac5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:30:10][354747954458848][6758 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-09 20:30:10][354747954458848][6758 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-09 20:30:10][354747954458848][6758 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:30:13][354747954458848][0 ms][INFO] === Request start === [2025-09-09 20:30:13][354747954458848][0 ms][DEBUG] START check_scloud [2025-09-09 20:30:13][354747954458848][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:30:13][354747954458848][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 16799 26882 24768088 238988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:30:13][354747954458848][261 ms][DEBUG] targetPkg: running [2025-09-09 20:30:13][354747954458848][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-09 20:30:13][354747954458848][261 ms][DEBUG] START check_boot_completed [2025-09-09 20:30:13][354747954458848][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:30:13][354747954458848][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:30:13][354747954458848][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:30:13][354747954458848][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:30:13][354747954458848][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:30:13][354747954458848][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:30:13][354747954458848][479 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3774\nsuccessfulTxPacketsPerSecond: 0.5050538613361333\nretriedTxPackets: 855\nretriedTxPacketsPerSecond: 0.1461998019657228\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3424\nsuccessfulRxPacketsPerSecond: 0.4385994058971684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:30:13][354747954458848][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:30:14][354747954458848][901 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.755/316.755/316.755/0.000 ms\n [2025-09-09 20:30:14][354747954458848][901 ms][DEBUG] check_internet: online [2025-09-09 20:30:14][354747954458848][901 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:30:14][354747954458848][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954458848\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9154\"}'\'' -e'"" [2025-09-09 20:30:14][354747954458848][901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:30:14][354747954458848][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954458848\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9154\"}'\'' -e'"" [2025-09-09 20:30:18][354747954458848][4822 ms][DEBUG] proc_open done in 3920 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 20:30:18][354747954458848][4822 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-09 20:30:18][354747954458848][4822 ms][WARN] Detected error: Process with pid 16799 either refused to load frida-agent, or terminated during injectionProcess with pid 16799 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 20:30:18][354747954458848][4822 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 20:30:18][354747954458848][5119 ms][DEBUG] SU: done in 297 ms; outsystem 27084 26882 12760548 221680 ep_poll 0 S system_server\n [2025-09-09 20:30:18][354747954458848][5119 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 20:30:18][354747954458848][5259 ms][DEBUG] SU: done in 141 ms; out [2025-09-09 20:30:18][354747954458848][5259 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 20:30:18][354747954458848][5259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 20:30:18][354747954458848][5384 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 20:30:18][354747954458848][5384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 20:30:18][354747954458848][5556 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 20:30:20][354747954458848][7571 ms][DEBUG] START check_boot_completed [2025-09-09 20:30:20][354747954458848][7571 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:30:20][354747954458848][7618 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:30:20][354747954458848][7618 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:30:20][354747954458848][7665 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:30:20][354747954458848][7665 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:30:23][354747954458848][10680 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 20:30:23][354747954458848][10680 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954458848\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9154\"}'\'' -e'"" [2025-09-09 20:30:28][354747954458848][15366 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9df61579-f7d7-489c-89f9-64fd4f1a1233","id":"QR_9df61579-f7d7-489c-89f9-64fd4f1a1233","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:30:28][354747954458848][15522 ms][DEBUG] proc_open done in 4843 ms; code=255; res.len=3343 [2025-09-09 20:30:28][354747954458848][15522 ms][DEBUG] END runCmdUntilRes#2 in 4843 ms [2025-09-09 20:30:28][354747954458848][15523 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:32:04][350962633849150][0 ms][INFO] === Request start === [2025-09-09 20:32:04][350962633849150][1 ms][DEBUG] START check_scloud [2025-09-09 20:32:04][350962633849150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:32:05][350962633849150][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18401 26882 23431788 126808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:32:05][350962633849150][309 ms][DEBUG] targetPkg: running [2025-09-09 20:32:05][350962633849150][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 20:32:05][350962633849150][309 ms][DEBUG] START check_boot_completed [2025-09-09 20:32:05][350962633849150][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:32:05][350962633849150][354 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 20:32:05][350962633849150][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:32:05][350962633849150][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:32:05][350962633849150][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 20:32:05][350962633849150][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:32:05][350962633849150][511 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3774\nsuccessfulTxPacketsPerSecond: 0.5050538613361333\nretriedTxPackets: 855\nretriedTxPacketsPerSecond: 0.1461998019657228\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3424\nsuccessfulRxPacketsPerSecond: 0.4385994058971684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:32:05][350962633849150][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:32:06][350962633849150][1901 ms][DEBUG] SU: done in 1389 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.620/301.620/301.620/0.000 ms\n [2025-09-09 20:32:06][350962633849150][1901 ms][DEBUG] check_internet: online [2025-09-09 20:32:06][350962633849150][1901 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:32:06][350962633849150][1901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962633849150\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3901\"}'\'' -e'"" [2025-09-09 20:32:06][350962633849150][1901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:32:06][350962633849150][1901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962633849150\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3901\"}'\'' -e'"" [2025-09-09 20:32:11][350962633849150][6946 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74fe053d-e129-447b-93a5-e284d19e6d1b","id":"QR_74fe053d-e129-447b-93a5-e284d19e6d1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:32:11][350962633849150][7102 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 20:32:11][350962633849150][7102 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 20:32:11][350962633849150][7103 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:32:15][350962633849150][1 ms][INFO] === Request start === [2025-09-09 20:32:15][350962633849150][1 ms][DEBUG] START check_scloud [2025-09-09 20:32:15][350962633849150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:32:15][350962633849150][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18401 26882 23573356 137512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:32:15][350962633849150][304 ms][DEBUG] targetPkg: running [2025-09-09 20:32:15][350962633849150][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 20:32:15][350962633849150][304 ms][DEBUG] START check_boot_completed [2025-09-09 20:32:15][350962633849150][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:32:15][350962633849150][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:32:15][350962633849150][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:32:15][350962633849150][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:32:15][350962633849150][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:32:15][350962633849150][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:32:15][350962633849150][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3774\nsuccessfulTxPacketsPerSecond: 0.5050538613361333\nretriedTxPackets: 855\nretriedTxPacketsPerSecond: 0.1461998019657228\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3424\nsuccessfulRxPacketsPerSecond: 0.4385994058971684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:32:15][350962633849150][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:32:16][350962633849150][944 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=339 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 339.947/339.947/339.947/0.000 ms\n [2025-09-09 20:32:16][350962633849150][944 ms][DEBUG] check_internet: online [2025-09-09 20:32:16][350962633849150][944 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:32:16][350962633849150][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962633849150\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7046\"}'\'' -e'"" [2025-09-09 20:32:16][350962633849150][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:32:16][350962633849150][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962633849150\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7046\"}'\'' -e'"" [2025-09-09 20:32:20][350962633849150][4787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34f91786-f195-4c75-81f9-3872bb0ff053","id":"QR_34f91786-f195-4c75-81f9-3872bb0ff053","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:32:20][350962633849150][4943 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-09 20:32:20][350962633849150][4943 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-09 20:32:20][350962633849150][4944 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:35:03][353255360067246][1 ms][INFO] === Request start === [2025-09-09 20:35:03][353255360067246][1 ms][DEBUG] START check_scloud [2025-09-09 20:35:03][353255360067246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:35:03][353255360067246][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 18401 26882 23690208 149884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:35:03][353255360067246][300 ms][DEBUG] targetPkg: running [2025-09-09 20:35:03][353255360067246][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 20:35:03][353255360067246][300 ms][DEBUG] START check_boot_completed [2025-09-09 20:35:03][353255360067246][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:35:03][353255360067246][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:35:03][353255360067246][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:35:03][353255360067246][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:35:03][353255360067246][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:35:03][353255360067246][378 ms][DEBUG] rawBody.length=1149 [2025-09-09 20:35:03][353255360067246][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360067246\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-09-09 20:35:03][353255360067246][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:35:03][353255360067246][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360067246\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-09-09 20:35:08][353255360067246][5127 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cab76f3-73a3-43fc-be38-7ccb9e45f075","id":"QR_9cab76f3-73a3-43fc-be38-7ccb9e45f075","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:35:08][353255360067246][5283 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-09 20:35:08][353255360067246][5283 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-09 20:35:08][353255360067246][5283 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:35:10][353255360067246][0 ms][INFO] === Request start === [2025-09-09 20:35:10][353255360067246][1 ms][DEBUG] START check_scloud [2025-09-09 20:35:10][353255360067246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:35:11][353255360067246][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18401 26882 23821544 161024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:35:11][353255360067246][306 ms][DEBUG] targetPkg: running [2025-09-09 20:35:11][353255360067246][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-09 20:35:11][353255360067246][306 ms][DEBUG] START check_boot_completed [2025-09-09 20:35:11][353255360067246][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:35:11][353255360067246][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:35:11][353255360067246][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:35:11][353255360067246][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:35:11][353255360067246][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:35:11][353255360067246][384 ms][DEBUG] rawBody.length=1159 [2025-09-09 20:35:11][353255360067246][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360067246\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7930\"}'\'' -e'"" [2025-09-09 20:35:11][353255360067246][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:35:11][353255360067246][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360067246\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7930\"}'\'' -e'"" [2025-09-09 20:35:15][353255360067246][4929 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fc9befd-5bdb-4ea6-a606-6992dce4b417","id":"QR_8fc9befd-5bdb-4ea6-a606-6992dce4b417","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:35:15][353255360067246][5085 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-09 20:35:15][353255360067246][5085 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-09 20:35:15][353255360067246][5086 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:41:04][352686590517181][1 ms][INFO] === Request start === [2025-09-09 20:41:04][352686590517181][1 ms][DEBUG] START check_scloud [2025-09-09 20:41:04][352686590517181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:41:04][352686590517181][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18401 26882 23916840 172296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:41:04][352686590517181][304 ms][DEBUG] targetPkg: running [2025-09-09 20:41:04][352686590517181][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 20:41:04][352686590517181][304 ms][DEBUG] START check_boot_completed [2025-09-09 20:41:04][352686590517181][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:41:04][352686590517181][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:41:04][352686590517181][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:41:04][352686590517181][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:41:04][352686590517181][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:41:04][352686590517181][382 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:41:04][352686590517181][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686590517181\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6194\"}'\'' -e'"" [2025-09-09 20:41:04][352686590517181][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:41:04][352686590517181][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686590517181\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6194\"}'\'' -e'"" [2025-09-09 20:41:11][352686590517181][6459 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31b79289-8c1c-4015-9bca-18fe82d8675c","id":"QR_31b79289-8c1c-4015-9bca-18fe82d8675c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:41:11][352686590517181][6615 ms][DEBUG] proc_open done in 6233 ms; code=255; res.len=3343 [2025-09-09 20:41:11][352686590517181][6615 ms][DEBUG] END runCmdUntilRes#1 in 6233 ms [2025-09-09 20:41:11][352686590517181][6615 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:47:05][353248119781852][1 ms][INFO] === Request start === [2025-09-09 20:47:05][353248119781852][1 ms][DEBUG] START check_scloud [2025-09-09 20:47:05][353248119781852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:47:06][353248119781852][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 18401 26882 24093288 185236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:47:06][353248119781852][316 ms][DEBUG] targetPkg: running [2025-09-09 20:47:06][353248119781852][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 20:47:06][353248119781852][316 ms][DEBUG] START check_boot_completed [2025-09-09 20:47:06][353248119781852][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:47:06][353248119781852][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:47:06][353248119781852][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:47:06][353248119781852][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 20:47:06][353248119781852][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:47:06][353248119781852][425 ms][DEBUG] rawBody.length=1170 [2025-09-09 20:47:06][353248119781852][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353248119781852\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TY4012W5T\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8238\"}'\'' -e'"" [2025-09-09 20:47:06][353248119781852][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:47:06][353248119781852][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353248119781852\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TY4012W5T\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8238\"}'\'' -e'"" [2025-09-09 20:47:12][353248119781852][6814 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbad727a-141e-4f94-8c49-13f90a997ad7","id":"QR_fbad727a-141e-4f94-8c49-13f90a997ad7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:47:12][353248119781852][6970 ms][DEBUG] proc_open done in 6544 ms; code=255; res.len=3343 [2025-09-09 20:47:12][353248119781852][6970 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-09-09 20:47:12][353248119781852][6970 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:49:04][353548750885411][0 ms][INFO] === Request start === [2025-09-09 20:49:04][353548750885411][1 ms][DEBUG] START check_scloud [2025-09-09 20:49:04][353548750885411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:49:04][353548750885411][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 18401 26882 24207052 196264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:49:04][353548750885411][303 ms][DEBUG] targetPkg: running [2025-09-09 20:49:04][353548750885411][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 20:49:04][353548750885411][303 ms][DEBUG] START check_boot_completed [2025-09-09 20:49:04][353548750885411][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:49:05][353548750885411][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:49:05][353548750885411][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:49:05][353548750885411][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:49:05][353548750885411][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:49:05][353548750885411][396 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:49:05][353548750885411][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548750885411\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9974\"}'\'' -e'"" [2025-09-09 20:49:05][353548750885411][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:49:05][353548750885411][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548750885411\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9974\"}'\'' -e'"" [2025-09-09 20:49:10][353548750885411][6238 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7857ac32-4a95-4902-abbd-6ec3d857be51","id":"QR_7857ac32-4a95-4902-abbd-6ec3d857be51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:49:11][353548750885411][6395 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-09 20:49:11][353548750885411][6395 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-09 20:49:11][353548750885411][6395 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:49:14][353548750885411][1 ms][INFO] === Request start === [2025-09-09 20:49:14][353548750885411][1 ms][DEBUG] START check_scloud [2025-09-09 20:49:14][353548750885411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:49:14][353548750885411][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 18401 26882 24350996 206884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:49:14][353548750885411][252 ms][DEBUG] targetPkg: running [2025-09-09 20:49:14][353548750885411][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-09 20:49:14][353548750885411][253 ms][DEBUG] START check_boot_completed [2025-09-09 20:49:14][353548750885411][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:49:14][353548750885411][298 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:49:14][353548750885411][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:49:14][353548750885411][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:49:14][353548750885411][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:49:14][353548750885411][345 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:49:14][353548750885411][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548750885411\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9061\"}'\'' -e'"" [2025-09-09 20:49:14][353548750885411][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:49:14][353548750885411][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548750885411\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9061\"}'\'' -e'"" [2025-09-09 20:49:18][353548750885411][4235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31e9e853-7337-4f0d-b79c-e7c74013d46e","id":"QR_31e9e853-7337-4f0d-b79c-e7c74013d46e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:49:18][353548750885411][4391 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-09 20:49:18][353548750885411][4391 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-09 20:49:18][353548750885411][4391 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:52:04][350179383654264][1 ms][INFO] === Request start === [2025-09-09 20:52:04][350179383654264][1 ms][DEBUG] START check_scloud [2025-09-09 20:52:04][350179383654264][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:52:05][350179383654264][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 18401 26882 24475092 218616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:52:05][350179383654264][310 ms][DEBUG] targetPkg: running [2025-09-09 20:52:05][350179383654264][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 20:52:05][350179383654264][310 ms][DEBUG] START check_boot_completed [2025-09-09 20:52:05][350179383654264][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:52:05][350179383654264][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:52:05][350179383654264][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:52:05][350179383654264][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:52:05][350179383654264][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 20:52:05][350179383654264][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:52:05][350179383654264][497 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4218\nsuccessfulTxPacketsPerSecond: 0.4074392792539646\nretriedTxPackets: 963\nretriedTxPacketsPerSecond: 0.08429778191461337\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3826\nsuccessfulRxPacketsPerSecond: 0.3863648337753113\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:52:05][350179383654264][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:52:06][350179383654264][1919 ms][DEBUG] SU: done in 1422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.830/299.830/299.830/0.000 ms\n [2025-09-09 20:52:06][350179383654264][1919 ms][DEBUG] check_internet: online [2025-09-09 20:52:06][350179383654264][1919 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:52:06][350179383654264][1919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179383654264\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9953\"}'\'' -e'"" [2025-09-09 20:52:06][350179383654264][1919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:52:06][350179383654264][1919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179383654264\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9953\"}'\'' -e'"" [2025-09-09 20:52:11][350179383654264][6761 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9beac144-03a1-4a55-9b96-07a64aefe310","id":"QR_9beac144-03a1-4a55-9b96-07a64aefe310","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:52:11][350179383654264][6918 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-09 20:52:11][350179383654264][6918 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-09 20:52:11][350179383654264][6918 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:52:15][350179383654264][0 ms][INFO] === Request start === [2025-09-09 20:52:15][350179383654264][1 ms][DEBUG] START check_scloud [2025-09-09 20:52:15][350179383654264][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:52:15][350179383654264][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18401 26882 24613468 229424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:52:15][350179383654264][304 ms][DEBUG] targetPkg: running [2025-09-09 20:52:15][350179383654264][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 20:52:15][350179383654264][304 ms][DEBUG] START check_boot_completed [2025-09-09 20:52:15][350179383654264][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:52:15][350179383654264][349 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 20:52:15][350179383654264][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:52:15][350179383654264][443 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 20:52:15][350179383654264][443 ms][DEBUG] END check_boot_completed in 139 ms [2025-09-09 20:52:15][350179383654264][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:52:15][350179383654264][583 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4218\nsuccessfulTxPacketsPerSecond: 0.4074392792539646\nretriedTxPackets: 963\nretriedTxPacketsPerSecond: 0.08429778191461337\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3826\nsuccessfulRxPacketsPerSecond: 0.3863648337753113\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:52:15][350179383654264][584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:52:16][350179383654264][911 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.034/219.034/219.034/0.000 ms\n [2025-09-09 20:52:16][350179383654264][911 ms][DEBUG] check_internet: online [2025-09-09 20:52:16][350179383654264][911 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:52:16][350179383654264][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179383654264\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3458\"}'\'' -e'"" [2025-09-09 20:52:16][350179383654264][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:52:16][350179383654264][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179383654264\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3458\"}'\'' -e'"" [2025-09-09 20:52:20][350179383654264][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9df7fb6-0888-411a-bc0b-edd973195d39","id":"QR_e9df7fb6-0888-411a-bc0b-edd973195d39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:52:20][350179383654264][4879 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-09-09 20:52:20][350179383654264][4879 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-09 20:52:20][350179383654264][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:52:23][354106243105894][0 ms][INFO] === Request start === [2025-09-09 20:52:23][354106243105894][0 ms][DEBUG] START check_scloud [2025-09-09 20:52:23][354106243105894][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:52:23][354106243105894][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18401 26882 24782568 240092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:52:23][354106243105894][311 ms][DEBUG] targetPkg: running [2025-09-09 20:52:23][354106243105894][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 20:52:23][354106243105894][311 ms][DEBUG] START check_boot_completed [2025-09-09 20:52:23][354106243105894][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:52:23][354106243105894][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:52:23][354106243105894][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:52:23][354106243105894][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 20:52:23][354106243105894][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:52:23][354106243105894][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:52:23][354106243105894][545 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4218\nsuccessfulTxPacketsPerSecond: 0.4074392792539646\nretriedTxPackets: 963\nretriedTxPacketsPerSecond: 0.08429778191461337\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3826\nsuccessfulRxPacketsPerSecond: 0.3863648337753113\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:52:23][354106243105894][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:52:24][354106243105894][982 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=343 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 343.668/343.668/343.668/0.000 ms\n [2025-09-09 20:52:24][354106243105894][982 ms][DEBUG] check_internet: online [2025-09-09 20:52:24][354106243105894][982 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:52:24][354106243105894][982 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106243105894\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-09-09 20:52:24][354106243105894][982 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:52:24][354106243105894][982 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106243105894\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-09-09 20:52:28][354106243105894][4810 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 20:52:28][354106243105894][4810 ms][DEBUG] END runCmdUntilRes#1 in 3828 ms [2025-09-09 20:52:28][354106243105894][4810 ms][WARN] Detected error: Process with pid 18401 either refused to load frida-agent, or terminated during injectionProcess with pid 18401 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 20:52:28][354106243105894][4810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 20:52:28][354106243105894][5075 ms][DEBUG] SU: done in 265 ms; outsystem 27084 26882 12453604 173780 ep_poll 0 S system_server\n [2025-09-09 20:52:28][354106243105894][5075 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 20:52:28][354106243105894][5216 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 20:52:28][354106243105894][5216 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 20:52:28][354106243105894][5216 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 20:52:28][354106243105894][5327 ms][DEBUG] SU: done in 111 ms; out [2025-09-09 20:52:28][354106243105894][5327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 20:52:28][354106243105894][5513 ms][DEBUG] SU: done in 185 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 20:52:30][354106243105894][7528 ms][DEBUG] START check_boot_completed [2025-09-09 20:52:30][354106243105894][7528 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:52:30][354106243105894][7575 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:52:30][354106243105894][7575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:52:30][354106243105894][7621 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:52:30][354106243105894][7621 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:52:33][354106243105894][10636 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 20:52:33][354106243105894][10636 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106243105894\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-09-09 20:52:38][354106243105894][15557 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9ed7510-3d6c-4ee0-b4e9-de8cf041a7e9","id":"QR_d9ed7510-3d6c-4ee0-b4e9-de8cf041a7e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:52:38][354106243105894][15713 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-09 20:52:38][354106243105894][15713 ms][DEBUG] END runCmdUntilRes#2 in 5077 ms [2025-09-09 20:52:38][354106243105894][15713 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:52:42][354106243105894][0 ms][INFO] === Request start === [2025-09-09 20:52:42][354106243105894][1 ms][DEBUG] START check_scloud [2025-09-09 20:52:42][354106243105894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:52:42][354106243105894][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 20577 26882 23420832 125240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:52:42][354106243105894][248 ms][DEBUG] targetPkg: running [2025-09-09 20:52:42][354106243105894][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-09 20:52:42][354106243105894][248 ms][DEBUG] START check_boot_completed [2025-09-09 20:52:42][354106243105894][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:52:42][354106243105894][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:52:42][354106243105894][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:52:42][354106243105894][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:52:42][354106243105894][341 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 20:52:42][354106243105894][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:52:42][354106243105894][435 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4371\nsuccessfulTxPacketsPerSecond: 0.5081975925384635\nretriedTxPackets: 1001\nretriedTxPacketsPerSecond: 0.12621900991151383\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3963\nsuccessfulRxPacketsPerSecond: 0.4550527462599314\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:52:42][354106243105894][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:52:43][354106243105894][779 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.395/254.395/254.395/0.000 ms\n [2025-09-09 20:52:43][354106243105894][779 ms][DEBUG] check_internet: online [2025-09-09 20:52:43][354106243105894][779 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:52:43][354106243105894][779 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106243105894\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5433\"}'\'' -e'"" [2025-09-09 20:52:43][354106243105894][779 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:52:43][354106243105894][779 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106243105894\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5433\"}'\'' -e'"" [2025-09-09 20:52:47][354106243105894][4747 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c882f100-c406-4d13-9806-77ceb9903de0","id":"QR_c882f100-c406-4d13-9806-77ceb9903de0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:52:47][354106243105894][4903 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-09-09 20:52:47][354106243105894][4903 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-09 20:52:47][354106243105894][4903 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:53:04][352826830781706][0 ms][INFO] === Request start === [2025-09-09 20:53:04][352826830781706][1 ms][DEBUG] START check_scloud [2025-09-09 20:53:04][352826830781706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:53:04][352826830781706][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20577 26882 23469820 139156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:53:04][352826830781706][299 ms][DEBUG] targetPkg: running [2025-09-09 20:53:04][352826830781706][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-09 20:53:04][352826830781706][299 ms][DEBUG] START check_boot_completed [2025-09-09 20:53:04][352826830781706][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:53:04][352826830781706][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:53:04][352826830781706][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:53:04][352826830781706][394 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 20:53:04][352826830781706][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 20:53:04][352826830781706][394 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:53:04][352826830781706][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826830781706\",\"model\":\"SM-M536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6109\"}'\'' -e'"" [2025-09-09 20:53:04][352826830781706][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:53:04][352826830781706][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826830781706\",\"model\":\"SM-M536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6109\"}'\'' -e'"" [2025-09-09 20:53:11][352826830781706][6844 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bcd260ec-ed35-4c58-8376-e2fc378f5527","id":"QR_bcd260ec-ed35-4c58-8376-e2fc378f5527","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:53:11][352826830781706][7000 ms][DEBUG] proc_open done in 6606 ms; code=255; res.len=3343 [2025-09-09 20:53:11][352826830781706][7000 ms][DEBUG] END runCmdUntilRes#1 in 6606 ms [2025-09-09 20:53:11][352826830781706][7000 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:53:15][352826830781706][0 ms][INFO] === Request start === [2025-09-09 20:53:15][352826830781706][1 ms][DEBUG] START check_scloud [2025-09-09 20:53:15][352826830781706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:53:15][352826830781706][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 20577 26882 23636932 150796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:53:15][352826830781706][279 ms][DEBUG] targetPkg: running [2025-09-09 20:53:15][352826830781706][279 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 20:53:15][352826830781706][279 ms][DEBUG] START check_boot_completed [2025-09-09 20:53:15][352826830781706][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:53:15][352826830781706][326 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:53:15][352826830781706][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:53:15][352826830781706][388 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 20:53:15][352826830781706][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:53:15][352826830781706][388 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:53:15][352826830781706][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826830781706\",\"model\":\"SM-M536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3087\"}'\'' -e'"" [2025-09-09 20:53:15][352826830781706][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:53:15][352826830781706][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826830781706\",\"model\":\"SM-M536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3087\"}'\'' -e'"" [2025-09-09 20:53:18][352826830781706][3888 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88a7fa07-163d-42f5-abc5-f5ef6823e7ea","id":"QR_88a7fa07-163d-42f5-abc5-f5ef6823e7ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:53:19][352826830781706][4044 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-09 20:53:19][352826830781706][4044 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-09 20:53:19][352826830781706][4044 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:53:22][358615312065868][0 ms][INFO] === Request start === [2025-09-09 20:53:22][358615312065868][1 ms][DEBUG] START check_scloud [2025-09-09 20:53:22][358615312065868][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:53:22][358615312065868][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20577 26882 23758924 161704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:53:22][358615312065868][310 ms][DEBUG] targetPkg: running [2025-09-09 20:53:22][358615312065868][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 20:53:22][358615312065868][310 ms][DEBUG] START check_boot_completed [2025-09-09 20:53:22][358615312065868][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:53:22][358615312065868][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 20:53:22][358615312065868][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:53:22][358615312065868][390 ms][DEBUG] SU: done in 49 ms; out [2025-09-09 20:53:22][358615312065868][390 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-09 20:53:22][358615312065868][390 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:53:22][358615312065868][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615312065868\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3346\"}'\'' -e'"" [2025-09-09 20:53:22][358615312065868][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:53:22][358615312065868][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615312065868\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3346\"}'\'' -e'"" [2025-09-09 20:53:27][358615312065868][5808 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_edf6cae1-a4c7-4f80-8c6d-bfdbb2b9292d","id":"QR_edf6cae1-a4c7-4f80-8c6d-bfdbb2b9292d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:53:28][358615312065868][5964 ms][DEBUG] proc_open done in 5574 ms; code=255; res.len=3343 [2025-09-09 20:53:28][358615312065868][5965 ms][DEBUG] END runCmdUntilRes#1 in 5574 ms [2025-09-09 20:53:28][358615312065868][5965 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:53:31][358615312065868][0 ms][INFO] === Request start === [2025-09-09 20:53:31][358615312065868][1 ms][DEBUG] START check_scloud [2025-09-09 20:53:31][358615312065868][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:53:31][358615312065868][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 20577 26882 23876272 172744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:53:31][358615312065868][318 ms][DEBUG] targetPkg: running [2025-09-09 20:53:31][358615312065868][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-09 20:53:31][358615312065868][319 ms][DEBUG] START check_boot_completed [2025-09-09 20:53:31][358615312065868][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:53:32][358615312065868][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:53:32][358615312065868][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:53:32][358615312065868][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 20:53:32][358615312065868][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:53:32][358615312065868][428 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:53:32][358615312065868][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615312065868\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9007\"}'\'' -e'"" [2025-09-09 20:53:32][358615312065868][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:53:32][358615312065868][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615312065868\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9007\"}'\'' -e'"" [2025-09-09 20:53:36][358615312065868][4864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81f091fa-8976-42c4-923b-fc2b1943b9a6","id":"QR_81f091fa-8976-42c4-923b-fc2b1943b9a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:53:36][358615312065868][5020 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-09 20:53:36][358615312065868][5020 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-09-09 20:53:36][358615312065868][5020 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:56:04][355835402761472][0 ms][INFO] === Request start === [2025-09-09 20:56:04][355835402761472][0 ms][DEBUG] START check_scloud [2025-09-09 20:56:04][355835402761472][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:56:04][355835402761472][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 20577 26882 23970432 183504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:56:04][355835402761472][307 ms][DEBUG] targetPkg: running [2025-09-09 20:56:04][355835402761472][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 20:56:04][355835402761472][307 ms][DEBUG] START check_boot_completed [2025-09-09 20:56:04][355835402761472][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:56:04][355835402761472][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:56:04][355835402761472][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:56:04][355835402761472][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 20:56:04][355835402761472][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 20:56:04][355835402761472][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:56:05][355835402761472][526 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4371\nsuccessfulTxPacketsPerSecond: 0.5081975925384635\nretriedTxPackets: 1001\nretriedTxPacketsPerSecond: 0.12621900991151383\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3963\nsuccessfulRxPacketsPerSecond: 0.4550527462599314\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:56:05][355835402761472][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:56:06][355835402761472][1916 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.833/300.833/300.833/0.000 ms\n [2025-09-09 20:56:06][355835402761472][1916 ms][DEBUG] check_internet: online [2025-09-09 20:56:06][355835402761472][1916 ms][DEBUG] rawBody.length=1159 [2025-09-09 20:56:06][355835402761472][1916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835402761472\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5892\"}'\'' -e'"" [2025-09-09 20:56:06][355835402761472][1916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:56:06][355835402761472][1916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835402761472\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5892\"}'\'' -e'"" [2025-09-09 20:56:11][355835402761472][7180 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74964e38-d7c3-4ca7-8302-9a6cf97d2a76","id":"QR_74964e38-d7c3-4ca7-8302-9a6cf97d2a76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:56:11][355835402761472][7336 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-09 20:56:11][355835402761472][7336 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-09 20:56:11][355835402761472][7337 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:56:16][357967974820549][0 ms][INFO] === Request start === [2025-09-09 20:56:16][357967974820549][1 ms][DEBUG] START check_scloud [2025-09-09 20:56:16][357967974820549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:56:16][357967974820549][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20577 26882 24096648 194464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:56:16][357967974820549][299 ms][DEBUG] targetPkg: running [2025-09-09 20:56:16][357967974820549][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-09 20:56:16][357967974820549][299 ms][DEBUG] START check_boot_completed [2025-09-09 20:56:16][357967974820549][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:56:16][357967974820549][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:56:16][357967974820549][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:56:16][357967974820549][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 20:56:16][357967974820549][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:56:16][357967974820549][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:56:16][357967974820549][533 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4371\nsuccessfulTxPacketsPerSecond: 0.5081975925384635\nretriedTxPackets: 1001\nretriedTxPacketsPerSecond: 0.12621900991151383\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3963\nsuccessfulRxPacketsPerSecond: 0.4550527462599314\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:56:16][357967974820549][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:56:17][357967974820549][955 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.719/313.719/313.719/0.000 ms\n [2025-09-09 20:56:17][357967974820549][955 ms][DEBUG] check_internet: online [2025-09-09 20:56:17][357967974820549][955 ms][DEBUG] rawBody.length=1150 [2025-09-09 20:56:17][357967974820549][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974820549\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1795\"}'\'' -e'"" [2025-09-09 20:56:17][357967974820549][955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:56:17][357967974820549][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974820549\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1795\"}'\'' -e'"" [2025-09-09 20:56:21][357967974820549][4876 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73fa742a-dcf6-4007-af74-873b09f292dd","id":"QR_73fa742a-dcf6-4007-af74-873b09f292dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:56:21][357967974820549][5032 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-09 20:56:21][357967974820549][5032 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-09 20:56:21][357967974820549][5032 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:56:23][357967974820549][0 ms][INFO] === Request start === [2025-09-09 20:56:23][357967974820549][1 ms][DEBUG] START check_scloud [2025-09-09 20:56:23][357967974820549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:56:23][357967974820549][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 20577 26882 24276112 206524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:56:23][357967974820549][315 ms][DEBUG] targetPkg: running [2025-09-09 20:56:23][357967974820549][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 20:56:23][357967974820549][315 ms][DEBUG] START check_boot_completed [2025-09-09 20:56:23][357967974820549][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:56:23][357967974820549][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 20:56:23][357967974820549][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:56:23][357967974820549][424 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 20:56:23][357967974820549][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 20:56:23][357967974820549][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:56:24][357967974820549][580 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4371\nsuccessfulTxPacketsPerSecond: 0.5081975925384635\nretriedTxPackets: 1001\nretriedTxPacketsPerSecond: 0.12621900991151383\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3963\nsuccessfulRxPacketsPerSecond: 0.4550527462599314\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:56:24][357967974820549][581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:56:24][357967974820549][1033 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.089/305.089/305.089/0.000 ms\n [2025-09-09 20:56:24][357967974820549][1034 ms][DEBUG] check_internet: online [2025-09-09 20:56:24][357967974820549][1034 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:56:24][357967974820549][1034 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974820549\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9461\"}'\'' -e'"" [2025-09-09 20:56:24][357967974820549][1034 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:56:24][357967974820549][1034 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974820549\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9461\"}'\'' -e'"" [2025-09-09 20:56:28][357967974820549][5267 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3b625bc-661e-4f05-af27-e8a59dd8d242","id":"QR_d3b625bc-661e-4f05-af27-e8a59dd8d242","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:56:28][357967974820549][5423 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 20:56:28][357967974820549][5423 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 20:56:28][357967974820549][5423 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 20:56:34][351676562976029][0 ms][INFO] === Request start === [2025-09-09 20:56:34][351676562976029][1 ms][DEBUG] START check_scloud [2025-09-09 20:56:34][351676562976029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 20:56:34][351676562976029][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20577 26882 24423796 216020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 20:56:34][351676562976029][310 ms][DEBUG] targetPkg: running [2025-09-09 20:56:34][351676562976029][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 20:56:34][351676562976029][310 ms][DEBUG] START check_boot_completed [2025-09-09 20:56:34][351676562976029][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 20:56:34][351676562976029][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 20:56:34][351676562976029][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 20:56:34][351676562976029][435 ms][DEBUG] SU: done in 79 ms; out [2025-09-09 20:56:34][351676562976029][436 ms][DEBUG] END check_boot_completed in 126 ms [2025-09-09 20:56:34][351676562976029][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 20:56:35][351676562976029][591 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4371\nsuccessfulTxPacketsPerSecond: 0.5081975925384635\nretriedTxPackets: 1001\nretriedTxPacketsPerSecond: 0.12621900991151383\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3963\nsuccessfulRxPacketsPerSecond: 0.4550527462599314\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 20:56:35][351676562976029][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 20:56:35][351676562976029][1044 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.496/326.496/326.496/0.000 ms\n [2025-09-09 20:56:35][351676562976029][1044 ms][DEBUG] check_internet: online [2025-09-09 20:56:35][351676562976029][1044 ms][DEBUG] rawBody.length=1160 [2025-09-09 20:56:35][351676562976029][1044 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562976029\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5802\"}'\'' -e'"" [2025-09-09 20:56:35][351676562976029][1044 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 20:56:35][351676562976029][1044 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676562976029\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5802\"}'\'' -e'"" [2025-09-09 20:56:39][351676562976029][5277 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dada4697-39ef-4bf8-a929-1919ca58ba58","id":"QR_dada4697-39ef-4bf8-a929-1919ca58ba58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 20:56:39][351676562976029][5433 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-09 20:56:39][351676562976029][5433 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-09 20:56:39][351676562976029][5433 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:00:05][350633292212838][1 ms][INFO] === Request start === [2025-09-09 21:00:05][350633292212838][1 ms][DEBUG] START check_scloud [2025-09-09 21:00:05][350633292212838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:00:05][350633292212838][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 20577 26882 24513964 218104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:00:05][350633292212838][269 ms][DEBUG] targetPkg: running [2025-09-09 21:00:05][350633292212838][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-09 21:00:05][350633292212838][269 ms][DEBUG] START check_boot_completed [2025-09-09 21:00:05][350633292212838][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:00:05][350633292212838][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:00:05][350633292212838][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:00:05][350633292212838][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:00:05][350633292212838][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 21:00:05][350633292212838][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:00:05][350633292212838][474 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4677\nsuccessfulTxPacketsPerSecond: 0.0993751429155832\nretriedTxPackets: 1071\nretriedTxPacketsPerSecond: 0.022083365092351825\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4231\nsuccessfulRxPacketsPerSecond: 0.0883334603694073\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:00:05][350633292212838][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:00:06][350633292212838][1066 ms][DEBUG] SU: done in 592 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.872/219.872/219.872/0.000 ms\n [2025-09-09 21:00:06][350633292212838][1066 ms][DEBUG] check_internet: online [2025-09-09 21:00:06][350633292212838][1066 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:00:06][350633292212838][1066 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633292212838\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8872\"}'\'' -e'"" [2025-09-09 21:00:06][350633292212838][1066 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:00:06][350633292212838][1066 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633292212838\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8872\"}'\'' -e'"" [2025-09-09 21:00:12][350633292212838][6986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ceb71a3-f941-458f-895e-8f4604fa9711","id":"QR_2ceb71a3-f941-458f-895e-8f4604fa9711","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:00:12][350633292212838][7142 ms][DEBUG] proc_open done in 6076 ms; code=255; res.len=3343 [2025-09-09 21:00:12][350633292212838][7142 ms][DEBUG] END runCmdUntilRes#1 in 6076 ms [2025-09-09 21:00:12][350633292212838][7142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:00:15][350633292212838][0 ms][INFO] === Request start === [2025-09-09 21:00:15][350633292212838][1 ms][DEBUG] START check_scloud [2025-09-09 21:00:15][350633292212838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:00:15][350633292212838][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 20577 26882 24681012 228256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:00:15][350633292212838][323 ms][DEBUG] targetPkg: running [2025-09-09 21:00:15][350633292212838][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-09 21:00:15][350633292212838][323 ms][DEBUG] START check_boot_completed [2025-09-09 21:00:15][350633292212838][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:00:16][350633292212838][368 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 21:00:16][350633292212838][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:00:16][350633292212838][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 21:00:16][350633292212838][431 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-09 21:00:16][350633292212838][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:00:16][350633292212838][542 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2910335 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4677\nsuccessfulTxPacketsPerSecond: 0.0993751429155832\nretriedTxPackets: 1071\nretriedTxPacketsPerSecond: 0.022083365092351825\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4231\nsuccessfulRxPacketsPerSecond: 0.0883334603694073\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:00:16][350633292212838][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:00:16][350633292212838][1009 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.727/346.727/346.727/0.000 ms\n [2025-09-09 21:00:16][350633292212838][1009 ms][DEBUG] check_internet: online [2025-09-09 21:00:16][350633292212838][1009 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:00:16][350633292212838][1009 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633292212838\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4976\"}'\'' -e'"" [2025-09-09 21:00:16][350633292212838][1009 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:00:16][350633292212838][1009 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633292212838\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4976\"}'\'' -e'"" [2025-09-09 21:00:24][350633292212838][9116 ms][DEBUG] proc_open done in 8107 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 21:00:24][350633292212838][9116 ms][DEBUG] END runCmdUntilRes#1 in 8107 ms [2025-09-09 21:00:24][350633292212838][9116 ms][WARN] Detected error: Process with pid 20577 either refused to load frida-agent, or terminated during injectionProcess with pid 20577 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 21:00:24][350633292212838][9116 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 21:00:25][350633292212838][9429 ms][DEBUG] SU: done in 312 ms; out [2025-09-09 21:00:25][350633292212838][9429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 21:00:25][350633292212838][9647 ms][DEBUG] SU: done in 219 ms; out [2025-09-09 21:00:25][350633292212838][9647 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 21:00:25][350633292212838][9648 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 21:00:25][350633292212838][9929 ms][DEBUG] SU: done in 281 ms; out [2025-09-09 21:00:25][350633292212838][9929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 21:00:25][350633292212838][10225 ms][DEBUG] SU: done in 297 ms; out [2025-09-09 21:00:27][350633292212838][12240 ms][DEBUG] START check_boot_completed [2025-09-09 21:00:27][350633292212838][12240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:00:27][350633292212838][12287 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:00:27][350633292212838][12288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:00:28][350633292212838][12365 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 21:00:28][350633292212838][12365 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 21:00:31][350633292212838][15380 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 21:00:31][350633292212838][15380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633292212838\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4976\"}'\'' -e'"" [2025-09-09 21:00:31][350633292212838][15896 ms][DEBUG] proc_open done in 516 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-09 21:00:31][350633292212838][15896 ms][DEBUG] END runCmdUntilRes#2 in 516 ms [2025-09-09 21:00:31][350633292212838][15896 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-09 21:00:31][350633292212838][15896 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 21:00:32][350633292212838][16411 ms][DEBUG] SU: done in 515 ms; out [2025-09-09 21:08:04][354099882615655][1 ms][INFO] === Request start === [2025-09-09 21:08:04][354099882615655][1 ms][DEBUG] START check_scloud [2025-09-09 21:08:04][354099882615655][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:08:05][354099882615655][322 ms][DEBUG] SU: done in 321 ms; out [2025-09-09 21:08:05][354099882615655][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-09 21:08:05][354099882615655][353 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-09 21:08:05][354099882615655][353 ms][DEBUG] check_devices: device found [2025-09-09 21:08:05][354099882615655][353 ms][WARN] targetPkg: not running, restarting [2025-09-09 21:08:05][354099882615655][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 21:08:05][354099882615655][510 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 21:08:05][354099882615655][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 21:08:05][354099882615655][714 ms][DEBUG] SU: done in 204 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 21:08:07][354099882615655][2728 ms][DEBUG] END check_scloud in 2727 ms [2025-09-09 21:08:07][354099882615655][2728 ms][DEBUG] START check_boot_completed [2025-09-09 21:08:07][354099882615655][2728 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:08:07][354099882615655][2775 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:08:07][354099882615655][2775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:08:07][354099882615655][2837 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 21:08:07][354099882615655][2837 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 21:08:07][354099882615655][2837 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:08:07][354099882615655][2978 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 922\nsuccessfulTxPacketsPerSecond: 0.7428286088058205\nretriedTxPackets: 158\nretriedTxPacketsPerSecond: 0.13205841934325696\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 988\nsuccessfulRxPacketsPerSecond: 0.6974335271565759\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:08:07][354099882615655][2978 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:08:09][354099882615655][4759 ms][DEBUG] SU: done in 1781 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.241/405.241/405.241/0.000 ms\n [2025-09-09 21:08:09][354099882615655][4759 ms][DEBUG] check_internet: online [2025-09-09 21:08:09][354099882615655][4759 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:08:09][354099882615655][4759 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099882615655\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-09-09 21:08:09][354099882615655][4759 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:08:09][354099882615655][4759 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099882615655\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-09-09 21:08:15][354099882615655][10632 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_314a6323-fa05-4bcd-b2a4-f8010bc5e89a","id":"QR_314a6323-fa05-4bcd-b2a4-f8010bc5e89a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:08:15][354099882615655][10788 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-09-09 21:08:15][354099882615655][10788 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-09-09 21:08:15][354099882615655][10788 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:09:04][354149400165061][0 ms][INFO] === Request start === [2025-09-09 21:09:04][354149400165061][0 ms][DEBUG] START check_scloud [2025-09-09 21:09:04][354149400165061][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:09:04][354149400165061][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 1231 23180 23579996 126852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:09:04][354149400165061][289 ms][DEBUG] targetPkg: running [2025-09-09 21:09:04][354149400165061][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 21:09:04][354149400165061][289 ms][DEBUG] START check_boot_completed [2025-09-09 21:09:04][354149400165061][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:09:04][354149400165061][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:09:04][354149400165061][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:09:04][354149400165061][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:09:04][354149400165061][367 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 21:09:04][354149400165061][367 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:09:04][354149400165061][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149400165061\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4881\"}'\'' -e'"" [2025-09-09 21:09:04][354149400165061][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:09:04][354149400165061][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149400165061\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4881\"}'\'' -e'"" [2025-09-09 21:09:09][354149400165061][4663 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe0a2738-25f6-4535-8ecd-0e8374d2cdcc","id":"QR_fe0a2738-25f6-4535-8ecd-0e8374d2cdcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:09:09][354149400165061][4819 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-09 21:09:09][354149400165061][4819 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-09 21:09:09][354149400165061][4819 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:09:12][354149400165061][0 ms][INFO] === Request start === [2025-09-09 21:09:12][354149400165061][1 ms][DEBUG] START check_scloud [2025-09-09 21:09:12][354149400165061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:09:13][354149400165061][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 1231 23180 23728676 137080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:09:13][354149400165061][294 ms][DEBUG] targetPkg: running [2025-09-09 21:09:13][354149400165061][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 21:09:13][354149400165061][294 ms][DEBUG] START check_boot_completed [2025-09-09 21:09:13][354149400165061][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:09:13][354149400165061][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:09:13][354149400165061][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:09:13][354149400165061][419 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 21:09:13][354149400165061][419 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 21:09:13][354149400165061][419 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:09:13][354149400165061][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149400165061\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8153\"}'\'' -e'"" [2025-09-09 21:09:13][354149400165061][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:09:13][354149400165061][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149400165061\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8153\"}'\'' -e'"" [2025-09-09 21:09:17][354149400165061][5183 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b51adae-c6f8-41e6-8c13-c290a80f0b26","id":"QR_2b51adae-c6f8-41e6-8c13-c290a80f0b26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:09:18][354149400165061][5339 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-09 21:09:18][354149400165061][5339 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-09 21:09:18][354149400165061][5339 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:14:04][350601360771100][1 ms][INFO] === Request start === [2025-09-09 21:14:04][350601360771100][1 ms][DEBUG] START check_scloud [2025-09-09 21:14:04][350601360771100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:14:05][350601360771100][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 1231 23180 23854516 149448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:14:05][350601360771100][262 ms][DEBUG] targetPkg: running [2025-09-09 21:14:05][350601360771100][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-09 21:14:05][350601360771100][262 ms][DEBUG] START check_boot_completed [2025-09-09 21:14:05][350601360771100][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:14:05][350601360771100][293 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:14:05][350601360771100][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:14:05][350601360771100][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:14:05][350601360771100][340 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 21:14:05][350601360771100][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:14:05][350601360771100][449 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1107\nsuccessfulTxPacketsPerSecond: 0.614116038055277\nretriedTxPackets: 210\nretriedTxPacketsPerSecond: 0.17261639988580763\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1154\nsuccessfulRxPacketsPerSecond: 0.5510446611739243\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:14:05][350601360771100][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:14:06][350601360771100][1793 ms][DEBUG] SU: done in 1344 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.266/301.266/301.266/0.000 ms\n [2025-09-09 21:14:06][350601360771100][1793 ms][DEBUG] check_internet: online [2025-09-09 21:14:06][350601360771100][1793 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:14:06][350601360771100][1793 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350601360771100\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3106\"}'\'' -e'"" [2025-09-09 21:14:06][350601360771100][1793 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:14:06][350601360771100][1793 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350601360771100\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3106\"}'\'' -e'"" [2025-09-09 21:14:11][350601360771100][6948 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6e26909-32f7-47d3-bed7-f77c6d07ca07","id":"QR_a6e26909-32f7-47d3-bed7-f77c6d07ca07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:14:12][350601360771100][7104 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 21:14:12][350601360771100][7104 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 21:14:12][350601360771100][7104 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:14:15][350601360771100][0 ms][INFO] === Request start === [2025-09-09 21:14:15][350601360771100][1 ms][DEBUG] START check_scloud [2025-09-09 21:14:15][350601360771100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:14:15][350601360771100][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1231 23180 23993020 160636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:14:15][350601360771100][308 ms][DEBUG] targetPkg: running [2025-09-09 21:14:15][350601360771100][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 21:14:15][350601360771100][308 ms][DEBUG] START check_boot_completed [2025-09-09 21:14:15][350601360771100][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:14:15][350601360771100][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 21:14:15][350601360771100][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:14:16][350601360771100][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 21:14:16][350601360771100][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 21:14:16][350601360771100][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:14:16][350601360771100][559 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1107\nsuccessfulTxPacketsPerSecond: 0.614116038055277\nretriedTxPackets: 210\nretriedTxPacketsPerSecond: 0.17261639988580763\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1154\nsuccessfulRxPacketsPerSecond: 0.5510446611739243\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:14:16][350601360771100][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:14:16][350601360771100][964 ms][DEBUG] SU: done in 404 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.027/261.027/261.027/0.000 ms\n [2025-09-09 21:14:16][350601360771100][964 ms][DEBUG] check_internet: online [2025-09-09 21:14:16][350601360771100][964 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:14:16][350601360771100][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350601360771100\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4970\"}'\'' -e'"" [2025-09-09 21:14:16][350601360771100][964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:14:16][350601360771100][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350601360771100\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4970\"}'\'' -e'"" [2025-09-09 21:14:20][350601360771100][4447 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae4006d1-eb20-4b7c-8a68-d2de021c652d","id":"QR_ae4006d1-eb20-4b7c-8a68-d2de021c652d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:14:20][350601360771100][4603 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-09 21:14:20][350601360771100][4604 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-09 21:14:20][350601360771100][4604 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:15:03][351771923416128][0 ms][INFO] === Request start === [2025-09-09 21:15:03][351771923416128][1 ms][DEBUG] START check_scloud [2025-09-09 21:15:03][351771923416128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:15:03][351771923416128][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 1231 23180 24092540 171904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:15:03][351771923416128][330 ms][DEBUG] targetPkg: running [2025-09-09 21:15:03][351771923416128][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-09 21:15:03][351771923416128][330 ms][DEBUG] START check_boot_completed [2025-09-09 21:15:03][351771923416128][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:15:03][351771923416128][377 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:15:03][351771923416128][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:15:03][351771923416128][425 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 21:15:03][351771923416128][425 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 21:15:03][351771923416128][425 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:15:03][351771923416128][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923416128\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9118\"}'\'' -e'"" [2025-09-09 21:15:03][351771923416128][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:15:03][351771923416128][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923416128\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9118\"}'\'' -e'"" [2025-09-09 21:15:06][351771923416128][3657 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70d87172-1b67-4103-aae2-885949cd206a","id":"QR_70d87172-1b67-4103-aae2-885949cd206a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:15:07][351771923416128][3813 ms][DEBUG] proc_open done in 3387 ms; code=255; res.len=3343 [2025-09-09 21:15:07][351771923416128][3813 ms][DEBUG] END runCmdUntilRes#1 in 3388 ms [2025-09-09 21:15:07][351771923416128][3813 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:15:09][351771923416128][0 ms][INFO] === Request start === [2025-09-09 21:15:09][351771923416128][1 ms][DEBUG] START check_scloud [2025-09-09 21:15:09][351771923416128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:15:09][351771923416128][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 1231 23180 24224388 183748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:15:09][351771923416128][322 ms][DEBUG] targetPkg: running [2025-09-09 21:15:09][351771923416128][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 21:15:09][351771923416128][322 ms][DEBUG] START check_boot_completed [2025-09-09 21:15:09][351771923416128][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:15:09][351771923416128][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:15:09][351771923416128][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:15:09][351771923416128][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:15:09][351771923416128][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 21:15:09][351771923416128][400 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:15:09][351771923416128][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923416128\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3581\"}'\'' -e'"" [2025-09-09 21:15:09][351771923416128][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:15:09][351771923416128][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923416128\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3581\"}'\'' -e'"" [2025-09-09 21:15:16][351771923416128][6664 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4fde02ef-bd35-476d-9d82-e499ccb0580d","id":"QR_4fde02ef-bd35-476d-9d82-e499ccb0580d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:15:16][351771923416128][6820 ms][DEBUG] proc_open done in 6420 ms; code=255; res.len=3343 [2025-09-09 21:15:16][351771923416128][6820 ms][DEBUG] END runCmdUntilRes#1 in 6420 ms [2025-09-09 21:15:16][351771923416128][6820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:17:05][350299943878177][1 ms][INFO] === Request start === [2025-09-09 21:17:05][350299943878177][1 ms][DEBUG] START check_scloud [2025-09-09 21:17:05][350299943878177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:17:05][350299943878177][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 1231 23180 24338272 195296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:17:05][350299943878177][310 ms][DEBUG] targetPkg: running [2025-09-09 21:17:05][350299943878177][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 21:17:05][350299943878177][310 ms][DEBUG] START check_boot_completed [2025-09-09 21:17:05][350299943878177][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:17:05][350299943878177][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:17:05][350299943878177][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:17:05][350299943878177][435 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 21:17:05][350299943878177][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 21:17:05][350299943878177][435 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:17:05][350299943878177][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299943878177\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EON\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-09-09 21:17:05][350299943878177][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:17:05][350299943878177][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299943878177\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EON\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-09-09 21:17:10][350299943878177][5418 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04c71009-03a7-479a-b116-2b21778a4efa","id":"QR_04c71009-03a7-479a-b116-2b21778a4efa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:17:10][350299943878177][5574 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-09 21:17:10][350299943878177][5574 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-09 21:17:10][350299943878177][5574 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:17:14][350299943878177][0 ms][INFO] === Request start === [2025-09-09 21:17:14][350299943878177][1 ms][DEBUG] START check_scloud [2025-09-09 21:17:14][350299943878177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:17:14][350299943878177][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 1231 23180 24474728 206980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:17:14][350299943878177][276 ms][DEBUG] targetPkg: running [2025-09-09 21:17:14][350299943878177][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-09 21:17:14][350299943878177][276 ms][DEBUG] START check_boot_completed [2025-09-09 21:17:14][350299943878177][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:17:14][350299943878177][322 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:17:14][350299943878177][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:17:14][350299943878177][385 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 21:17:14][350299943878177][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 21:17:14][350299943878177][385 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:17:14][350299943878177][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299943878177\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EON\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7738\"}'\'' -e'"" [2025-09-09 21:17:14][350299943878177][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:17:14][350299943878177][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299943878177\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EON\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7738\"}'\'' -e'"" [2025-09-09 21:17:18][350299943878177][4134 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6d99eaf-9cbf-43c8-a4a3-0951bd71652e","id":"QR_a6d99eaf-9cbf-43c8-a4a3-0951bd71652e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:17:18][350299943878177][4290 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-09 21:17:18][350299943878177][4290 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-09 21:17:18][350299943878177][4290 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:19:03][351885216039478][0 ms][INFO] === Request start === [2025-09-09 21:19:03][351885216039478][1 ms][DEBUG] START check_scloud [2025-09-09 21:19:03][351885216039478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:19:03][351885216039478][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 1231 23180 24564008 196308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:19:03][351885216039478][276 ms][DEBUG] targetPkg: running [2025-09-09 21:19:03][351885216039478][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 21:19:03][351885216039478][276 ms][DEBUG] START check_boot_completed [2025-09-09 21:19:03][351885216039478][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:19:03][351885216039478][307 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:19:03][351885216039478][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:19:04][351885216039478][370 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 21:19:04][351885216039478][370 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 21:19:04][351885216039478][370 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:19:04][351885216039478][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885216039478\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-09-09 21:19:04][351885216039478][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:19:04][351885216039478][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885216039478\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-09-09 21:19:08][351885216039478][4759 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03286e1d-5d0a-49ae-b0fd-c8c9a7de2c9a","id":"QR_03286e1d-5d0a-49ae-b0fd-c8c9a7de2c9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:19:08][351885216039478][4915 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-09 21:19:08][351885216039478][4915 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-09 21:19:08][351885216039478][4915 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:19:10][351885216039478][1 ms][INFO] === Request start === [2025-09-09 21:19:10][351885216039478][1 ms][DEBUG] START check_scloud [2025-09-09 21:19:10][351885216039478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:19:11][351885216039478][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 1231 23180 24688052 193572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:19:11][351885216039478][293 ms][DEBUG] targetPkg: running [2025-09-09 21:19:11][351885216039478][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-09 21:19:11][351885216039478][293 ms][DEBUG] START check_boot_completed [2025-09-09 21:19:11][351885216039478][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:19:11][351885216039478][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 21:19:11][351885216039478][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:19:11][351885216039478][402 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 21:19:11][351885216039478][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 21:19:11][351885216039478][402 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:19:11][351885216039478][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885216039478\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4905\"}'\'' -e'"" [2025-09-09 21:19:11][351885216039478][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:19:11][351885216039478][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885216039478\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4905\"}'\'' -e'"" [2025-09-09 21:19:16][351885216039478][5510 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03ebdc05-c349-48fc-a5c8-9b1e1054cde8","id":"QR_03ebdc05-c349-48fc-a5c8-9b1e1054cde8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:19:16][351885216039478][5667 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-09 21:19:16][351885216039478][5667 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-09 21:19:16][351885216039478][5667 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:24:03][358709895374670][1 ms][INFO] === Request start === [2025-09-09 21:24:03][358709895374670][1 ms][DEBUG] START check_scloud [2025-09-09 21:24:03][358709895374670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:24:03][358709895374670][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 1231 23180 24814004 204632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:24:03][358709895374670][294 ms][DEBUG] targetPkg: running [2025-09-09 21:24:03][358709895374670][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-09 21:24:03][358709895374670][294 ms][DEBUG] START check_boot_completed [2025-09-09 21:24:03][358709895374670][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:24:03][358709895374670][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:24:03][358709895374670][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:24:03][358709895374670][373 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 21:24:03][358709895374670][373 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 21:24:03][358709895374670][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:24:03][358709895374670][482 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.4002262435955532\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1124602667954447\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1457\nsuccessfulRxPacketsPerSecond: 0.3373808003863341\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:24:03][358709895374670][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:24:05][358709895374670][1810 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.201/302.201/302.201/0.000 ms\n [2025-09-09 21:24:05][358709895374670][1810 ms][DEBUG] check_internet: online [2025-09-09 21:24:05][358709895374670][1810 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:24:05][358709895374670][1810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709895374670\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2946\"}'\'' -e'"" [2025-09-09 21:24:05][358709895374670][1810 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:24:05][358709895374670][1810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709895374670\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2946\"}'\'' -e'"" [2025-09-09 21:24:09][358709895374670][6043 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 21:24:09][358709895374670][6043 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-09 21:24:09][358709895374670][6043 ms][WARN] Detected error: Process with pid 1231 either refused to load frida-agent, or terminated during injectionProcess with pid 1231 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 21:24:09][358709895374670][6043 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 21:24:09][358709895374670][6324 ms][DEBUG] SU: done in 281 ms; outsystem 23381 23180 12540456 237400 ep_poll 0 S system_server\n [2025-09-09 21:24:09][358709895374670][6324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 21:24:09][358709895374670][6480 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 21:24:09][358709895374670][6480 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 21:24:09][358709895374670][6480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 21:24:09][358709895374670][6621 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 21:24:09][358709895374670][6621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 21:24:10][358709895374670][6808 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 21:24:12][358709895374670][8823 ms][DEBUG] START check_boot_completed [2025-09-09 21:24:12][358709895374670][8823 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:24:12][358709895374670][8870 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:24:12][358709895374670][8870 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:24:12][358709895374670][8917 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:24:12][358709895374670][8917 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 21:24:15][358709895374670][11932 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 21:24:15][358709895374670][11932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709895374670\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2946\"}'\'' -e'"" [2025-09-09 21:24:19][358709895374670][15837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a5c6803-e62a-457a-a404-25b30cab6340","id":"QR_5a5c6803-e62a-457a-a404-25b30cab6340","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:24:19][358709895374670][15994 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-09 21:24:19][358709895374670][15994 ms][DEBUG] END runCmdUntilRes#2 in 4062 ms [2025-09-09 21:24:19][358709895374670][15994 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:24:21][358709895374670][0 ms][INFO] === Request start === [2025-09-09 21:24:21][358709895374670][1 ms][DEBUG] START check_scloud [2025-09-09 21:24:21][358709895374670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:24:22][358709895374670][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 3384 23180 23692508 124804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:24:22][358709895374670][247 ms][DEBUG] targetPkg: running [2025-09-09 21:24:22][358709895374670][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-09 21:24:22][358709895374670][247 ms][DEBUG] START check_boot_completed [2025-09-09 21:24:22][358709895374670][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:24:22][358709895374670][294 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:24:22][358709895374670][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:24:22][358709895374670][356 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 21:24:22][358709895374670][356 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 21:24:22][358709895374670][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:24:22][358709895374670][466 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.4002262435955532\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1124602667954447\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1457\nsuccessfulRxPacketsPerSecond: 0.3373808003863341\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:24:22][358709895374670][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:24:22][358709895374670][887 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=314 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 314.114/314.114/314.114/0.000 ms\n [2025-09-09 21:24:22][358709895374670][887 ms][DEBUG] check_internet: online [2025-09-09 21:24:22][358709895374670][887 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:24:22][358709895374670][888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709895374670\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2332\"}'\'' -e'"" [2025-09-09 21:24:22][358709895374670][888 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:24:22][358709895374670][888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358709895374670\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2332\"}'\'' -e'"" [2025-09-09 21:24:27][358709895374670][6167 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_910caf3d-5716-45aa-93cf-65688648d6e0","id":"QR_910caf3d-5716-45aa-93cf-65688648d6e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:24:28][358709895374670][6323 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-09 21:24:28][358709895374670][6324 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-09 21:24:28][358709895374670][6324 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:26:05][359097840848884][1 ms][INFO] === Request start === [2025-09-09 21:26:05][359097840848884][1 ms][DEBUG] START check_scloud [2025-09-09 21:26:05][359097840848884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:26:05][359097840848884][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 3384 23180 23814424 138676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:26:05][359097840848884][292 ms][DEBUG] targetPkg: running [2025-09-09 21:26:05][359097840848884][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-09 21:26:05][359097840848884][292 ms][DEBUG] START check_boot_completed [2025-09-09 21:26:05][359097840848884][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:26:05][359097840848884][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:26:05][359097840848884][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:26:05][359097840848884][386 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 21:26:05][359097840848884][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 21:26:05][359097840848884][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:26:05][359097840848884][558 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.4002262435955532\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1124602667954447\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1457\nsuccessfulRxPacketsPerSecond: 0.3373808003863341\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:26:05][359097840848884][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:26:06][359097840848884][1885 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.311/301.311/301.311/0.000 ms\n [2025-09-09 21:26:06][359097840848884][1885 ms][DEBUG] check_internet: online [2025-09-09 21:26:06][359097840848884][1885 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:26:06][359097840848884][1885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840848884\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4001\"}'\'' -e'"" [2025-09-09 21:26:06][359097840848884][1886 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:26:06][359097840848884][1886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840848884\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4001\"}'\'' -e'"" [2025-09-09 21:26:11][359097840848884][6931 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f872b32c-701d-4701-baad-9b88308fc349","id":"QR_f872b32c-701d-4701-baad-9b88308fc349","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:26:12][359097840848884][7087 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 21:26:12][359097840848884][7087 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 21:26:12][359097840848884][7087 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:26:15][359097840848884][0 ms][INFO] === Request start === [2025-09-09 21:26:15][359097840848884][1 ms][DEBUG] START check_scloud [2025-09-09 21:26:15][359097840848884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:26:16][359097840848884][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 3384 23180 23953620 150408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:26:16][359097840848884][259 ms][DEBUG] targetPkg: running [2025-09-09 21:26:16][359097840848884][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-09 21:26:16][359097840848884][259 ms][DEBUG] START check_boot_completed [2025-09-09 21:26:16][359097840848884][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:26:16][359097840848884][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 21:26:16][359097840848884][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:26:16][359097840848884][384 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 21:26:16][359097840848884][384 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 21:26:16][359097840848884][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:26:16][359097840848884][509 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.4002262435955532\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1124602667954447\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1457\nsuccessfulRxPacketsPerSecond: 0.3373808003863341\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:26:16][359097840848884][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:26:16][359097840848884][868 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.475/245.475/245.475/0.000 ms\n [2025-09-09 21:26:16][359097840848884][868 ms][DEBUG] check_internet: online [2025-09-09 21:26:16][359097840848884][868 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:26:16][359097840848884][869 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840848884\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3217\"}'\'' -e'"" [2025-09-09 21:26:16][359097840848884][869 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:26:16][359097840848884][869 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097840848884\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3217\"}'\'' -e'"" [2025-09-09 21:26:20][359097840848884][4352 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53742eff-2a28-4c69-a65d-0653e5e99ed9","id":"QR_53742eff-2a28-4c69-a65d-0653e5e99ed9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:26:20][359097840848884][4508 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-09 21:26:20][359097840848884][4508 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-09 21:26:20][359097840848884][4508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:34:03][350361080924261][1 ms][INFO] === Request start === [2025-09-09 21:34:03][350361080924261][1 ms][DEBUG] START check_scloud [2025-09-09 21:34:03][350361080924261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:34:04][350361080924261][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 3384 23180 24068360 161816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:34:04][350361080924261][333 ms][DEBUG] targetPkg: running [2025-09-09 21:34:04][350361080924261][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-09 21:34:04][350361080924261][333 ms][DEBUG] START check_boot_completed [2025-09-09 21:34:04][350361080924261][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:34:04][350361080924261][364 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:34:04][350361080924261][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:34:04][350361080924261][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:34:04][350361080924261][411 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 21:34:04][350361080924261][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:34:04][350361080924261][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2306\nsuccessfulTxPacketsPerSecond: 0.48226777537489973\nretriedTxPackets: 409\nretriedTxPacketsPerSecond: 0.13198907536576204\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2441\nsuccessfulRxPacketsPerSecond: 0.41119673479333557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:34:04][350361080924261][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:34:05][350361080924261][1801 ms][DEBUG] SU: done in 1281 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.565/218.565/218.565/0.000 ms\n [2025-09-09 21:34:05][350361080924261][1801 ms][DEBUG] check_internet: online [2025-09-09 21:34:05][350361080924261][1802 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:34:05][350361080924261][1802 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361080924261\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2509\"}'\'' -e'"" [2025-09-09 21:34:05][350361080924261][1802 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:34:05][350361080924261][1802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361080924261\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2509\"}'\'' -e'"" [2025-09-09 21:34:10][350361080924261][6050 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18aef090-5168-4592-a21e-c8a996c2fcc5","id":"QR_18aef090-5168-4592-a21e-c8a996c2fcc5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:34:10][350361080924261][6206 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-09 21:34:10][350361080924261][6206 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-09 21:34:10][350361080924261][6207 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:34:12][350361080924261][0 ms][INFO] === Request start === [2025-09-09 21:34:12][350361080924261][1 ms][DEBUG] START check_scloud [2025-09-09 21:34:12][350361080924261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:34:12][350361080924261][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 3384 23180 24242780 151676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:34:12][350361080924261][322 ms][DEBUG] targetPkg: running [2025-09-09 21:34:12][350361080924261][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 21:34:12][350361080924261][322 ms][DEBUG] START check_boot_completed [2025-09-09 21:34:12][350361080924261][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:34:12][350361080924261][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 21:34:12][350361080924261][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:34:12][350361080924261][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:34:12][350361080924261][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 21:34:12][350361080924261][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:34:13][350361080924261][571 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2306\nsuccessfulTxPacketsPerSecond: 0.48226777537489973\nretriedTxPackets: 409\nretriedTxPacketsPerSecond: 0.13198907536576204\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2441\nsuccessfulRxPacketsPerSecond: 0.41119673479333557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:34:13][350361080924261][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:34:13][350361080924261][915 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.144/226.144/226.144/0.000 ms\n [2025-09-09 21:34:13][350361080924261][915 ms][DEBUG] check_internet: online [2025-09-09 21:34:13][350361080924261][915 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:34:13][350361080924261][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361080924261\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7635\"}'\'' -e'"" [2025-09-09 21:34:13][350361080924261][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:34:13][350361080924261][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361080924261\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7635\"}'\'' -e'"" [2025-09-09 21:34:18][350361080924261][5914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52208882-c4f3-47d1-808e-2f31e962bcd1","id":"QR_52208882-c4f3-47d1-808e-2f31e962bcd1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:34:18][350361080924261][6070 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-09 21:34:18][350361080924261][6070 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-09 21:34:18][350361080924261][6070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:34:23][350455581910348][0 ms][INFO] === Request start === [2025-09-09 21:34:23][350455581910348][1 ms][DEBUG] START check_scloud [2025-09-09 21:34:23][350455581910348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:34:24][350455581910348][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 3384 23180 24387428 161028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:34:24][350455581910348][313 ms][DEBUG] targetPkg: running [2025-09-09 21:34:24][350455581910348][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 21:34:24][350455581910348][313 ms][DEBUG] START check_boot_completed [2025-09-09 21:34:24][350455581910348][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:34:24][350455581910348][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 21:34:24][350455581910348][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:34:24][350455581910348][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:34:24][350455581910348][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 21:34:24][350455581910348][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:34:24][350455581910348][547 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2306\nsuccessfulTxPacketsPerSecond: 0.48226777537489973\nretriedTxPackets: 409\nretriedTxPacketsPerSecond: 0.13198907536576204\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2441\nsuccessfulRxPacketsPerSecond: 0.41119673479333557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:34:24][350455581910348][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:34:24][350455581910348][938 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=281 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 281.166/281.166/281.166/0.000 ms\n [2025-09-09 21:34:24][350455581910348][938 ms][DEBUG] check_internet: online [2025-09-09 21:34:24][350455581910348][938 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:34:24][350455581910348][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581910348\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4471\"}'\'' -e'"" [2025-09-09 21:34:24][350455581910348][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:34:24][350455581910348][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581910348\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4471\"}'\'' -e'"" [2025-09-09 21:34:29][350455581910348][5499 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_effb1d19-7c4f-487b-b5c3-58cf4e8072cb","id":"QR_effb1d19-7c4f-487b-b5c3-58cf4e8072cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:34:29][350455581910348][5655 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-09 21:34:29][350455581910348][5655 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-09 21:34:29][350455581910348][5655 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:34:33][350455581910348][1 ms][INFO] === Request start === [2025-09-09 21:34:33][350455581910348][1 ms][DEBUG] START check_scloud [2025-09-09 21:34:33][350455581910348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:34:33][350455581910348][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 3384 23180 24519624 172092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:34:33][350455581910348][314 ms][DEBUG] targetPkg: running [2025-09-09 21:34:33][350455581910348][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-09 21:34:33][350455581910348][314 ms][DEBUG] START check_boot_completed [2025-09-09 21:34:33][350455581910348][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:34:33][350455581910348][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 21:34:33][350455581910348][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:34:33][350455581910348][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:34:33][350455581910348][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 21:34:33][350455581910348][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 21:34:33][350455581910348][517 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2306\nsuccessfulTxPacketsPerSecond: 0.48226777537489973\nretriedTxPackets: 409\nretriedTxPacketsPerSecond: 0.13198907536576204\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2441\nsuccessfulRxPacketsPerSecond: 0.41119673479333557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 21:34:33][350455581910348][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 21:34:34][350455581910348][923 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.934/296.934/296.934/0.000 ms\n [2025-09-09 21:34:34][350455581910348][923 ms][DEBUG] check_internet: online [2025-09-09 21:34:34][350455581910348][923 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:34:34][350455581910348][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581910348\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5214\"}'\'' -e'"" [2025-09-09 21:34:34][350455581910348][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:34:34][350455581910348][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581910348\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5214\"}'\'' -e'"" [2025-09-09 21:34:37][350455581910348][4219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa4eeedb-c12b-4087-9765-c8d5ac4142b3","id":"QR_fa4eeedb-c12b-4087-9765-c8d5ac4142b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:34:37][350455581910348][4375 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-09 21:34:37][350455581910348][4375 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-09 21:34:37][350455581910348][4375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:51:04][352414570270808][1 ms][INFO] === Request start === [2025-09-09 21:51:04][352414570270808][1 ms][DEBUG] START check_scloud [2025-09-09 21:51:04][352414570270808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:51:05][352414570270808][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 3384 23180 24610960 150664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:51:05][352414570270808][284 ms][DEBUG] targetPkg: running [2025-09-09 21:51:05][352414570270808][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-09 21:51:05][352414570270808][284 ms][DEBUG] START check_boot_completed [2025-09-09 21:51:05][352414570270808][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:51:05][352414570270808][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 21:51:05][352414570270808][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:51:05][352414570270808][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:51:05][352414570270808][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 21:51:05][352414570270808][362 ms][DEBUG] rawBody.length=1160 [2025-09-09 21:51:05][352414570270808][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570270808\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7047\"}'\'' -e'"" [2025-09-09 21:51:05][352414570270808][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:51:05][352414570270808][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570270808\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7047\"}'\'' -e'"" [2025-09-09 21:51:11][352414570270808][6251 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96807ede-84fe-44de-8988-d3cf9d92733d","id":"QR_96807ede-84fe-44de-8988-d3cf9d92733d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:51:11][352414570270808][6407 ms][DEBUG] proc_open done in 6045 ms; code=255; res.len=3343 [2025-09-09 21:51:11][352414570270808][6407 ms][DEBUG] END runCmdUntilRes#1 in 6045 ms [2025-09-09 21:51:11][352414570270808][6407 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 21:51:14][352414570270808][0 ms][INFO] === Request start === [2025-09-09 21:51:14][352414570270808][1 ms][DEBUG] START check_scloud [2025-09-09 21:51:14][352414570270808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 21:51:15][352414570270808][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 3384 23180 24805220 155308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 21:51:15][352414570270808][304 ms][DEBUG] targetPkg: running [2025-09-09 21:51:15][352414570270808][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 21:51:15][352414570270808][304 ms][DEBUG] START check_boot_completed [2025-09-09 21:51:15][352414570270808][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 21:51:15][352414570270808][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 21:51:15][352414570270808][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 21:51:15][352414570270808][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 21:51:15][352414570270808][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 21:51:15][352414570270808][397 ms][DEBUG] rawBody.length=1150 [2025-09-09 21:51:15][352414570270808][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570270808\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9110\"}'\'' -e'"" [2025-09-09 21:51:15][352414570270808][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 21:51:15][352414570270808][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570270808\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9110\"}'\'' -e'"" [2025-09-09 21:51:19][352414570270808][4692 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e5ed102-6cbd-420a-b01a-bfde78986d77","id":"QR_3e5ed102-6cbd-420a-b01a-bfde78986d77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 21:51:19][352414570270808][4848 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-09-09 21:51:19][352414570270808][4848 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-09-09 21:51:19][352414570270808][4848 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:09:04][350039933660486][1 ms][INFO] === Request start === [2025-09-09 22:09:04][350039933660486][1 ms][DEBUG] START check_scloud [2025-09-09 22:09:04][350039933660486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:09:05][350039933660486][349 ms][DEBUG] SU: done in 348 ms; outu0_a118 3384 23180 24932312 106248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:09:05][350039933660486][349 ms][DEBUG] targetPkg: running [2025-09-09 22:09:05][350039933660486][349 ms][DEBUG] END check_scloud in 348 ms [2025-09-09 22:09:05][350039933660486][349 ms][DEBUG] START check_boot_completed [2025-09-09 22:09:05][350039933660486][349 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:09:05][350039933660486][380 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 22:09:05][350039933660486][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:09:05][350039933660486][427 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:09:05][350039933660486][427 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 22:09:05][350039933660486][427 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:09:05][350039933660486][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039933660486\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5161\"}'\'' -e'"" [2025-09-09 22:09:05][350039933660486][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:09:05][350039933660486][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039933660486\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5161\"}'\'' -e'"" [2025-09-09 22:09:11][350039933660486][6988 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca1a3508-660b-4a76-bdcb-ee5012437fc0","id":"QR_ca1a3508-660b-4a76-bdcb-ee5012437fc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:09:11][350039933660486][7144 ms][DEBUG] proc_open done in 6717 ms; code=255; res.len=3343 [2025-09-09 22:09:11][350039933660486][7144 ms][DEBUG] END runCmdUntilRes#1 in 6717 ms [2025-09-09 22:09:11][350039933660486][7144 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:09:15][350039933660486][0 ms][INFO] === Request start === [2025-09-09 22:09:15][350039933660486][0 ms][DEBUG] START check_scloud [2025-09-09 22:09:15][350039933660486][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:09:15][350039933660486][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 3384 23180 25102508 115616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:09:15][350039933660486][317 ms][DEBUG] targetPkg: running [2025-09-09 22:09:15][350039933660486][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 22:09:15][350039933660486][317 ms][DEBUG] START check_boot_completed [2025-09-09 22:09:15][350039933660486][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:09:15][350039933660486][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:09:15][350039933660486][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:09:15][350039933660486][411 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 22:09:15][350039933660486][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 22:09:15][350039933660486][411 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:09:15][350039933660486][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039933660486\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4165\"}'\'' -e'"" [2025-09-09 22:09:15][350039933660486][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:09:15][350039933660486][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039933660486\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4165\"}'\'' -e'"" [2025-09-09 22:09:20][350039933660486][4815 ms][DEBUG] proc_open done in 4403 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 22:09:20][350039933660486][4815 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-09-09 22:09:20][350039933660486][4815 ms][WARN] Detected error: Process with pid 3384 either refused to load frida-agent, or terminated during injectionProcess with pid 3384 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 22:09:20][350039933660486][4815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 22:09:20][350039933660486][5080 ms][DEBUG] SU: done in 265 ms; outsystem 23381 23180 12595112 185740 ep_poll 0 S system_server\n [2025-09-09 22:09:20][350039933660486][5081 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 22:09:20][350039933660486][5223 ms][DEBUG] SU: done in 142 ms; out [2025-09-09 22:09:20][350039933660486][5223 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 22:09:20][350039933660486][5223 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 22:09:20][350039933660486][5362 ms][DEBUG] SU: done in 139 ms; out [2025-09-09 22:09:20][350039933660486][5362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 22:09:21][350039933660486][5643 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 22:09:23][350039933660486][7658 ms][DEBUG] START check_boot_completed [2025-09-09 22:09:23][350039933660486][7658 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:09:23][350039933660486][7705 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:09:23][350039933660486][7705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:09:23][350039933660486][7752 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:09:23][350039933660486][7752 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 22:09:26][350039933660486][10766 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 22:09:26][350039933660486][10766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039933660486\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4165\"}'\'' -e'"" [2025-09-09 22:09:30][350039933660486][14641 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e95a6b6e-ac2d-4224-a804-76acae8e7fbd","id":"QR_e95a6b6e-ac2d-4224-a804-76acae8e7fbd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:09:30][350039933660486][14797 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-09 22:09:30][350039933660486][14797 ms][DEBUG] END runCmdUntilRes#2 in 4031 ms [2025-09-09 22:09:30][350039933660486][14797 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:12:03][351477972738632][1 ms][INFO] === Request start === [2025-09-09 22:12:03][351477972738632][1 ms][DEBUG] START check_scloud [2025-09-09 22:12:03][351477972738632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:12:03][351477972738632][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 8311 23180 23563660 127968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:12:03][351477972738632][309 ms][DEBUG] targetPkg: running [2025-09-09 22:12:03][351477972738632][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-09 22:12:03][351477972738632][310 ms][DEBUG] START check_boot_completed [2025-09-09 22:12:03][351477972738632][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:12:03][351477972738632][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:12:03][351477972738632][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:12:03][351477972738632][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:12:03][351477972738632][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 22:12:03][351477972738632][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:12:04][351477972738632][512 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3381\nsuccessfulTxPacketsPerSecond: 0.18901123070367162\nretriedTxPackets: 627\nretriedTxPacketsPerSecond: 0.0721679244504928\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3627\nsuccessfulRxPacketsPerSecond: 0.16151868805586483\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:12:04][351477972738632][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:12:05][351477972738632][1902 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.528/305.528/305.528/0.000 ms\n [2025-09-09 22:12:05][351477972738632][1903 ms][DEBUG] check_internet: online [2025-09-09 22:12:05][351477972738632][1903 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:12:05][351477972738632][1903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972738632\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8456\"}'\'' -e'"" [2025-09-09 22:12:05][351477972738632][1903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:12:05][351477972738632][1903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972738632\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8456\"}'\'' -e'"" [2025-09-09 22:12:09][351477972738632][5604 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_655f7807-38fb-49de-85a0-5ba554f16e8a","id":"QR_655f7807-38fb-49de-85a0-5ba554f16e8a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:12:09][351477972738632][5761 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-09 22:12:09][351477972738632][5761 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-09 22:12:09][351477972738632][5761 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:12:11][351477972738632][0 ms][INFO] === Request start === [2025-09-09 22:12:11][351477972738632][1 ms][DEBUG] START check_scloud [2025-09-09 22:12:11][351477972738632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:12:11][351477972738632][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 8311 23180 23728660 138348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:12:11][351477972738632][290 ms][DEBUG] targetPkg: running [2025-09-09 22:12:11][351477972738632][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 22:12:11][351477972738632][290 ms][DEBUG] START check_boot_completed [2025-09-09 22:12:11][351477972738632][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:12:11][351477972738632][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 22:12:11][351477972738632][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:12:11][351477972738632][384 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 22:12:11][351477972738632][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 22:12:11][351477972738632][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:12:12][351477972738632][509 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3381\nsuccessfulTxPacketsPerSecond: 0.18901123070367162\nretriedTxPackets: 627\nretriedTxPacketsPerSecond: 0.0721679244504928\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3627\nsuccessfulRxPacketsPerSecond: 0.16151868805586483\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:12:12][351477972738632][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:12:12][351477972738632][884 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.158/278.158/278.158/0.000 ms\n [2025-09-09 22:12:12][351477972738632][884 ms][DEBUG] check_internet: online [2025-09-09 22:12:12][351477972738632][884 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:12:12][351477972738632][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972738632\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4213\"}'\'' -e'"" [2025-09-09 22:12:12][351477972738632][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:12:12][351477972738632][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972738632\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4213\"}'\'' -e'"" [2025-09-09 22:12:17][351477972738632][5929 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a565f3c-6d1f-4d15-91cf-9b6ca1f3b213","id":"QR_3a565f3c-6d1f-4d15-91cf-9b6ca1f3b213","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:12:17][351477972738632][6085 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-09 22:12:17][351477972738632][6086 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-09 22:12:17][351477972738632][6086 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:13:04][350776860180489][0 ms][INFO] === Request start === [2025-09-09 22:13:04][350776860180489][1 ms][DEBUG] START check_scloud [2025-09-09 22:13:04][350776860180489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:13:04][350776860180489][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 8311 23180 23881620 150308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:13:04][350776860180489][257 ms][DEBUG] targetPkg: running [2025-09-09 22:13:04][350776860180489][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 22:13:04][350776860180489][257 ms][DEBUG] START check_boot_completed [2025-09-09 22:13:04][350776860180489][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:13:04][350776860180489][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:13:04][350776860180489][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:13:04][350776860180489][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:13:04][350776860180489][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 22:13:04][350776860180489][350 ms][DEBUG] rawBody.length=1161 [2025-09-09 22:13:04][350776860180489][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350776860180489\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5669\"}'\'' -e'"" [2025-09-09 22:13:04][350776860180489][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:13:04][350776860180489][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350776860180489\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5669\"}'\'' -e'"" [2025-09-09 22:13:09][350776860180489][4755 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_810adf52-07a7-496d-90e1-300fd6d1bab2","id":"QR_810adf52-07a7-496d-90e1-300fd6d1bab2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:13:09][350776860180489][4911 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-09 22:13:09][350776860180489][4911 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-09 22:13:09][350776860180489][4911 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:13:12][350776860180489][0 ms][INFO] === Request start === [2025-09-09 22:13:12][350776860180489][1 ms][DEBUG] START check_scloud [2025-09-09 22:13:12][350776860180489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:13:13][350776860180489][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 8311 23180 24039480 161364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:13:13][350776860180489][316 ms][DEBUG] targetPkg: running [2025-09-09 22:13:13][350776860180489][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 22:13:13][350776860180489][317 ms][DEBUG] START check_boot_completed [2025-09-09 22:13:13][350776860180489][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:13:13][350776860180489][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 22:13:13][350776860180489][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:13:13][350776860180489][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:13:13][350776860180489][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 22:13:13][350776860180489][395 ms][DEBUG] rawBody.length=1151 [2025-09-09 22:13:13][350776860180489][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350776860180489\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8347\"}'\'' -e'"" [2025-09-09 22:13:13][350776860180489][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:13:13][350776860180489][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350776860180489\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8347\"}'\'' -e'"" [2025-09-09 22:13:17][350776860180489][4925 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f988f4cc-af2d-4abb-9e1d-89bf57d9278b","id":"QR_f988f4cc-af2d-4abb-9e1d-89bf57d9278b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:13:17][350776860180489][5081 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-09 22:13:17][350776860180489][5081 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-09 22:13:17][350776860180489][5081 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:13:19][359156944629085][0 ms][INFO] === Request start === [2025-09-09 22:13:19][359156944629085][1 ms][DEBUG] START check_scloud [2025-09-09 22:13:19][359156944629085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:13:20][359156944629085][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 8311 23180 24183936 173016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:13:20][359156944629085][314 ms][DEBUG] targetPkg: running [2025-09-09 22:13:20][359156944629085][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 22:13:20][359156944629085][314 ms][DEBUG] START check_boot_completed [2025-09-09 22:13:20][359156944629085][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:13:20][359156944629085][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:13:20][359156944629085][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:13:20][359156944629085][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 22:13:20][359156944629085][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 22:13:20][359156944629085][424 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:13:20][359156944629085][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944629085\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7737\"}'\'' -e'"" [2025-09-09 22:13:20][359156944629085][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:13:20][359156944629085][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944629085\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7737\"}'\'' -e'"" [2025-09-09 22:13:23][359156944629085][3719 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5379489e-1304-4745-bc95-a463b8526ed6","id":"QR_5379489e-1304-4745-bc95-a463b8526ed6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:13:23][359156944629085][3876 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-09 22:13:23][359156944629085][3876 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-09 22:13:23][359156944629085][3876 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:13:25][359156944629085][0 ms][INFO] === Request start === [2025-09-09 22:13:25][359156944629085][1 ms][DEBUG] START check_scloud [2025-09-09 22:13:25][359156944629085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:13:26][359156944629085][276 ms][DEBUG] SU: done in 276 ms; outu0_a118 8311 23180 24307940 184132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:13:26][359156944629085][276 ms][DEBUG] targetPkg: running [2025-09-09 22:13:26][359156944629085][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-09 22:13:26][359156944629085][277 ms][DEBUG] START check_boot_completed [2025-09-09 22:13:26][359156944629085][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:13:26][359156944629085][323 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:13:26][359156944629085][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:13:26][359156944629085][385 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 22:13:26][359156944629085][386 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 22:13:26][359156944629085][386 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:13:26][359156944629085][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944629085\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1699\"}'\'' -e'"" [2025-09-09 22:13:26][359156944629085][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:13:26][359156944629085][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944629085\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1699\"}'\'' -e'"" [2025-09-09 22:13:30][359156944629085][4947 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb4a33d3-8b58-4242-8aab-25c8368d8a2a","id":"QR_eb4a33d3-8b58-4242-8aab-25c8368d8a2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:13:30][359156944629085][5103 ms][DEBUG] proc_open done in 4718 ms; code=255; res.len=3343 [2025-09-09 22:13:30][359156944629085][5103 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-09 22:13:30][359156944629085][5103 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:15:03][351877478582030][1 ms][INFO] === Request start === [2025-09-09 22:15:03][351877478582030][1 ms][DEBUG] START check_scloud [2025-09-09 22:15:03][351877478582030][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:15:03][351877478582030][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 8311 23180 24393024 196224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:15:03][351877478582030][313 ms][DEBUG] targetPkg: running [2025-09-09 22:15:03][351877478582030][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 22:15:03][351877478582030][313 ms][DEBUG] START check_boot_completed [2025-09-09 22:15:03][351877478582030][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:15:03][351877478582030][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:15:03][351877478582030][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:15:03][351877478582030][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:15:03][351877478582030][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 22:15:03][351877478582030][407 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:15:03][351877478582030][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877478582030\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2744\"}'\'' -e'"" [2025-09-09 22:15:03][351877478582030][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:15:03][351877478582030][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877478582030\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2744\"}'\'' -e'"" [2025-09-09 22:15:08][351877478582030][4905 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dca42a4e-4060-41ba-988d-f2a23b27a79e","id":"QR_dca42a4e-4060-41ba-988d-f2a23b27a79e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:15:08][351877478582030][5062 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-09 22:15:08][351877478582030][5062 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-09 22:15:08][351877478582030][5062 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:15:10][351877478582030][0 ms][INFO] === Request start === [2025-09-09 22:15:10][351877478582030][1 ms][DEBUG] START check_scloud [2025-09-09 22:15:10][351877478582030][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:15:11][351877478582030][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 8311 23180 24533576 207076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:15:11][351877478582030][313 ms][DEBUG] targetPkg: running [2025-09-09 22:15:11][351877478582030][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 22:15:11][351877478582030][313 ms][DEBUG] START check_boot_completed [2025-09-09 22:15:11][351877478582030][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:15:11][351877478582030][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:15:11][351877478582030][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:15:11][351877478582030][437 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 22:15:11][351877478582030][438 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 22:15:11][351877478582030][438 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:15:11][351877478582030][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877478582030\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4820\"}'\'' -e'"" [2025-09-09 22:15:11][351877478582030][438 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:15:11][351877478582030][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877478582030\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4820\"}'\'' -e'"" [2025-09-09 22:15:16][351877478582030][5249 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d83fa52-ad1b-4af2-9fa1-9ec71378944b","id":"QR_1d83fa52-ad1b-4af2-9fa1-9ec71378944b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:15:16][351877478582030][5405 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-09 22:15:16][351877478582030][5405 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-09 22:15:16][351877478582030][5405 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:24:04][352177390354165][1 ms][INFO] === Request start === [2025-09-09 22:24:04][352177390354165][1 ms][DEBUG] START check_scloud [2025-09-09 22:24:04][352177390354165][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:24:05][352177390354165][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 8311 23180 24615484 218472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:24:05][352177390354165][304 ms][DEBUG] targetPkg: running [2025-09-09 22:24:05][352177390354165][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 22:24:05][352177390354165][304 ms][DEBUG] START check_boot_completed [2025-09-09 22:24:05][352177390354165][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:24:05][352177390354165][349 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 22:24:05][352177390354165][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:24:05][352177390354165][427 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 22:24:05][352177390354165][428 ms][DEBUG] END check_boot_completed in 123 ms [2025-09-09 22:24:05][352177390354165][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:24:05][352177390354165][568 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3668\nsuccessfulTxPacketsPerSecond: 0.05974726905191042\nretriedTxPackets: 725\nretriedTxPacketsPerSecond: 0.05310868360169815\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3867\nsuccessfulRxPacketsPerSecond: 0.019915756350636808\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:24:05][352177390354165][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:24:06][352177390354165][2036 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.533/301.533/301.533/0.000 ms\n [2025-09-09 22:24:06][352177390354165][2036 ms][DEBUG] check_internet: online [2025-09-09 22:24:06][352177390354165][2036 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:24:06][352177390354165][2036 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177390354165\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6996\"}'\'' -e'"" [2025-09-09 22:24:06][352177390354165][2036 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:24:06][352177390354165][2036 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177390354165\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6996\"}'\'' -e'"" [2025-09-09 22:24:11][352177390354165][7082 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd87dc20-c7e3-4473-955f-7089b8e44893","id":"QR_cd87dc20-c7e3-4473-955f-7089b8e44893","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:24:12][352177390354165][7238 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 22:24:12][352177390354165][7238 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 22:24:12][352177390354165][7239 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:24:15][352177390354165][0 ms][INFO] === Request start === [2025-09-09 22:24:15][352177390354165][1 ms][DEBUG] START check_scloud [2025-09-09 22:24:15][352177390354165][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:24:15][352177390354165][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 8311 23180 24796048 230288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:24:15][352177390354165][311 ms][DEBUG] targetPkg: running [2025-09-09 22:24:15][352177390354165][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 22:24:15][352177390354165][311 ms][DEBUG] START check_boot_completed [2025-09-09 22:24:15][352177390354165][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:24:15][352177390354165][341 ms][DEBUG] ADB: done in 30 ms; out [2025-09-09 22:24:15][352177390354165][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:24:15][352177390354165][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:24:15][352177390354165][388 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-09 22:24:15][352177390354165][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:24:16][352177390354165][498 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3668\nsuccessfulTxPacketsPerSecond: 0.05974726905191042\nretriedTxPackets: 725\nretriedTxPacketsPerSecond: 0.05310868360169815\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3867\nsuccessfulRxPacketsPerSecond: 0.019915756350636808\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:24:16][352177390354165][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:24:16][352177390354165][857 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.353/251.353/251.353/0.000 ms\n [2025-09-09 22:24:16][352177390354165][857 ms][DEBUG] check_internet: online [2025-09-09 22:24:16][352177390354165][857 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:24:16][352177390354165][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177390354165\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8285\"}'\'' -e'"" [2025-09-09 22:24:16][352177390354165][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:24:16][352177390354165][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177390354165\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8285\"}'\'' -e'"" [2025-09-09 22:24:20][352177390354165][4465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_405bf1ca-ac1b-4902-89d3-c7265f3e933b","id":"QR_405bf1ca-ac1b-4902-89d3-c7265f3e933b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:24:20][352177390354165][4622 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-09 22:24:20][352177390354165][4622 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-09 22:24:20][352177390354165][4622 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:25:04][350455580735357][0 ms][INFO] === Request start === [2025-09-09 22:25:04][350455580735357][1 ms][DEBUG] START check_scloud [2025-09-09 22:25:04][350455580735357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:25:04][350455580735357][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 8311 23180 24899536 241456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:25:04][350455580735357][312 ms][DEBUG] targetPkg: running [2025-09-09 22:25:04][350455580735357][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 22:25:04][350455580735357][312 ms][DEBUG] START check_boot_completed [2025-09-09 22:25:04][350455580735357][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:25:04][350455580735357][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:25:04][350455580735357][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:25:04][350455580735357][437 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 22:25:04][350455580735357][437 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 22:25:04][350455580735357][437 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:25:04][350455580735357][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580735357\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8166\"}'\'' -e'"" [2025-09-09 22:25:04][350455580735357][437 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:25:04][350455580735357][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580735357\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8166\"}'\'' -e'"" [2025-09-09 22:25:09][350455580735357][4904 ms][DEBUG] proc_open done in 4467 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-09 22:25:09][350455580735357][4904 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-09 22:25:09][350455580735357][4904 ms][WARN] Detected error: Process with pid 8311 either refused to load frida-agent, or terminated during injectionProcess with pid 8311 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 22:25:09][350455580735357][4904 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 22:25:09][350455580735357][5201 ms][DEBUG] SU: done in 297 ms; outsystem 23381 23180 12629124 184584 ep_poll 0 S system_server\n [2025-09-09 22:25:09][350455580735357][5202 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 22:25:09][350455580735357][5342 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 22:25:09][350455580735357][5342 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 22:25:09][350455580735357][5342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 22:25:09][350455580735357][5482 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 22:25:09][350455580735357][5482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 22:25:10][350455580735357][5654 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 22:25:12][350455580735357][7669 ms][DEBUG] START check_boot_completed [2025-09-09 22:25:12][350455580735357][7669 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:25:12][350455580735357][7716 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:25:12][350455580735357][7716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:25:12][350455580735357][7764 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 22:25:12][350455580735357][7765 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 22:25:15][350455580735357][10778 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 22:25:15][350455580735357][10778 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580735357\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8166\"}'\'' -e'"" [2025-09-09 22:25:20][350455580735357][16323 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27278637-103c-4819-a16d-78b4dba2a193","id":"QR_27278637-103c-4819-a16d-78b4dba2a193","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:25:20][350455580735357][16480 ms][DEBUG] proc_open done in 5702 ms; code=255; res.len=3343 [2025-09-09 22:25:20][350455580735357][16480 ms][DEBUG] END runCmdUntilRes#2 in 5702 ms [2025-09-09 22:25:20][350455580735357][16480 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:25:24][350455580735357][0 ms][INFO] === Request start === [2025-09-09 22:25:24][350455580735357][1 ms][DEBUG] START check_scloud [2025-09-09 22:25:24][350455580735357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:25:24][350455580735357][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 10027 23180 23650016 124556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:25:24][350455580735357][244 ms][DEBUG] targetPkg: running [2025-09-09 22:25:24][350455580735357][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-09 22:25:24][350455580735357][244 ms][DEBUG] START check_boot_completed [2025-09-09 22:25:24][350455580735357][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:25:24][350455580735357][290 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:25:24][350455580735357][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:25:24][350455580735357][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:25:24][350455580735357][337 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 22:25:24][350455580735357][337 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:25:24][350455580735357][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580735357\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9372\"}'\'' -e'"" [2025-09-09 22:25:24][350455580735357][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:25:24][350455580735357][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580735357\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9372\"}'\'' -e'"" [2025-09-09 22:25:28][350455580735357][4133 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4f65cfc-9358-41fc-8456-dd802dd0652c","id":"QR_c4f65cfc-9358-41fc-8456-dd802dd0652c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:25:28][350455580735357][4289 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-09 22:25:28][350455580735357][4290 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-09 22:25:28][350455580735357][4290 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:34:04][356241329567358][1 ms][INFO] === Request start === [2025-09-09 22:34:04][356241329567358][1 ms][DEBUG] START check_scloud [2025-09-09 22:34:04][356241329567358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:34:04][356241329567358][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 10027 23180 23655908 138616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:34:04][356241329567358][263 ms][DEBUG] targetPkg: running [2025-09-09 22:34:04][356241329567358][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-09 22:34:04][356241329567358][264 ms][DEBUG] START check_boot_completed [2025-09-09 22:34:04][356241329567358][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:34:04][356241329567358][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 22:34:04][356241329567358][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:34:04][356241329567358][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:34:04][356241329567358][342 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 22:34:04][356241329567358][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:34:04][356241329567358][482 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3833\nsuccessfulTxPacketsPerSecond: 0.312179458591562\nretriedTxPackets: 777\nretriedTxPacketsPerSecond: 0.13379119653221444\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4011\nsuccessfulRxPacketsPerSecond: 0.2824480815804711\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:34:04][356241329567358][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:34:06][356241329567358][1906 ms][DEBUG] SU: done in 1423 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.372/299.372/299.372/0.000 ms\n [2025-09-09 22:34:06][356241329567358][1906 ms][DEBUG] check_internet: online [2025-09-09 22:34:06][356241329567358][1906 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:34:06][356241329567358][1906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241329567358\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9184\"}'\'' -e'"" [2025-09-09 22:34:06][356241329567358][1906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:34:06][356241329567358][1906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241329567358\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9184\"}'\'' -e'"" [2025-09-09 22:34:11][356241329567358][6746 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4808e712-bf8f-4b35-9a78-979f24b92908","id":"QR_4808e712-bf8f-4b35-9a78-979f24b92908","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:34:11][356241329567358][6902 ms][DEBUG] proc_open done in 4996 ms; code=255; res.len=3343 [2025-09-09 22:34:11][356241329567358][6902 ms][DEBUG] END runCmdUntilRes#1 in 4996 ms [2025-09-09 22:34:11][356241329567358][6903 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:34:14][356241329567358][0 ms][INFO] === Request start === [2025-09-09 22:34:14][356241329567358][1 ms][DEBUG] START check_scloud [2025-09-09 22:34:14][356241329567358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:34:15][356241329567358][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 10027 23180 23855096 150588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:34:15][356241329567358][308 ms][DEBUG] targetPkg: running [2025-09-09 22:34:15][356241329567358][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-09 22:34:15][356241329567358][308 ms][DEBUG] START check_boot_completed [2025-09-09 22:34:15][356241329567358][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:34:15][356241329567358][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:34:15][356241329567358][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:34:15][356241329567358][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:34:15][356241329567358][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 22:34:15][356241329567358][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:34:15][356241329567358][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3833\nsuccessfulTxPacketsPerSecond: 0.312179458591562\nretriedTxPackets: 777\nretriedTxPacketsPerSecond: 0.13379119653221444\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4011\nsuccessfulRxPacketsPerSecond: 0.2824480815804711\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:34:15][356241329567358][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:34:15][356241329567358][870 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.050/250.050/250.050/0.000 ms\n [2025-09-09 22:34:15][356241329567358][870 ms][DEBUG] check_internet: online [2025-09-09 22:34:15][356241329567358][870 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:34:15][356241329567358][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241329567358\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-09-09 22:34:15][356241329567358][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:34:15][356241329567358][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241329567358\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-09-09 22:34:19][356241329567358][4400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d232c446-44f6-4a5c-b5ae-e0e52dab5ce6","id":"QR_d232c446-44f6-4a5c-b5ae-e0e52dab5ce6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:34:19][356241329567358][4556 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-09 22:34:19][356241329567358][4556 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-09 22:34:19][356241329567358][4556 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:35:04][354420570355547][0 ms][INFO] === Request start === [2025-09-09 22:35:04][354420570355547][1 ms][DEBUG] START check_scloud [2025-09-09 22:35:04][354420570355547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:35:05][354420570355547][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 10027 23180 23971952 161652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:35:05][354420570355547][319 ms][DEBUG] targetPkg: running [2025-09-09 22:35:05][354420570355547][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 22:35:05][354420570355547][320 ms][DEBUG] START check_boot_completed [2025-09-09 22:35:05][354420570355547][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:35:05][354420570355547][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:35:05][354420570355547][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:35:05][354420570355547][460 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 22:35:05][354420570355547][460 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 22:35:05][354420570355547][460 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:35:05][354420570355547][460 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420570355547\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2793\"}'\'' -e'"" [2025-09-09 22:35:05][354420570355547][460 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:35:05][354420570355547][460 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420570355547\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2793\"}'\'' -e'"" [2025-09-09 22:35:09][354420570355547][5068 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4b1effc-eca9-4824-bfb7-a976bb6463fc","id":"QR_a4b1effc-eca9-4824-bfb7-a976bb6463fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:35:10][354420570355547][5224 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-09 22:35:10][354420570355547][5224 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-09 22:35:10][354420570355547][5224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:35:13][354420570355547][0 ms][INFO] === Request start === [2025-09-09 22:35:13][354420570355547][1 ms][DEBUG] START check_scloud [2025-09-09 22:35:13][354420570355547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:35:13][354420570355547][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 10027 23180 24108408 172428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:35:13][354420570355547][256 ms][DEBUG] targetPkg: running [2025-09-09 22:35:13][354420570355547][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-09 22:35:13][354420570355547][256 ms][DEBUG] START check_boot_completed [2025-09-09 22:35:13][354420570355547][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:35:13][354420570355547][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 22:35:13][354420570355547][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:35:13][354420570355547][335 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 22:35:13][354420570355547][336 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 22:35:13][354420570355547][336 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:35:13][354420570355547][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420570355547\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8321\"}'\'' -e'"" [2025-09-09 22:35:13][354420570355547][336 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:35:13][354420570355547][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420570355547\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8321\"}'\'' -e'"" [2025-09-09 22:35:17][354420570355547][4380 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea60f40f-df72-4509-ba85-e02acc7a281a","id":"QR_ea60f40f-df72-4509-ba85-e02acc7a281a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:35:18][354420570355547][4537 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-09-09 22:35:18][354420570355547][4537 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-09-09 22:35:18][354420570355547][4537 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:38:04][357973100124368][0 ms][INFO] === Request start === [2025-09-09 22:38:04][357973100124368][0 ms][DEBUG] START check_scloud [2025-09-09 22:38:04][357973100124368][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:38:05][357973100124368][263 ms][DEBUG] SU: done in 263 ms; outu0_a118 10027 23180 24218104 184404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:38:05][357973100124368][263 ms][DEBUG] targetPkg: running [2025-09-09 22:38:05][357973100124368][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-09 22:38:05][357973100124368][263 ms][DEBUG] START check_boot_completed [2025-09-09 22:38:05][357973100124368][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:38:05][357973100124368][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:38:05][357973100124368][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:38:05][357973100124368][358 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 22:38:05][357973100124368][358 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 22:38:05][357973100124368][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:38:05][357973100124368][482 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3929\nsuccessfulTxPacketsPerSecond: 0.31601192945033674\nretriedTxPackets: 808\nretriedTxPacketsPerSecond: 0.10204551888500457\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4097\nsuccessfulRxPacketsPerSecond: 0.2830940201325933\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:38:05][357973100124368][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:38:06][357973100124368][1934 ms][DEBUG] SU: done in 1452 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=406 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 406.377/406.377/406.377/0.000 ms\n [2025-09-09 22:38:06][357973100124368][1934 ms][DEBUG] check_internet: online [2025-09-09 22:38:06][357973100124368][1935 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:38:06][357973100124368][1935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357973100124368\",\"model\":\"SM-A305G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1331\"}'\'' -e'"" [2025-09-09 22:38:06][357973100124368][1935 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:38:06][357973100124368][1935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357973100124368\",\"model\":\"SM-A305G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1331\"}'\'' -e'"" [2025-09-09 22:38:11][357973100124368][6777 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c052e7d7-e4cc-471d-80a4-6a7817d9eef7","id":"QR_c052e7d7-e4cc-471d-80a4-6a7817d9eef7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:38:11][357973100124368][6933 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 22:38:11][357973100124368][6933 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 22:38:11][357973100124368][6933 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:38:15][357973100124368][0 ms][INFO] === Request start === [2025-09-09 22:38:15][357973100124368][1 ms][DEBUG] START check_scloud [2025-09-09 22:38:15][357973100124368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:38:15][357973100124368][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 10027 23180 24362752 195136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:38:15][357973100124368][280 ms][DEBUG] targetPkg: running [2025-09-09 22:38:15][357973100124368][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-09 22:38:15][357973100124368][280 ms][DEBUG] START check_boot_completed [2025-09-09 22:38:15][357973100124368][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:38:15][357973100124368][326 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:38:15][357973100124368][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:38:15][357973100124368][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 22:38:15][357973100124368][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 22:38:15][357973100124368][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:38:15][357973100124368][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3929\nsuccessfulTxPacketsPerSecond: 0.31601192945033674\nretriedTxPackets: 808\nretriedTxPacketsPerSecond: 0.10204551888500457\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4097\nsuccessfulRxPacketsPerSecond: 0.2830940201325933\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:38:15][357973100124368][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:38:16][357973100124368][891 ms][DEBUG] SU: done in 377 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.689/277.689/277.689/0.000 ms\n [2025-09-09 22:38:16][357973100124368][891 ms][DEBUG] check_internet: online [2025-09-09 22:38:16][357973100124368][891 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:38:16][357973100124368][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357973100124368\",\"model\":\"SM-A305G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2332\"}'\'' -e'"" [2025-09-09 22:38:16][357973100124368][891 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:38:16][357973100124368][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357973100124368\",\"model\":\"SM-A305G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2332\"}'\'' -e'"" [2025-09-09 22:38:19][357973100124368][4513 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b3ca9f8-88d5-4c4e-905f-7c6620e65b88","id":"QR_4b3ca9f8-88d5-4c4e-905f-7c6620e65b88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:38:20][357973100124368][4669 ms][DEBUG] proc_open done in 3778 ms; code=255; res.len=3343 [2025-09-09 22:38:20][357973100124368][4669 ms][DEBUG] END runCmdUntilRes#1 in 3778 ms [2025-09-09 22:38:20][357973100124368][4669 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:39:04][358543583668543][0 ms][INFO] === Request start === [2025-09-09 22:39:04][358543583668543][1 ms][DEBUG] START check_scloud [2025-09-09 22:39:04][358543583668543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:39:04][358543583668543][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 10027 23180 24505280 205912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:39:04][358543583668543][311 ms][DEBUG] targetPkg: running [2025-09-09 22:39:04][358543583668543][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-09 22:39:04][358543583668543][311 ms][DEBUG] START check_boot_completed [2025-09-09 22:39:04][358543583668543][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:39:04][358543583668543][356 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 22:39:04][358543583668543][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:39:04][358543583668543][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:39:04][358543583668543][404 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 22:39:04][358543583668543][404 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:39:04][358543583668543][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583668543\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7914\"}'\'' -e'"" [2025-09-09 22:39:04][358543583668543][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:39:04][358543583668543][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583668543\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7914\"}'\'' -e'"" [2025-09-09 22:39:09][358543583668543][5027 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de1f1719-723d-434a-bdb9-38bc82a60067","id":"QR_de1f1719-723d-434a-bdb9-38bc82a60067","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:39:09][358543583668543][5183 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-09 22:39:09][358543583668543][5184 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-09 22:39:09][358543583668543][5184 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:39:13][358543583668543][1 ms][INFO] === Request start === [2025-09-09 22:39:13][358543583668543][1 ms][DEBUG] START check_scloud [2025-09-09 22:39:13][358543583668543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:39:13][358543583668543][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 10027 23180 24658120 216592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:39:13][358543583668543][290 ms][DEBUG] targetPkg: running [2025-09-09 22:39:13][358543583668543][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-09 22:39:13][358543583668543][290 ms][DEBUG] START check_boot_completed [2025-09-09 22:39:13][358543583668543][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:39:13][358543583668543][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:39:13][358543583668543][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:39:13][358543583668543][384 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 22:39:13][358543583668543][385 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 22:39:13][358543583668543][385 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:39:13][358543583668543][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583668543\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1479\"}'\'' -e'"" [2025-09-09 22:39:13][358543583668543][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:39:13][358543583668543][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583668543\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1479\"}'\'' -e'"" [2025-09-09 22:39:16][358543583668543][3663 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4bf0b01-e6d2-4997-9600-6f8e0a333e92","id":"QR_f4bf0b01-e6d2-4997-9600-6f8e0a333e92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:39:16][358543583668543][3820 ms][DEBUG] proc_open done in 3435 ms; code=255; res.len=3343 [2025-09-09 22:39:16][358543583668543][3820 ms][DEBUG] END runCmdUntilRes#1 in 3435 ms [2025-09-09 22:39:16][358543583668543][3820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:42:05][356034161962765][1 ms][INFO] === Request start === [2025-09-09 22:42:05][356034161962765][1 ms][DEBUG] START check_scloud [2025-09-09 22:42:05][356034161962765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:42:05][356034161962765][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 10027 23180 24797604 229268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:42:05][356034161962765][290 ms][DEBUG] targetPkg: running [2025-09-09 22:42:05][356034161962765][290 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 22:42:05][356034161962765][290 ms][DEBUG] START check_boot_completed [2025-09-09 22:42:05][356034161962765][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:42:05][356034161962765][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:42:05][356034161962765][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:42:05][356034161962765][413 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 22:42:05][356034161962765][413 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-09 22:42:05][356034161962765][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:42:05][356034161962765][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4041\nsuccessfulTxPacketsPerSecond: 0.08957213710344612\nretriedTxPackets: 845\nretriedTxPacketsPerSecond: 0.05971298703049571\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4191\nsuccessfulRxPacketsPerSecond: 0.05971566709755846\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:42:05][356034161962765][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:42:07][356034161962765][1913 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.635/301.635/301.635/0.000 ms\n [2025-09-09 22:42:07][356034161962765][1913 ms][DEBUG] check_internet: online [2025-09-09 22:42:07][356034161962765][1913 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:42:07][356034161962765][1913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356034161962765\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8582\"}'\'' -e'"" [2025-09-09 22:42:07][356034161962765][1914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:42:07][356034161962765][1914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356034161962765\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8582\"}'\'' -e'"" [2025-09-09 22:42:11][356034161962765][6756 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52f148b2-f13d-456c-b3b6-d226de1f0b3e","id":"QR_52f148b2-f13d-456c-b3b6-d226de1f0b3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:42:12][356034161962765][6912 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-09 22:42:12][356034161962765][6912 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-09 22:42:12][356034161962765][6912 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:42:15][356034161962765][0 ms][INFO] === Request start === [2025-09-09 22:42:15][356034161962765][1 ms][DEBUG] START check_scloud [2025-09-09 22:42:15][356034161962765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:42:15][356034161962765][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 10027 23180 24956588 240292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:42:15][356034161962765][315 ms][DEBUG] targetPkg: running [2025-09-09 22:42:15][356034161962765][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 22:42:15][356034161962765][315 ms][DEBUG] START check_boot_completed [2025-09-09 22:42:15][356034161962765][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:42:15][356034161962765][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:42:15][356034161962765][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:42:16][356034161962765][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:42:16][356034161962765][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 22:42:16][356034161962765][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:42:16][356034161962765][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4041\nsuccessfulTxPacketsPerSecond: 0.08957213710344612\nretriedTxPackets: 845\nretriedTxPacketsPerSecond: 0.05971298703049571\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4191\nsuccessfulRxPacketsPerSecond: 0.05971566709755846\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:42:16][356034161962765][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:42:16][356034161962765][940 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.690/315.690/315.690/0.000 ms\n [2025-09-09 22:42:16][356034161962765][940 ms][DEBUG] check_internet: online [2025-09-09 22:42:16][356034161962765][940 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:42:16][356034161962765][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356034161962765\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1174\"}'\'' -e'"" [2025-09-09 22:42:16][356034161962765][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:42:16][356034161962765][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356034161962765\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1174\"}'\'' -e'"" [2025-09-09 22:42:20][356034161962765][4626 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 22:42:20][356034161962765][4626 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-09 22:42:20][356034161962765][4626 ms][WARN] Detected error: Process with pid 10027 either refused to load frida-agent, or terminated during injectionProcess with pid 10027 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 22:42:20][356034161962765][4626 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 22:42:20][356034161962765][4939 ms][DEBUG] SU: done in 313 ms; outsystem 23381 23180 12634132 180484 ep_poll 0 S system_server\n [2025-09-09 22:42:20][356034161962765][4939 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 22:42:20][356034161962765][5095 ms][DEBUG] SU: done in 156 ms; out [2025-09-09 22:42:20][356034161962765][5095 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 22:42:20][356034161962765][5095 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 22:42:20][356034161962765][5236 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 22:42:20][356034161962765][5236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 22:42:20][356034161962765][5392 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 22:42:23][356034161962765][7407 ms][DEBUG] START check_boot_completed [2025-09-09 22:42:23][356034161962765][7407 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:42:23][356034161962765][7454 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:42:23][356034161962765][7454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:42:23][356034161962765][7501 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:42:23][356034161962765][7501 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 22:42:26][356034161962765][10516 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 22:42:26][356034161962765][10516 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356034161962765\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1174\"}'\'' -e'"" [2025-09-09 22:42:29][356034161962765][14030 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4fc780ef-548b-4a23-9113-56cf4d1abfd3","id":"QR_4fc780ef-548b-4a23-9113-56cf4d1abfd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:42:29][356034161962765][14187 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-09-09 22:42:29][356034161962765][14187 ms][DEBUG] END runCmdUntilRes#2 in 3671 ms [2025-09-09 22:42:29][356034161962765][14187 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:52:04][352749381757836][1 ms][INFO] === Request start === [2025-09-09 22:52:04][352749381757836][1 ms][DEBUG] START check_scloud [2025-09-09 22:52:04][352749381757836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:52:04][352749381757836][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 11976 23180 23601340 127680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:52:04][352749381757836][301 ms][DEBUG] targetPkg: running [2025-09-09 22:52:04][352749381757836][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-09 22:52:04][352749381757836][301 ms][DEBUG] START check_boot_completed [2025-09-09 22:52:04][352749381757836][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:52:04][352749381757836][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 22:52:04][352749381757836][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:52:04][352749381757836][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 22:52:04][352749381757836][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 22:52:04][352749381757836][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:52:05][352749381757836][520 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4117\nsuccessfulTxPacketsPerSecond: 0.023956685660902807\nretriedTxPackets: 879\nretriedTxPacketsPerSecond: 0.0479133472538873\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4256\nsuccessfulRxPacketsPerSecond: 0.04791334424539752\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:52:05][352749381757836][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:52:06][352749381757836][1941 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.679/300.679/300.679/0.000 ms\n [2025-09-09 22:52:06][352749381757836][1941 ms][DEBUG] check_internet: online [2025-09-09 22:52:06][352749381757836][1941 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:52:06][352749381757836][1941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381757836\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5824\"}'\'' -e'"" [2025-09-09 22:52:06][352749381757836][1941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:52:06][352749381757836][1941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381757836\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5824\"}'\'' -e'"" [2025-09-09 22:52:11][352749381757836][7096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dc8d898-488a-496b-9581-523b122ecc42","id":"QR_6dc8d898-488a-496b-9581-523b122ecc42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:52:11][352749381757836][7253 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-09 22:52:11][352749381757836][7253 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-09 22:52:11][352749381757836][7253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:52:15][352749381757836][0 ms][INFO] === Request start === [2025-09-09 22:52:15][352749381757836][1 ms][DEBUG] START check_scloud [2025-09-09 22:52:15][352749381757836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:52:15][352749381757836][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11976 23180 23742864 138456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:52:15][352749381757836][321 ms][DEBUG] targetPkg: running [2025-09-09 22:52:15][352749381757836][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-09 22:52:15][352749381757836][321 ms][DEBUG] START check_boot_completed [2025-09-09 22:52:15][352749381757836][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:52:15][352749381757836][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:52:15][352749381757836][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:52:15][352749381757836][430 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 22:52:15][352749381757836][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 22:52:15][352749381757836][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:52:15][352749381757836][555 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4117\nsuccessfulTxPacketsPerSecond: 0.023956685660902807\nretriedTxPackets: 879\nretriedTxPacketsPerSecond: 0.0479133472538873\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4256\nsuccessfulRxPacketsPerSecond: 0.04791334424539752\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:52:15][352749381757836][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:52:16][352749381757836][977 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.507/285.507/285.507/0.000 ms\n [2025-09-09 22:52:16][352749381757836][977 ms][DEBUG] check_internet: online [2025-09-09 22:52:16][352749381757836][977 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:52:16][352749381757836][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381757836\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2142\"}'\'' -e'"" [2025-09-09 22:52:16][352749381757836][977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:52:16][352749381757836][978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381757836\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2142\"}'\'' -e'"" [2025-09-09 22:52:20][352749381757836][4804 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78f88201-2c51-483b-b731-0178f2e7756d","id":"QR_78f88201-2c51-483b-b731-0178f2e7756d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:52:20][352749381757836][4960 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-09 22:52:20][352749381757836][4960 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-09 22:52:20][352749381757836][4960 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:57:04][356697216358161][1 ms][INFO] === Request start === [2025-09-09 22:57:04][356697216358161][1 ms][DEBUG] START check_scloud [2025-09-09 22:57:04][356697216358161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:57:05][356697216358161][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11976 23180 23889488 149692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:57:05][356697216358161][313 ms][DEBUG] targetPkg: running [2025-09-09 22:57:05][356697216358161][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 22:57:05][356697216358161][313 ms][DEBUG] START check_boot_completed [2025-09-09 22:57:05][356697216358161][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:57:05][356697216358161][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:57:05][356697216358161][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:57:05][356697216358161][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 22:57:05][356697216358161][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 22:57:05][356697216358161][422 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:57:05][356697216358161][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697216358161\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4065\"}'\'' -e'"" [2025-09-09 22:57:05][356697216358161][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:57:05][356697216358161][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697216358161\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4065\"}'\'' -e'"" [2025-09-09 22:57:11][356697216358161][6186 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd091894-9784-414c-9863-f7f6a86b30e4","id":"QR_cd091894-9784-414c-9863-f7f6a86b30e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:57:11][356697216358161][6343 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-09 22:57:11][356697216358161][6343 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-09 22:57:11][356697216358161][6343 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:57:14][356697216358161][0 ms][INFO] === Request start === [2025-09-09 22:57:14][356697216358161][1 ms][DEBUG] START check_scloud [2025-09-09 22:57:14][356697216358161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:57:15][356697216358161][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 11976 23180 24046296 161736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:57:15][356697216358161][316 ms][DEBUG] targetPkg: running [2025-09-09 22:57:15][356697216358161][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 22:57:15][356697216358161][316 ms][DEBUG] START check_boot_completed [2025-09-09 22:57:15][356697216358161][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:57:15][356697216358161][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:57:15][356697216358161][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:57:15][356697216358161][411 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 22:57:15][356697216358161][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-09 22:57:15][356697216358161][411 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:57:15][356697216358161][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697216358161\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7589\"}'\'' -e'"" [2025-09-09 22:57:15][356697216358161][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:57:15][356697216358161][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697216358161\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7589\"}'\'' -e'"" [2025-09-09 22:57:18][356697216358161][3940 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_388cca3f-045a-4d65-a834-fb2b591e0ec2","id":"QR_388cca3f-045a-4d65-a834-fb2b591e0ec2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:57:18][356697216358161][4096 ms][DEBUG] proc_open done in 3685 ms; code=255; res.len=3343 [2025-09-09 22:57:18][356697216358161][4096 ms][DEBUG] END runCmdUntilRes#1 in 3685 ms [2025-09-09 22:57:18][356697216358161][4096 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:58:03][355472980021960][0 ms][INFO] === Request start === [2025-09-09 22:58:03][355472980021960][1 ms][DEBUG] START check_scloud [2025-09-09 22:58:03][355472980021960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:58:04][355472980021960][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11976 23180 24133404 173268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:58:04][355472980021960][320 ms][DEBUG] targetPkg: running [2025-09-09 22:58:04][355472980021960][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 22:58:04][355472980021960][320 ms][DEBUG] START check_boot_completed [2025-09-09 22:58:04][355472980021960][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:58:04][355472980021960][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:58:04][355472980021960][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:58:04][355472980021960][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 22:58:04][355472980021960][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 22:58:04][355472980021960][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:58:04][355472980021960][523 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4177\nsuccessfulTxPacketsPerSecond: 0.2312914156191093\nretriedTxPackets: 901\nretriedTxPacketsPerSecond: 0.08480685239367342\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4309\nsuccessfulRxPacketsPerSecond: 0.20430741713021322\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:58:04][355472980021960][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:58:05][355472980021960][2022 ms][DEBUG] SU: done in 1500 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.771/299.771/299.771/0.000 ms\n [2025-09-09 22:58:05][355472980021960][2022 ms][DEBUG] check_internet: online [2025-09-09 22:58:05][355472980021960][2022 ms][DEBUG] rawBody.length=1150 [2025-09-09 22:58:05][355472980021960][2022 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980021960\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5020\"}'\'' -e'"" [2025-09-09 22:58:05][355472980021960][2022 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:58:05][355472980021960][2022 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980021960\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5020\"}'\'' -e'"" [2025-09-09 22:58:08][355472980021960][5084 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b462d22-b0fc-48a1-9e74-cb4420037d40","id":"QR_5b462d22-b0fc-48a1-9e74-cb4420037d40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:58:09][355472980021960][5240 ms][DEBUG] proc_open done in 3218 ms; code=255; res.len=3343 [2025-09-09 22:58:09][355472980021960][5240 ms][DEBUG] END runCmdUntilRes#1 in 3218 ms [2025-09-09 22:58:09][355472980021960][5240 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:58:11][355472980021960][0 ms][INFO] === Request start === [2025-09-09 22:58:11][355472980021960][1 ms][DEBUG] START check_scloud [2025-09-09 22:58:11][355472980021960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:58:11][355472980021960][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 11976 23180 24277988 185052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:58:11][355472980021960][272 ms][DEBUG] targetPkg: running [2025-09-09 22:58:11][355472980021960][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-09 22:58:11][355472980021960][272 ms][DEBUG] START check_boot_completed [2025-09-09 22:58:11][355472980021960][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:58:11][355472980021960][319 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 22:58:11][355472980021960][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:58:11][355472980021960][412 ms][DEBUG] SU: done in 93 ms; out [2025-09-09 22:58:11][355472980021960][412 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-09 22:58:11][355472980021960][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:58:11][355472980021960][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4177\nsuccessfulTxPacketsPerSecond: 0.2312914156191093\nretriedTxPackets: 901\nretriedTxPacketsPerSecond: 0.08480685239367342\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4309\nsuccessfulRxPacketsPerSecond: 0.20430741713021322\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:58:11][355472980021960][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:58:12][355472980021960][944 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.826/291.826/291.826/0.000 ms\n [2025-09-09 22:58:12][355472980021960][944 ms][DEBUG] check_internet: online [2025-09-09 22:58:12][355472980021960][944 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:58:12][355472980021960][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980021960\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2202\"}'\'' -e'"" [2025-09-09 22:58:12][355472980021960][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:58:12][355472980021960][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980021960\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2202\"}'\'' -e'"" [2025-09-09 22:58:17][355472980021960][5989 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da5fc3f2-13d7-40ef-9de4-bcfe5ef19dc6","id":"QR_da5fc3f2-13d7-40ef-9de4-bcfe5ef19dc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:58:17][355472980021960][6145 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-09 22:58:17][355472980021960][6145 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-09 22:58:17][355472980021960][6145 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 22:58:22][355819215881990][0 ms][INFO] === Request start === [2025-09-09 22:58:22][355819215881990][1 ms][DEBUG] START check_scloud [2025-09-09 22:58:22][355819215881990][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 22:58:23][355819215881990][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 11976 23180 24457324 193856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 22:58:23][355819215881990][325 ms][DEBUG] targetPkg: running [2025-09-09 22:58:23][355819215881990][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-09 22:58:23][355819215881990][325 ms][DEBUG] START check_boot_completed [2025-09-09 22:58:23][355819215881990][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 22:58:23][355819215881990][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 22:58:23][355819215881990][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 22:58:23][355819215881990][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 22:58:23][355819215881990][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 22:58:23][355819215881990][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 22:58:23][355819215881990][559 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4177\nsuccessfulTxPacketsPerSecond: 0.2312914156191093\nretriedTxPackets: 901\nretriedTxPacketsPerSecond: 0.08480685239367342\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4309\nsuccessfulRxPacketsPerSecond: 0.20430741713021322\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 22:58:23][355819215881990][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 22:58:23][355819215881990][950 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.212/288.212/288.212/0.000 ms\n [2025-09-09 22:58:23][355819215881990][950 ms][DEBUG] check_internet: online [2025-09-09 22:58:23][355819215881990][950 ms][DEBUG] rawBody.length=1160 [2025-09-09 22:58:23][355819215881990][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819215881990\",\"model\":\"SM-P610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52NA0YMTQF\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8283\"}'\'' -e'"" [2025-09-09 22:58:23][355819215881990][950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 22:58:23][355819215881990][950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819215881990\",\"model\":\"SM-P610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52NA0YMTQF\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8283\"}'\'' -e'"" [2025-09-09 22:58:27][355819215881990][4855 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27616104-8b86-4dbb-9f36-ce6fb988c76a","id":"QR_27616104-8b86-4dbb-9f36-ce6fb988c76a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 22:58:27][355819215881990][5011 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-09 22:58:27][355819215881990][5011 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-09 22:58:27][355819215881990][5011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:02:04][350039936209695][1 ms][INFO] === Request start === [2025-09-09 23:02:04][350039936209695][1 ms][DEBUG] START check_scloud [2025-09-09 23:02:04][350039936209695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:02:04][350039936209695][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 11976 23180 24562824 204504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:02:04][350039936209695][278 ms][DEBUG] targetPkg: running [2025-09-09 23:02:04][350039936209695][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-09 23:02:04][350039936209695][278 ms][DEBUG] START check_boot_completed [2025-09-09 23:02:04][350039936209695][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:02:05][350039936209695][323 ms][DEBUG] ADB: done in 44 ms; out [2025-09-09 23:02:05][350039936209695][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:02:05][350039936209695][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:02:05][350039936209695][369 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-09 23:02:05][350039936209695][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:02:05][350039936209695][479 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4403\nsuccessfulTxPacketsPerSecond: 0.7756860187743474\nretriedTxPackets: 944\nretriedTxPacketsPerSecond: 0.14758627790839354\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4518\nsuccessfulRxPacketsPerSecond: 0.7173379554152152\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:02:05][350039936209695][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:02:05][350039936209695][885 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.618/294.618/294.618/0.000 ms\n [2025-09-09 23:02:05][350039936209695][885 ms][DEBUG] check_internet: online [2025-09-09 23:02:05][350039936209695][885 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:02:05][350039936209695][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039936209695\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7008\"}'\'' -e'"" [2025-09-09 23:02:05][350039936209695][885 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:02:05][350039936209695][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039936209695\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7008\"}'\'' -e'"" [2025-09-09 23:02:11][350039936209695][6618 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eed0ffc4-2bd2-4665-929e-e8ecaa4cb8e2","id":"QR_eed0ffc4-2bd2-4665-929e-e8ecaa4cb8e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:02:11][350039936209695][6774 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-09-09 23:02:11][350039936209695][6774 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-09-09 23:02:11][350039936209695][6774 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:02:14][350039936209695][0 ms][INFO] === Request start === [2025-09-09 23:02:14][350039936209695][1 ms][DEBUG] START check_scloud [2025-09-09 23:02:14][350039936209695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:02:15][350039936209695][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 11976 23180 24686864 216532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:02:15][350039936209695][315 ms][DEBUG] targetPkg: running [2025-09-09 23:02:15][350039936209695][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-09 23:02:15][350039936209695][315 ms][DEBUG] START check_boot_completed [2025-09-09 23:02:15][350039936209695][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:02:15][350039936209695][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 23:02:15][350039936209695][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:02:15][350039936209695][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 23:02:15][350039936209695][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 23:02:15][350039936209695][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:02:15][350039936209695][565 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4403\nsuccessfulTxPacketsPerSecond: 0.7756860187743474\nretriedTxPackets: 944\nretriedTxPacketsPerSecond: 0.14758627790839354\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4518\nsuccessfulRxPacketsPerSecond: 0.7173379554152152\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:02:15][350039936209695][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:02:16][350039936209695][1190 ms][DEBUG] SU: done in 625 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.981/304.981/304.981/0.000 ms\n [2025-09-09 23:02:16][350039936209695][1190 ms][DEBUG] check_internet: online [2025-09-09 23:02:16][350039936209695][1190 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:02:16][350039936209695][1190 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039936209695\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5470\"}'\'' -e'"" [2025-09-09 23:02:16][350039936209695][1190 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:02:16][350039936209695][1190 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039936209695\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5470\"}'\'' -e'"" [2025-09-09 23:02:19][350039936209695][4860 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1df1912-2764-4c5c-a2f9-9b9de493f279","id":"QR_a1df1912-2764-4c5c-a2f9-9b9de493f279","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:02:19][350039936209695][5017 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-09-09 23:02:19][350039936209695][5017 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-09 23:02:19][350039936209695][5017 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:20:03][352419250101629][1 ms][INFO] === Request start === [2025-09-09 23:20:03][352419250101629][1 ms][DEBUG] START check_scloud [2025-09-09 23:20:03][352419250101629][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:20:03][352419250101629][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 11976 23180 24776900 207688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:20:03][352419250101629][266 ms][DEBUG] targetPkg: running [2025-09-09 23:20:03][352419250101629][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-09 23:20:03][352419250101629][266 ms][DEBUG] START check_boot_completed [2025-09-09 23:20:03][352419250101629][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:20:03][352419250101629][297 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:20:03][352419250101629][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:20:03][352419250101629][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:20:03][352419250101629][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 23:20:03][352419250101629][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:20:03][352419250101629][469 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4619\nsuccessfulTxPacketsPerSecond: 0.029895664132178697\nretriedTxPackets: 1019\nretriedTxPacketsPerSecond: 0.023252183213916765\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4712\nsuccessfulRxPacketsPerSecond: 0.029895664132178697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:20:03][352419250101629][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:20:05][352419250101629][1906 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.713/300.713/300.713/0.000 ms\n [2025-09-09 23:20:05][352419250101629][1906 ms][DEBUG] check_internet: online [2025-09-09 23:20:05][352419250101629][1907 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:20:05][352419250101629][1907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419250101629\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2432\"}'\'' -e'"" [2025-09-09 23:20:05][352419250101629][1907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:20:05][352419250101629][1907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419250101629\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2432\"}'\'' -e'"" [2025-09-09 23:20:08][352419250101629][5562 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39d8883d-5fac-4b41-8b48-2541dee70b94","id":"QR_39d8883d-5fac-4b41-8b48-2541dee70b94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:20:08][352419250101629][5718 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-09 23:20:08][352419250101629][5718 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-09 23:20:08][352419250101629][5718 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:20:11][352419250101629][0 ms][INFO] === Request start === [2025-09-09 23:20:11][352419250101629][1 ms][DEBUG] START check_scloud [2025-09-09 23:20:11][352419250101629][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:20:11][352419250101629][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 11976 23180 24957464 196896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:20:11][352419250101629][294 ms][DEBUG] targetPkg: running [2025-09-09 23:20:11][352419250101629][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-09 23:20:11][352419250101629][294 ms][DEBUG] START check_boot_completed [2025-09-09 23:20:11][352419250101629][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:20:11][352419250101629][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:20:11][352419250101629][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:20:11][352419250101629][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:20:11][352419250101629][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 23:20:11][352419250101629][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:20:11][352419250101629][498 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4619\nsuccessfulTxPacketsPerSecond: 0.029895664132178697\nretriedTxPackets: 1019\nretriedTxPacketsPerSecond: 0.023252183213916765\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4712\nsuccessfulRxPacketsPerSecond: 0.029895664132178697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:20:11][352419250101629][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:20:12][352419250101629][904 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.856/297.856/297.856/0.000 ms\n [2025-09-09 23:20:12][352419250101629][904 ms][DEBUG] check_internet: online [2025-09-09 23:20:12][352419250101629][904 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:20:12][352419250101629][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419250101629\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6348\"}'\'' -e'"" [2025-09-09 23:20:12][352419250101629][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:20:12][352419250101629][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419250101629\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6348\"}'\'' -e'"" [2025-09-09 23:20:16][352419250101629][4856 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 23:20:16][352419250101629][4856 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-09 23:20:16][352419250101629][4856 ms][WARN] Detected error: Process with pid 11976 either refused to load frida-agent, or terminated during injectionProcess with pid 11976 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 23:20:16][352419250101629][4856 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 23:20:16][352419250101629][5121 ms][DEBUG] SU: done in 265 ms; outsystem 23381 23180 12727040 202672 ep_poll 0 S system_server\n [2025-09-09 23:20:16][352419250101629][5121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 23:20:16][352419250101629][5246 ms][DEBUG] SU: done in 125 ms; out [2025-09-09 23:20:16][352419250101629][5246 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 23:20:16][352419250101629][5246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 23:20:16][352419250101629][5357 ms][DEBUG] SU: done in 111 ms; out [2025-09-09 23:20:16][352419250101629][5357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 23:20:16][352419250101629][5543 ms][DEBUG] SU: done in 186 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 23:20:18][352419250101629][7558 ms][DEBUG] START check_boot_completed [2025-09-09 23:20:18][352419250101629][7558 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:20:18][352419250101629][7605 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 23:20:18][352419250101629][7605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:20:18][352419250101629][7652 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:20:18][352419250101629][7652 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 23:20:21][352419250101629][10667 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 23:20:21][352419250101629][10667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419250101629\",\"model\":\"SM-G525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6348\"}'\'' -e'"" [2025-09-09 23:20:26][352419250101629][15666 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63d96947-0ef8-493f-8ae1-6dab1624bebd","id":"QR_63d96947-0ef8-493f-8ae1-6dab1624bebd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:20:27][352419250101629][15822 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-09 23:20:27][352419250101629][15822 ms][DEBUG] END runCmdUntilRes#2 in 5155 ms [2025-09-09 23:20:27][352419250101629][15822 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:26:04][350824195036149][1 ms][INFO] === Request start === [2025-09-09 23:26:04][350824195036149][1 ms][DEBUG] START check_scloud [2025-09-09 23:26:04][350824195036149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:26:04][350824195036149][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 14753 23180 23591144 127676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:26:04][350824195036149][312 ms][DEBUG] targetPkg: running [2025-09-09 23:26:04][350824195036149][312 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 23:26:04][350824195036149][312 ms][DEBUG] START check_boot_completed [2025-09-09 23:26:04][350824195036149][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:26:04][350824195036149][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:26:04][350824195036149][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:26:05][350824195036149][390 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 23:26:05][350824195036149][390 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-09 23:26:05][350824195036149][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:26:05][350824195036149][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4706\nsuccessfulTxPacketsPerSecond: 0.2889376724908088\nretriedTxPackets: 1046\nretriedTxPacketsPerSecond: 0.08967031215231996\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4789\nsuccessfulRxPacketsPerSecond: 0.2557264457677273\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:26:05][350824195036149][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:26:06][350824195036149][1874 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.860/305.860/305.860/0.000 ms\n [2025-09-09 23:26:06][350824195036149][1874 ms][DEBUG] check_internet: online [2025-09-09 23:26:06][350824195036149][1874 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:26:06][350824195036149][1874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824195036149\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8478\"}'\'' -e'"" [2025-09-09 23:26:06][350824195036149][1874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:26:06][350824195036149][1874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824195036149\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8478\"}'\'' -e'"" [2025-09-09 23:26:11][350824195036149][7013 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efb21452-1892-49f6-8cf7-19e5111445c4","id":"QR_efb21452-1892-49f6-8cf7-19e5111445c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:26:11][350824195036149][7169 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-09 23:26:11][350824195036149][7169 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-09 23:26:11][350824195036149][7169 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:26:15][350824195036149][0 ms][INFO] === Request start === [2025-09-09 23:26:15][350824195036149][1 ms][DEBUG] START check_scloud [2025-09-09 23:26:15][350824195036149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:26:15][350824195036149][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 14753 23180 23739952 138736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:26:15][350824195036149][304 ms][DEBUG] targetPkg: running [2025-09-09 23:26:15][350824195036149][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 23:26:15][350824195036149][304 ms][DEBUG] START check_boot_completed [2025-09-09 23:26:15][350824195036149][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:26:15][350824195036149][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:26:15][350824195036149][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:26:15][350824195036149][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:26:15][350824195036149][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 23:26:15][350824195036149][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:26:15][350824195036149][538 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4706\nsuccessfulTxPacketsPerSecond: 0.2889376724908088\nretriedTxPackets: 1046\nretriedTxPacketsPerSecond: 0.08967031215231996\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4789\nsuccessfulRxPacketsPerSecond: 0.2557264457677273\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:26:15][350824195036149][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:26:16][350824195036149][944 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.292/268.292/268.292/0.000 ms\n [2025-09-09 23:26:16][350824195036149][945 ms][DEBUG] check_internet: online [2025-09-09 23:26:16][350824195036149][945 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:26:16][350824195036149][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824195036149\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2178\"}'\'' -e'"" [2025-09-09 23:26:16][350824195036149][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:26:16][350824195036149][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824195036149\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2178\"}'\'' -e'"" [2025-09-09 23:26:19][350824195036149][4568 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4e4cff4-0b67-4aad-bcb8-fe69e658982e","id":"QR_d4e4cff4-0b67-4aad-bcb8-fe69e658982e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:26:20][350824195036149][4725 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-09 23:26:20][350824195036149][4725 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-09 23:26:20][350824195036149][4725 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:27:04][350264682643117][0 ms][INFO] === Request start === [2025-09-09 23:27:04][350264682643117][1 ms][DEBUG] START check_scloud [2025-09-09 23:27:04][350264682643117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:27:04][350264682643117][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 14753 23180 23843440 150772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:27:04][350264682643117][304 ms][DEBUG] targetPkg: running [2025-09-09 23:27:04][350264682643117][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-09 23:27:04][350264682643117][304 ms][DEBUG] START check_boot_completed [2025-09-09 23:27:04][350264682643117][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:27:04][350264682643117][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 23:27:04][350264682643117][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:27:04][350264682643117][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:27:04][350264682643117][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 23:27:04][350264682643117][397 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:27:04][350264682643117][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350264682643117\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2854\"}'\'' -e'"" [2025-09-09 23:27:04][350264682643117][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:27:04][350264682643117][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350264682643117\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2854\"}'\'' -e'"" [2025-09-09 23:27:09][350264682643117][5162 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdbadfa3-c73b-4ce8-a06c-35c3863613b0","id":"QR_cdbadfa3-c73b-4ce8-a06c-35c3863613b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:27:09][350264682643117][5318 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-09 23:27:09][350264682643117][5318 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-09 23:27:09][350264682643117][5318 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:27:13][350264682643117][0 ms][INFO] === Request start === [2025-09-09 23:27:13][350264682643117][1 ms][DEBUG] START check_scloud [2025-09-09 23:27:13][350264682643117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:27:13][350264682643117][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 14753 23180 24022776 161680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:27:13][350264682643117][320 ms][DEBUG] targetPkg: running [2025-09-09 23:27:13][350264682643117][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-09 23:27:13][350264682643117][320 ms][DEBUG] START check_boot_completed [2025-09-09 23:27:13][350264682643117][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:27:13][350264682643117][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 23:27:13][350264682643117][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:27:13][350264682643117][414 ms][DEBUG] SU: done in 48 ms; out [2025-09-09 23:27:13][350264682643117][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 23:27:13][350264682643117][414 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:27:13][350264682643117][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350264682643117\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6166\"}'\'' -e'"" [2025-09-09 23:27:13][350264682643117][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:27:13][350264682643117][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350264682643117\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6166\"}'\'' -e'"" [2025-09-09 23:27:16][350264682643117][3725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_413a0aa3-0de5-4f42-8fdc-66068b6583d2","id":"QR_413a0aa3-0de5-4f42-8fdc-66068b6583d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:27:17][350264682643117][3881 ms][DEBUG] proc_open done in 3466 ms; code=255; res.len=3343 [2025-09-09 23:27:17][350264682643117][3881 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-09 23:27:17][350264682643117][3881 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:38:05][351924870405707][1 ms][INFO] === Request start === [2025-09-09 23:38:05][351924870405707][1 ms][DEBUG] START check_scloud [2025-09-09 23:38:05][351924870405707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:38:05][351924870405707][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 14753 23180 24135532 172708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:38:05][351924870405707][303 ms][DEBUG] targetPkg: running [2025-09-09 23:38:05][351924870405707][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 23:38:05][351924870405707][303 ms][DEBUG] START check_boot_completed [2025-09-09 23:38:05][351924870405707][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:38:05][351924870405707][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:38:05][351924870405707][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:38:05][351924870405707][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:38:05][351924870405707][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 23:38:05][351924870405707][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:38:05][351924870405707][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4837\nsuccessfulTxPacketsPerSecond: 0.035755846080834215\nretriedTxPackets: 1100\nretriedTxPacketsPerSecond: 0.029254783157046178\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4898\nsuccessfulRxPacketsPerSecond: 0.026004251695152157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:38:05][351924870405707][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:38:07][351924870405707][1913 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.331/303.331/303.331/0.000 ms\n [2025-09-09 23:38:07][351924870405707][1913 ms][DEBUG] check_internet: online [2025-09-09 23:38:07][351924870405707][1913 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:38:07][351924870405707][1913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924870405707\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2020\"}'\'' -e'"" [2025-09-09 23:38:07][351924870405707][1913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:38:07][351924870405707][1914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924870405707\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2020\"}'\'' -e'"" [2025-09-09 23:38:11][351924870405707][6567 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_594e9ca7-2a2f-427d-b976-aaa48a9544a9","id":"QR_594e9ca7-2a2f-427d-b976-aaa48a9544a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:38:11][351924870405707][6724 ms][DEBUG] proc_open done in 4810 ms; code=255; res.len=3343 [2025-09-09 23:38:11][351924870405707][6724 ms][DEBUG] END runCmdUntilRes#1 in 4810 ms [2025-09-09 23:38:11][351924870405707][6724 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:38:15][351924870405707][0 ms][INFO] === Request start === [2025-09-09 23:38:15][351924870405707][1 ms][DEBUG] START check_scloud [2025-09-09 23:38:15][351924870405707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:38:15][351924870405707][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 14753 23180 24301760 184544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:38:15][351924870405707][310 ms][DEBUG] targetPkg: running [2025-09-09 23:38:15][351924870405707][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-09 23:38:15][351924870405707][310 ms][DEBUG] START check_boot_completed [2025-09-09 23:38:15][351924870405707][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:38:15][351924870405707][355 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 23:38:15][351924870405707][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:38:15][351924870405707][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:38:15][351924870405707][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-09 23:38:15][351924870405707][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:38:15][351924870405707][511 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4837\nsuccessfulTxPacketsPerSecond: 0.035755846080834215\nretriedTxPackets: 1100\nretriedTxPacketsPerSecond: 0.029254783157046178\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4898\nsuccessfulRxPacketsPerSecond: 0.026004251695152157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:38:15][351924870405707][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:38:16][351924870405707][964 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=337 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 337.369/337.369/337.369/0.000 ms\n [2025-09-09 23:38:16][351924870405707][964 ms][DEBUG] check_internet: online [2025-09-09 23:38:16][351924870405707][965 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:38:16][351924870405707][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924870405707\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2617\"}'\'' -e'"" [2025-09-09 23:38:16][351924870405707][965 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:38:16][351924870405707][965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924870405707\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2617\"}'\'' -e'"" [2025-09-09 23:38:20][351924870405707][4572 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d37aee56-b7dc-4887-851a-f7491cdd9dc9","id":"QR_d37aee56-b7dc-4887-851a-f7491cdd9dc9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:38:20][351924870405707][4729 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-09 23:38:20][351924870405707][4729 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-09 23:38:20][351924870405707][4729 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:41:04][356707183412535][1 ms][INFO] === Request start === [2025-09-09 23:41:04][356707183412535][1 ms][DEBUG] START check_scloud [2025-09-09 23:41:04][356707183412535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:41:05][356707183412535][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 14753 23180 24393088 196220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:41:05][356707183412535][311 ms][DEBUG] targetPkg: running [2025-09-09 23:41:05][356707183412535][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-09 23:41:05][356707183412535][311 ms][DEBUG] START check_boot_completed [2025-09-09 23:41:05][356707183412535][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:41:05][356707183412535][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 23:41:05][356707183412535][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:41:05][356707183412535][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:41:05][356707183412535][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-09 23:41:05][356707183412535][405 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:41:05][356707183412535][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356707183412535\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6690\"}'\'' -e'"" [2025-09-09 23:41:05][356707183412535][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:41:05][356707183412535][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356707183412535\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6690\"}'\'' -e'"" [2025-09-09 23:41:10][356707183412535][5857 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fc3bb4e-be38-4d61-97ad-5b01bc18b3c9","id":"QR_3fc3bb4e-be38-4d61-97ad-5b01bc18b3c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:41:10][356707183412535][6013 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-09 23:41:10][356707183412535][6013 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-09 23:41:10][356707183412535][6013 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:41:14][356707183412535][0 ms][INFO] === Request start === [2025-09-09 23:41:14][356707183412535][1 ms][DEBUG] START check_scloud [2025-09-09 23:41:14][356707183412535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:41:14][356707183412535][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 14753 23180 24527368 206876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:41:14][356707183412535][325 ms][DEBUG] targetPkg: running [2025-09-09 23:41:14][356707183412535][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-09 23:41:14][356707183412535][325 ms][DEBUG] START check_boot_completed [2025-09-09 23:41:14][356707183412535][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:41:14][356707183412535][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 23:41:14][356707183412535][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:41:14][356707183412535][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 23:41:14][356707183412535][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 23:41:14][356707183412535][434 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:41:14][356707183412535][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356707183412535\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6516\"}'\'' -e'"" [2025-09-09 23:41:14][356707183412535][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:41:14][356707183412535][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356707183412535\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6516\"}'\'' -e'"" [2025-09-09 23:41:18][356707183412535][4214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad1211dd-33d8-4a11-bcaa-341da2d5d0ba","id":"QR_ad1211dd-33d8-4a11-bcaa-341da2d5d0ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:41:18][356707183412535][4370 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-09 23:41:18][356707183412535][4370 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-09 23:41:18][356707183412535][4370 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:43:04][354261101223246][0 ms][INFO] === Request start === [2025-09-09 23:43:04][354261101223246][1 ms][DEBUG] START check_scloud [2025-09-09 23:43:04][354261101223246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:43:04][354261101223246][327 ms][DEBUG] SU: done in 327 ms; outu0_a118 14753 23180 24641096 218528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:43:04][354261101223246][328 ms][DEBUG] targetPkg: running [2025-09-09 23:43:04][354261101223246][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-09 23:43:04][354261101223246][328 ms][DEBUG] START check_boot_completed [2025-09-09 23:43:04][354261101223246][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:43:04][354261101223246][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 23:43:04][354261101223246][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:43:04][354261101223246][437 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 23:43:04][354261101223246][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 23:43:04][354261101223246][437 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:43:04][354261101223246][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261101223246\",\"model\":\"SM-F900F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2930\"}'\'' -e'"" [2025-09-09 23:43:04][354261101223246][437 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:43:04][354261101223246][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261101223246\",\"model\":\"SM-F900F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2930\"}'\'' -e'"" [2025-09-09 23:43:08][354261101223246][4904 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_582d5fdf-cda1-469d-814f-3cdf9b0ffd9e","id":"QR_582d5fdf-cda1-469d-814f-3cdf9b0ffd9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:43:09][354261101223246][5061 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-09-09 23:43:09][354261101223246][5061 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-09-09 23:43:09][354261101223246][5061 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:43:11][354261101223246][1 ms][INFO] === Request start === [2025-09-09 23:43:11][354261101223246][1 ms][DEBUG] START check_scloud [2025-09-09 23:43:11][354261101223246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:43:11][354261101223246][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 14753 23180 24771344 229228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:43:11][354261101223246][289 ms][DEBUG] targetPkg: running [2025-09-09 23:43:11][354261101223246][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-09 23:43:11][354261101223246][289 ms][DEBUG] START check_boot_completed [2025-09-09 23:43:11][354261101223246][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:43:11][354261101223246][336 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 23:43:11][354261101223246][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:43:12][354261101223246][414 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 23:43:12][354261101223246][414 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 23:43:12][354261101223246][414 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:43:12][354261101223246][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261101223246\",\"model\":\"SM-F900F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1723\"}'\'' -e'"" [2025-09-09 23:43:12][354261101223246][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:43:12][354261101223246][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261101223246\",\"model\":\"SM-F900F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1723\"}'\'' -e'"" [2025-09-09 23:43:17][354261101223246][5694 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8420efe3-d7a0-4a5c-8470-f2dc79eea1ac","id":"QR_8420efe3-d7a0-4a5c-8470-f2dc79eea1ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:43:17][354261101223246][5850 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-09 23:43:17][354261101223246][5850 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-09 23:43:17][354261101223246][5850 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:46:03][353600811588334][1 ms][INFO] === Request start === [2025-09-09 23:46:03][353600811588334][1 ms][DEBUG] START check_scloud [2025-09-09 23:46:03][353600811588334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:46:03][353600811588334][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 14753 23180 24912660 241228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:46:03][353600811588334][313 ms][DEBUG] targetPkg: running [2025-09-09 23:46:03][353600811588334][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-09 23:46:03][353600811588334][313 ms][DEBUG] START check_boot_completed [2025-09-09 23:46:03][353600811588334][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:46:03][353600811588334][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:46:03][353600811588334][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:46:03][353600811588334][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:46:03][353600811588334][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 23:46:03][353600811588334][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:46:03][353600811588334][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5064\nsuccessfulTxPacketsPerSecond: 0.7538948466139493\nretriedTxPackets: 1158\nretriedTxPacketsPerSecond: 0.19262511499387253\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5107\nsuccessfulRxPacketsPerSecond: 0.6941146385124027\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:46:03][353600811588334][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:46:04][353600811588334][1875 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.210/304.210/304.210/0.000 ms\n [2025-09-09 23:46:04][353600811588334][1875 ms][DEBUG] check_internet: online [2025-09-09 23:46:04][353600811588334][1875 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:46:04][353600811588334][1875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811588334\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4223\"}'\'' -e'"" [2025-09-09 23:46:04][353600811588334][1875 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:46:04][353600811588334][1875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811588334\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4223\"}'\'' -e'"" [2025-09-09 23:46:08][353600811588334][5640 ms][DEBUG] proc_open done in 3765 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-09 23:46:08][353600811588334][5640 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-09 23:46:08][353600811588334][5640 ms][WARN] Detected error: Process with pid 14753 either refused to load frida-agent, or terminated during injectionProcess with pid 14753 either refused to load frida-agent, or terminated during injection\r\n [2025-09-09 23:46:08][353600811588334][5640 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-09 23:46:09][353600811588334][5937 ms][DEBUG] SU: done in 296 ms; outsystem 23381 23180 12727040 192912 ep_poll 0 S system_server\n [2025-09-09 23:46:09][353600811588334][5937 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-09 23:46:09][353600811588334][6077 ms][DEBUG] SU: done in 140 ms; out [2025-09-09 23:46:09][353600811588334][6077 ms][WARN] targetPkg: not running, restarting 2 [2025-09-09 23:46:09][353600811588334][6077 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-09 23:46:09][353600811588334][6203 ms][DEBUG] SU: done in 126 ms; out [2025-09-09 23:46:09][353600811588334][6203 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-09 23:46:09][353600811588334][6405 ms][DEBUG] SU: done in 202 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-09 23:46:11][353600811588334][8420 ms][DEBUG] START check_boot_completed [2025-09-09 23:46:11][353600811588334][8420 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:46:11][353600811588334][8467 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 23:46:11][353600811588334][8467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:46:11][353600811588334][8530 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 23:46:11][353600811588334][8530 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-09 23:46:14][353600811588334][11544 ms][DEBUG] START runCmdUntilRes#2 [2025-09-09 23:46:14][353600811588334][11544 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811588334\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4223\"}'\'' -e'"" [2025-09-09 23:46:18][353600811588334][15450 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb590dcd-00c2-490e-b3fe-e52b47a104e7","id":"QR_cb590dcd-00c2-490e-b3fe-e52b47a104e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:46:18][353600811588334][15606 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-09 23:46:18][353600811588334][15606 ms][DEBUG] END runCmdUntilRes#2 in 4062 ms [2025-09-09 23:46:18][353600811588334][15606 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:46:21][353600811588334][0 ms][INFO] === Request start === [2025-09-09 23:46:21][353600811588334][1 ms][DEBUG] START check_scloud [2025-09-09 23:46:21][353600811588334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:46:21][353600811588334][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 16869 23180 23683652 125028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:46:21][353600811588334][251 ms][DEBUG] targetPkg: running [2025-09-09 23:46:21][353600811588334][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-09 23:46:21][353600811588334][251 ms][DEBUG] START check_boot_completed [2025-09-09 23:46:21][353600811588334][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:46:21][353600811588334][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 23:46:21][353600811588334][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:46:21][353600811588334][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:46:21][353600811588334][344 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 23:46:21][353600811588334][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:46:21][353600811588334][469 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5064\nsuccessfulTxPacketsPerSecond: 0.7538948466139493\nretriedTxPackets: 1158\nretriedTxPacketsPerSecond: 0.19262511499387253\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5107\nsuccessfulRxPacketsPerSecond: 0.6941146385124027\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:46:21][353600811588334][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:46:21][353600811588334][875 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.980/294.980/294.980/0.000 ms\n [2025-09-09 23:46:21][353600811588334][875 ms][DEBUG] check_internet: online [2025-09-09 23:46:21][353600811588334][876 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:46:21][353600811588334][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811588334\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4088\"}'\'' -e'"" [2025-09-09 23:46:21][353600811588334][876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:46:21][353600811588334][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811588334\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4088\"}'\'' -e'"" [2025-09-09 23:46:27][353600811588334][6218 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fced3d5b-fc41-4b56-a673-8a3ea11c588c","id":"QR_fced3d5b-fc41-4b56-a673-8a3ea11c588c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:46:27][353600811588334][6374 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-09 23:46:27][353600811588334][6374 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-09 23:46:27][353600811588334][6374 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:48:05][353384836313156][1 ms][INFO] === Request start === [2025-09-09 23:48:05][353384836313156][1 ms][DEBUG] START check_scloud [2025-09-09 23:48:05][353384836313156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:48:05][353384836313156][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 16869 23180 23732832 138456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:48:05][353384836313156][317 ms][DEBUG] targetPkg: running [2025-09-09 23:48:05][353384836313156][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-09 23:48:05][353384836313156][317 ms][DEBUG] START check_boot_completed [2025-09-09 23:48:05][353384836313156][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:48:05][353384836313156][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 23:48:05][353384836313156][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:48:05][353384836313156][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 23:48:05][353384836313156][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 23:48:05][353384836313156][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:48:05][353384836313156][568 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5214\nsuccessfulTxPacketsPerSecond: 0.4982511385038515\nretriedTxPackets: 1205\nretriedTxPacketsPerSecond: 0.15611869006454013\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5239\nsuccessfulRxPacketsPerSecond: 0.4384610018833893\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:48:05][353384836313156][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:48:06][353384836313156][1004 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.419/327.419/327.419/0.000 ms\n [2025-09-09 23:48:06][353384836313156][1004 ms][DEBUG] check_internet: online [2025-09-09 23:48:06][353384836313156][1004 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:48:06][353384836313156][1004 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384836313156\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1645\"}'\'' -e'"" [2025-09-09 23:48:06][353384836313156][1004 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:48:06][353384836313156][1004 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384836313156\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1645\"}'\'' -e'"" [2025-09-09 23:48:11][353384836313156][6768 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e5c969a-0192-4f72-9177-b92a7fcf1599","id":"QR_4e5c969a-0192-4f72-9177-b92a7fcf1599","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:48:12][353384836313156][6924 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-09 23:48:12][353384836313156][6924 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-09 23:48:12][353384836313156][6924 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:48:15][353384836313156][0 ms][INFO] === Request start === [2025-09-09 23:48:15][353384836313156][1 ms][DEBUG] START check_scloud [2025-09-09 23:48:15][353384836313156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:48:15][353384836313156][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 16869 23180 23851676 150592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:48:15][353384836313156][316 ms][DEBUG] targetPkg: running [2025-09-09 23:48:15][353384836313156][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-09 23:48:15][353384836313156][316 ms][DEBUG] START check_boot_completed [2025-09-09 23:48:15][353384836313156][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:48:15][353384836313156][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:48:15][353384836313156][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:48:15][353384836313156][410 ms][DEBUG] SU: done in 63 ms; out [2025-09-09 23:48:15][353384836313156][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-09 23:48:15][353384836313156][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:48:16][353384836313156][550 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5214\nsuccessfulTxPacketsPerSecond: 0.4982511385038515\nretriedTxPackets: 1205\nretriedTxPacketsPerSecond: 0.15611869006454013\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5239\nsuccessfulRxPacketsPerSecond: 0.4384610018833893\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:48:16][353384836313156][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:48:16][353384836313156][941 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.454/282.454/282.454/0.000 ms\n [2025-09-09 23:48:16][353384836313156][941 ms][DEBUG] check_internet: online [2025-09-09 23:48:16][353384836313156][941 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:48:16][353384836313156][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384836313156\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7817\"}'\'' -e'"" [2025-09-09 23:48:16][353384836313156][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:48:16][353384836313156][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384836313156\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7817\"}'\'' -e'"" [2025-09-09 23:48:20][353384836313156][4752 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1b3492a-9db0-4c95-a5a1-5fd1b692d9b6","id":"QR_b1b3492a-9db0-4c95-a5a1-5fd1b692d9b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:48:20][353384836313156][4908 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-09-09 23:48:20][353384836313156][4908 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-09 23:48:20][353384836313156][4908 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:50:03][350683210591219][0 ms][INFO] === Request start === [2025-09-09 23:50:03][350683210591219][1 ms][DEBUG] START check_scloud [2025-09-09 23:50:03][350683210591219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:50:03][350683210591219][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 16869 23180 23973524 161500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:50:03][350683210591219][301 ms][DEBUG] targetPkg: running [2025-09-09 23:50:03][350683210591219][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-09 23:50:03][350683210591219][301 ms][DEBUG] START check_boot_completed [2025-09-09 23:50:03][350683210591219][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:50:03][350683210591219][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-09 23:50:03][350683210591219][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:50:03][350683210591219][426 ms][DEBUG] SU: done in 78 ms; out [2025-09-09 23:50:03][350683210591219][426 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-09 23:50:03][350683210591219][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:50:03][350683210591219][536 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5266\nsuccessfulTxPacketsPerSecond: 0.5166264294159141\nretriedTxPackets: 1221\nretriedTxPacketsPerSecond: 0.1589619782818197\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5284\nsuccessfulRxPacketsPerSecond: 0.44708056391761797\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:50:03][350683210591219][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:50:04][350683210591219][989 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=342 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 342.854/342.854/342.854/0.000 ms\n [2025-09-09 23:50:04][350683210591219][989 ms][DEBUG] check_internet: online [2025-09-09 23:50:04][350683210591219][989 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:50:04][350683210591219][989 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683210591219\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1048\"}'\'' -e'"" [2025-09-09 23:50:04][350683210591219][989 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:50:04][350683210591219][989 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683210591219\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1048\"}'\'' -e'"" [2025-09-09 23:50:09][350683210591219][6346 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b01c2bf-dd97-40f5-bc16-7dbb712e8212","id":"QR_7b01c2bf-dd97-40f5-bc16-7dbb712e8212","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:50:09][350683210591219][6503 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-09 23:50:09][350683210591219][6503 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-09 23:50:09][350683210591219][6503 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:50:12][350683210591219][1 ms][INFO] === Request start === [2025-09-09 23:50:12][350683210591219][1 ms][DEBUG] START check_scloud [2025-09-09 23:50:12][350683210591219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:50:12][350683210591219][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 16869 23180 24151956 172292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:50:12][350683210591219][303 ms][DEBUG] targetPkg: running [2025-09-09 23:50:12][350683210591219][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-09 23:50:12][350683210591219][303 ms][DEBUG] START check_boot_completed [2025-09-09 23:50:12][350683210591219][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:50:12][350683210591219][348 ms][DEBUG] ADB: done in 45 ms; out [2025-09-09 23:50:12][350683210591219][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:50:12][350683210591219][442 ms][DEBUG] SU: done in 94 ms; out [2025-09-09 23:50:12][350683210591219][442 ms][DEBUG] END check_boot_completed in 139 ms [2025-09-09 23:50:12][350683210591219][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-09 23:50:12][350683210591219][567 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=9697477 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5266\nsuccessfulTxPacketsPerSecond: 0.5166264294159141\nretriedTxPackets: 1221\nretriedTxPacketsPerSecond: 0.1589619782818197\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5284\nsuccessfulRxPacketsPerSecond: 0.44708056391761797\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-09 23:50:12][350683210591219][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-09 23:50:13][350683210591219][973 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.72.238) 56(84) bytes of data.\n64 bytes from lax31s14-in-f14.1e100.net (142.250.72.238): icmp_seq=1 ttl=109 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.439/269.439/269.439/0.000 ms\n [2025-09-09 23:50:13][350683210591219][973 ms][DEBUG] check_internet: online [2025-09-09 23:50:13][350683210591219][973 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:50:13][350683210591219][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683210591219\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-09-09 23:50:13][350683210591219][973 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:50:13][350683210591219][973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683210591219\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-09-09 23:50:18][350683210591219][6144 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88d50b8e-e188-4791-a890-48f6c3e15736","id":"QR_88d50b8e-e188-4791-a890-48f6c3e15736","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:50:18][350683210591219][6300 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-09 23:50:18][350683210591219][6300 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-09 23:50:18][350683210591219][6300 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:55:05][356044291624110][1 ms][INFO] === Request start === [2025-09-09 23:55:05][356044291624110][1 ms][DEBUG] START check_scloud [2025-09-09 23:55:05][356044291624110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:55:05][356044291624110][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 16869 23180 24251476 184588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:55:05][356044291624110][258 ms][DEBUG] targetPkg: running [2025-09-09 23:55:05][356044291624110][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-09 23:55:05][356044291624110][258 ms][DEBUG] START check_boot_completed [2025-09-09 23:55:05][356044291624110][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:55:05][356044291624110][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-09 23:55:05][356044291624110][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:55:05][356044291624110][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-09 23:55:05][356044291624110][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-09 23:55:05][356044291624110][336 ms][DEBUG] rawBody.length=1160 [2025-09-09 23:55:05][356044291624110][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356044291624110\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9556\"}'\'' -e'"" [2025-09-09 23:55:05][356044291624110][336 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:55:05][356044291624110][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356044291624110\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9556\"}'\'' -e'"" [2025-09-09 23:55:11][356044291624110][5990 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad119b6a-8792-49ea-8242-0b1ab7f53a1a","id":"QR_ad119b6a-8792-49ea-8242-0b1ab7f53a1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:55:11][356044291624110][6147 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-09 23:55:11][356044291624110][6147 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-09 23:55:11][356044291624110][6147 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-09 23:55:14][356044291624110][0 ms][INFO] === Request start === [2025-09-09 23:55:14][356044291624110][1 ms][DEBUG] START check_scloud [2025-09-09 23:55:14][356044291624110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-09 23:55:15][356044291624110][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 16869 23180 24389980 195412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-09 23:55:15][356044291624110][318 ms][DEBUG] targetPkg: running [2025-09-09 23:55:15][356044291624110][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-09 23:55:15][356044291624110][318 ms][DEBUG] START check_boot_completed [2025-09-09 23:55:15][356044291624110][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-09 23:55:15][356044291624110][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-09 23:55:15][356044291624110][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-09 23:55:15][356044291624110][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-09 23:55:15][356044291624110][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-09 23:55:15][356044291624110][427 ms][DEBUG] rawBody.length=1150 [2025-09-09 23:55:15][356044291624110][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356044291624110\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-09-09 23:55:15][356044291624110][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-09 23:55:15][356044291624110][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356044291624110\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-09-09 23:55:18][356044291624110][4082 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07929399-cb8a-488e-9f8c-60a2183ed452","id":"QR_07929399-cb8a-488e-9f8c-60a2183ed452","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-09 23:55:19][356044291624110][4238 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-09 23:55:19][356044291624110][4238 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-09 23:55:19][356044291624110][4238 ms][INFO] SUCCESS response from frida (len=3343)