[2025-08-20 20:34:18][354255813154319][1 ms][INFO] === Request start ===
[2025-08-20 20:34:18][354255813154319][3 ms][DEBUG] START check_frida
[2025-08-20 20:34:18][354255813154319][3 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:34:19][354255813154319][317 ms][DEBUG] SU: done in 314 ms; outroot         20950     1 2263084  20188 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:34:19][354255813154319][317 ms][DEBUG] check_frida: running
[2025-08-20 20:34:19][354255813154319][317 ms][DEBUG] END   check_frida in 315 ms
[2025-08-20 20:34:19][354255813154319][318 ms][DEBUG] START check_internet
[2025-08-20 20:34:19][354255813154319][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:34:19][354255813154319][739 ms][DEBUG] SU: done in 421 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=108 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 108.388/108.388/108.388/0.000 ms\n
[2025-08-20 20:34:19][354255813154319][739 ms][DEBUG] check_internet: online
[2025-08-20 20:34:19][354255813154319][739 ms][DEBUG] END   check_internet in 421 ms
[2025-08-20 20:34:19][354255813154319][739 ms][DEBUG] START check_scloud
[2025-08-20 20:34:19][354255813154319][739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:34:19][354255813154319][1035 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23622432 87692 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:34:19][354255813154319][1035 ms][DEBUG] targetPkg: running
[2025-08-20 20:34:19][354255813154319][1035 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 20:34:19][354255813154319][1035 ms][DEBUG] rawBody.length=1043
[2025-08-20 20:34:19][354255813154319][1036 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 20:34:19][354255813154319][1036 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:34:19][354255813154319][1036 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 20:34:22][354255813154319][3597 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=="\r\n
[2025-08-20 20:34:24][354255813154319][5378 ms][DEBUG] frida res:res:{"id":"68a25342bfcb0b536c8783e9","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a25342bfcb0b536c8783e9","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n
[2025-08-20 20:34:24][354255813154319][5379 ms][DEBUG] proc_open done in 4343 ms; code=0; res.len=2939
[2025-08-20 20:34:24][354255813154319][5379 ms][DEBUG] END   runCmdUntilRes#1 in 4343 ms
[2025-08-20 20:34:24][354255813154319][5379 ms][INFO] SUCCESS response from frida (len=2939)
[2025-08-20 20:44:04][351285623960038][0 ms][INFO] === Request start ===
[2025-08-20 20:44:04][351285623960038][0 ms][DEBUG] START check_frida
[2025-08-20 20:44:04][351285623960038][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:44:04][351285623960038][294 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2263084  20216 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:44:04][351285623960038][294 ms][DEBUG] check_frida: running
[2025-08-20 20:44:04][351285623960038][294 ms][DEBUG] END   check_frida in 294 ms
[2025-08-20 20:44:04][351285623960038][294 ms][DEBUG] START check_internet
[2025-08-20 20:44:04][351285623960038][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:44:04][351285623960038][795 ms][DEBUG] SU: done in 500 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.034/202.034/202.034/0.000 ms\n
[2025-08-20 20:44:04][351285623960038][795 ms][DEBUG] check_internet: online
[2025-08-20 20:44:04][351285623960038][795 ms][DEBUG] END   check_internet in 501 ms
[2025-08-20 20:44:04][351285623960038][795 ms][DEBUG] START check_scloud
[2025-08-20 20:44:04][351285623960038][795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:44:05][351285623960038][1029 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23623744 85984 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:44:05][351285623960038][1029 ms][DEBUG] targetPkg: running
[2025-08-20 20:44:05][351285623960038][1029 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 20:44:05][351285623960038][1029 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:44:05][351285623960038][1029 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjg1NjIzOTYwMDM4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyME1GRTBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE5NCJ9'" -e "main()" -q"
[2025-08-20 20:44:05][351285623960038][1029 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:44:05][351285623960038][1029 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjg1NjIzOTYwMDM4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyME1GRTBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE5NCJ9'" -e "main()" -q"
[2025-08-20 20:44:07][351285623960038][3685 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjg1NjIzOTYwMDM4IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1gyME1GRTBEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzE5NCJ9"\r\n
[2025-08-20 20:44:09][351285623960038][5732 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_012fe078-7dfa-4c69-91cb-7f2fc765c9e1","id":"QR_012fe078-7dfa-4c69-91cb-7f2fc765c9e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:44:09][351285623960038][5733 ms][DEBUG] proc_open done in 4704 ms; code=0; res.len=3152
[2025-08-20 20:44:09][351285623960038][5733 ms][DEBUG] END   runCmdUntilRes#1 in 4704 ms
[2025-08-20 20:44:09][351285623960038][5733 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:44:12][350013907582893][0 ms][INFO] === Request start ===
[2025-08-20 20:44:12][350013907582893][1 ms][DEBUG] START check_frida
[2025-08-20 20:44:12][350013907582893][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:44:12][350013907582893][308 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2279504  20184 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:44:12][350013907582893][308 ms][DEBUG] check_frida: running
[2025-08-20 20:44:12][350013907582893][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-20 20:44:12][350013907582893][308 ms][DEBUG] START check_internet
[2025-08-20 20:44:12][350013907582893][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:44:12][350013907582893][574 ms][DEBUG] SU: done in 266 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.270/169.270/169.270/0.000 ms\n
[2025-08-20 20:44:12][350013907582893][574 ms][DEBUG] check_internet: online
[2025-08-20 20:44:12][350013907582893][574 ms][DEBUG] END   check_internet in 266 ms
[2025-08-20 20:44:12][350013907582893][574 ms][DEBUG] START check_scloud
[2025-08-20 20:44:12][350013907582893][574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:44:12][350013907582893][855 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23623776 84636 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:44:12][350013907582893][855 ms][DEBUG] targetPkg: running
[2025-08-20 20:44:12][350013907582893][855 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 20:44:12][350013907582893][855 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:44:12][350013907582893][855 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzOTA3NTgyODkzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MTZNMUVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxOCJ9'" -e "main()" -q"
[2025-08-20 20:44:12][350013907582893][856 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:44:12][350013907582893][856 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDEzOTA3NTgyODkzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MTZNMUVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxOCJ9'" -e "main()" -q"
[2025-08-20 20:44:15][350013907582893][3480 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDEzOTA3NTgyODkzIiwibW9kZWwiOiJTTS1BMzM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MTZNMUVMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxOCJ9"\r\n
[2025-08-20 20:44:17][350013907582893][5261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec81a87a-aad4-4727-b6a7-266ac08e8465","id":"QR_ec81a87a-aad4-4727-b6a7-266ac08e8465","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:44:17][350013907582893][5262 ms][DEBUG] proc_open done in 4406 ms; code=0; res.len=3152
[2025-08-20 20:44:17][350013907582893][5262 ms][DEBUG] END   runCmdUntilRes#1 in 4407 ms
[2025-08-20 20:44:17][350013907582893][5262 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:44:35][357435844143625][0 ms][INFO] === Request start ===
[2025-08-20 20:44:35][357435844143625][1 ms][DEBUG] START check_frida
[2025-08-20 20:44:35][357435844143625][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:44:35][357435844143625][246 ms][DEBUG] SU: done in 244 ms; outroot         20950     1 2263084  20188 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:44:35][357435844143625][246 ms][DEBUG] check_frida: running
[2025-08-20 20:44:35][357435844143625][246 ms][DEBUG] END   check_frida in 245 ms
[2025-08-20 20:44:35][357435844143625][246 ms][DEBUG] START check_internet
[2025-08-20 20:44:35][357435844143625][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:44:35][357435844143625][527 ms][DEBUG] SU: done in 281 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.935/182.935/182.935/0.000 ms\n
[2025-08-20 20:44:35][357435844143625][527 ms][DEBUG] check_internet: online
[2025-08-20 20:44:35][357435844143625][527 ms][DEBUG] END   check_internet in 281 ms
[2025-08-20 20:44:35][357435844143625][527 ms][DEBUG] START check_scloud
[2025-08-20 20:44:35][357435844143625][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:44:35][357435844143625][761 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23623808 85188 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:44:35][357435844143625][762 ms][DEBUG] targetPkg: running
[2025-08-20 20:44:35][357435844143625][762 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 20:44:35][357435844143625][762 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:44:35][357435844143625][762 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0MTQzNjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDE2QTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTg2In0='" -e "main()" -q"
[2025-08-20 20:44:35][357435844143625][762 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:44:35][357435844143625][762 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NDM1ODQ0MTQzNjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDE2QTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTg2In0='" -e "main()" -q"
[2025-08-20 20:44:38][357435844143625][3386 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NDM1ODQ0MTQzNjI1IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g1MDE2QTVSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5MTg2In0="\r\n
[2025-08-20 20:44:41][357435844143625][6135 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d3bcaa4-eef5-44a7-b1f3-f77bf8e7d144","id":"QR_7d3bcaa4-eef5-44a7-b1f3-f77bf8e7d144","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:44:41][357435844143625][6136 ms][DEBUG] proc_open done in 5373 ms; code=0; res.len=3152
[2025-08-20 20:44:41][357435844143625][6136 ms][DEBUG] END   runCmdUntilRes#1 in 5374 ms
[2025-08-20 20:44:41][357435844143625][6136 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:45:07][355993118199725][0 ms][INFO] === Request start ===
[2025-08-20 20:45:07][355993118199725][1 ms][DEBUG] START check_frida
[2025-08-20 20:45:07][355993118199725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:45:08][355993118199725][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084  20196 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:45:08][355993118199725][309 ms][DEBUG] check_frida: running
[2025-08-20 20:45:08][355993118199725][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-20 20:45:08][355993118199725][309 ms][DEBUG] START check_scloud
[2025-08-20 20:45:08][355993118199725][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:45:08][355993118199725][606 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23623840 84976 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:45:08][355993118199725][606 ms][DEBUG] targetPkg: running
[2025-08-20 20:45:08][355993118199725][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 20:45:08][355993118199725][606 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:45:08][355993118199725][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTkzMTE4MTk5NzI1IiwibW9kZWwiOiJTTS1HOTg4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JBMTNWRkVFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzg1In0='" -e "main()" -q"
[2025-08-20 20:45:08][355993118199725][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:45:08][355993118199725][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1OTkzMTE4MTk5NzI1IiwibW9kZWwiOiJTTS1HOTg4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JBMTNWRkVFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzg1In0='" -e "main()" -q"
[2025-08-20 20:45:10][355993118199725][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1OTkzMTE4MTk5NzI1IiwibW9kZWwiOiJTTS1HOTg4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1JBMTNWRkVFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMzg1In0="\r\n
[2025-08-20 20:45:15][355993118199725][7838 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0982522-7c8e-437b-95de-fc65c6c5f9db","id":"QR_a0982522-7c8e-437b-95de-fc65c6c5f9db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:45:15][355993118199725][7838 ms][DEBUG] proc_open done in 7232 ms; code=0; res.len=3152
[2025-08-20 20:45:15][355993118199725][7838 ms][DEBUG] END   runCmdUntilRes#1 in 7233 ms
[2025-08-20 20:45:15][355993118199725][7838 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:46:06][353657230226052][1 ms][INFO] === Request start ===
[2025-08-20 20:46:06][353657230226052][1 ms][DEBUG] START check_frida
[2025-08-20 20:46:06][353657230226052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:46:06][353657230226052][306 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2263084  20184 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:46:06][353657230226052][307 ms][DEBUG] check_frida: running
[2025-08-20 20:46:06][353657230226052][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-20 20:46:06][353657230226052][307 ms][DEBUG] START check_internet
[2025-08-20 20:46:06][353657230226052][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:46:07][353657230226052][572 ms][DEBUG] SU: done in 265 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.188/163.188/163.188/0.000 ms\n
[2025-08-20 20:46:07][353657230226052][572 ms][DEBUG] check_internet: online
[2025-08-20 20:46:07][353657230226052][572 ms][DEBUG] END   check_internet in 265 ms
[2025-08-20 20:46:07][353657230226052][572 ms][DEBUG] START check_scloud
[2025-08-20 20:46:07][353657230226052][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:46:07][353657230226052][837 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23623872 85820 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:46:07][353657230226052][837 ms][DEBUG] targetPkg: running
[2025-08-20 20:46:07][353657230226052][837 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-20 20:46:07][353657230226052][837 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:46:07][353657230226052][837 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjU3MjMwMjI2MDUyIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQyMVczOTVWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU3NyJ9'" -e "main()" -q"
[2025-08-20 20:46:07][353657230226052][837 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:46:07][353657230226052][837 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjU3MjMwMjI2MDUyIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQyMVczOTVWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU3NyJ9'" -e "main()" -q"
[2025-08-20 20:46:10][353657230226052][3456 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjU3MjMwMjI2MDUyIiwibW9kZWwiOiJTTS1BMjI1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQyMVczOTVWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNV0QiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzU3NyJ9"\r\n
[2025-08-20 20:46:12][353657230226052][5612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0ecb239-0a5d-4dcb-933a-22fe623decf7","id":"QR_b0ecb239-0a5d-4dcb-933a-22fe623decf7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:46:12][353657230226052][5613 ms][DEBUG] proc_open done in 4775 ms; code=0; res.len=3152
[2025-08-20 20:46:12][353657230226052][5613 ms][DEBUG] END   runCmdUntilRes#1 in 4776 ms
[2025-08-20 20:46:12][353657230226052][5613 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:47:00][351681593700968][0 ms][INFO] === Request start ===
[2025-08-20 20:47:00][351681593700968][1 ms][DEBUG] START check_frida
[2025-08-20 20:47:00][351681593700968][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:47:00][351681593700968][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084  20196 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:47:00][351681593700968][302 ms][DEBUG] check_frida: running
[2025-08-20 20:47:00][351681593700968][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-20 20:47:00][351681593700968][302 ms][DEBUG] START check_scloud
[2025-08-20 20:47:00][351681593700968][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:47:00][351681593700968][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23623904 85108 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:47:00][351681593700968][584 ms][DEBUG] targetPkg: running
[2025-08-20 20:47:00][351681593700968][584 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-20 20:47:00][351681593700968][584 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:47:00][351681593700968][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTkzNzAwOTY4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMFQ0WlpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUzMCJ9'" -e "main()" -q"
[2025-08-20 20:47:00][351681593700968][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:47:00][351681593700968][585 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjgxNTkzNzAwOTY4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMFQ0WlpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUzMCJ9'" -e "main()" -q"
[2025-08-20 20:47:03][351681593700968][3208 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjgxNTkzNzAwOTY4IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgxMFQ0WlpZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUzMCJ9"\r\n
[2025-08-20 20:47:05][351681593700968][5146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54ab2311-0bed-4c0b-9e6c-e13845c0a556","id":"QR_54ab2311-0bed-4c0b-9e6c-e13845c0a556","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:47:05][351681593700968][5146 ms][DEBUG] proc_open done in 4561 ms; code=0; res.len=3152
[2025-08-20 20:47:05][351681593700968][5146 ms][DEBUG] END   runCmdUntilRes#1 in 4562 ms
[2025-08-20 20:47:05][351681593700968][5146 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:49:17][355622366805465][1 ms][INFO] === Request start ===
[2025-08-20 20:49:17][355622366805465][2 ms][DEBUG] START check_frida
[2025-08-20 20:49:17][355622366805465][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:49:18][355622366805465][260 ms][DEBUG] SU: done in 259 ms; outroot         20950     1 2263084  20208 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:49:18][355622366805465][260 ms][DEBUG] check_frida: running
[2025-08-20 20:49:18][355622366805465][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-20 20:49:18][355622366805465][260 ms][DEBUG] START check_scloud
[2025-08-20 20:49:18][355622366805465][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:49:18][355382706583989][1 ms][INFO] === Request start ===
[2025-08-20 20:49:18][355622366805465][557 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23623936 85684 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:49:18][355622366805465][557 ms][DEBUG] targetPkg: running
[2025-08-20 20:49:18][355622366805465][557 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 20:49:18][355622366805465][557 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:49:18][355622366805465][557 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjIyMzY2ODA1NDY1IiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MlQ2UkdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2OSJ9'" -e "main()" -q"
[2025-08-20 20:49:18][355622366805465][557 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:49:18][355622366805465][557 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjIyMzY2ODA1NDY1IiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MlQ2UkdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2OSJ9'" -e "main()" -q"
[2025-08-20 20:49:21][355622366805465][3182 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NjIyMzY2ODA1NDY1IiwibW9kZWwiOiJTTS1TOTI2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MlQ2UkdXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTI2OSJ9"\r\n
[2025-08-20 20:49:23][355622366805465][5337 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25d4189c-b74b-4d6b-bd6a-b52a3ef959bc","id":"QR_25d4189c-b74b-4d6b-bd6a-b52a3ef959bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:49:23][355622366805465][5337 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-20 20:49:23][355622366805465][5337 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-20 20:49:23][355622366805465][5337 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:49:23][355382706583989][5070 ms][DEBUG] START check_frida
[2025-08-20 20:49:23][355382706583989][5070 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:49:23][355382706583989][5351 ms][DEBUG] SU: done in 281 ms; outroot         20950     1 2279504  20184 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:49:23][355382706583989][5351 ms][DEBUG] check_frida: running
[2025-08-20 20:49:23][355382706583989][5351 ms][DEBUG] END   check_frida in 281 ms
[2025-08-20 20:49:23][355382706583989][5351 ms][DEBUG] START check_scloud
[2025-08-20 20:49:23][355382706583989][5351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:49:23][355382706583989][5570 ms][DEBUG] SU: done in 219 ms; outu0_a118      20979 10674 23623968 85252 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:49:23][355382706583989][5570 ms][DEBUG] targetPkg: running
[2025-08-20 20:49:23][355382706583989][5570 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-20 20:49:23][355382706583989][5570 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:49:23][355382706583989][5570 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzgyNzA2NTgzOTg5IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MTE4RlZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA1MCJ9'" -e "main()" -q"
[2025-08-20 20:49:23][355382706583989][5570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:49:23][355382706583989][5570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MzgyNzA2NTgzOTg5IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MTE4RlZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA1MCJ9'" -e "main()" -q"
[2025-08-20 20:49:26][355382706583989][8132 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MzgyNzA2NTgzOTg5IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q5MTE4RlZUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA1MCJ9"\r\n
[2025-08-20 20:49:28][355382706583989][9928 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_971b3174-e4b4-4290-878e-09d1f2148b2d","id":"QR_971b3174-e4b4-4290-878e-09d1f2148b2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:49:28][355382706583989][9929 ms][DEBUG] proc_open done in 4359 ms; code=0; res.len=3152
[2025-08-20 20:49:28][355382706583989][9929 ms][DEBUG] END   runCmdUntilRes#1 in 4359 ms
[2025-08-20 20:49:28][355382706583989][9929 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:51:12][359156945734918][0 ms][INFO] === Request start ===
[2025-08-20 20:51:12][359156945734918][0 ms][DEBUG] START check_frida
[2025-08-20 20:51:12][359156945734918][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:51:13][359156945734918][291 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2263084  20196 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:51:13][359156945734918][292 ms][DEBUG] check_frida: running
[2025-08-20 20:51:13][359156945734918][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-20 20:51:13][359156945734918][292 ms][DEBUG] START check_scloud
[2025-08-20 20:51:13][359156945734918][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:51:13][359156945734918][587 ms][DEBUG] SU: done in 295 ms; outu0_a118      20979 10674 23624000 85904 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:51:13][359156945734918][587 ms][DEBUG] targetPkg: running
[2025-08-20 20:51:13][359156945734918][587 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-20 20:51:13][359156945734918][587 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:51:13][359156945734918][588 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ1NzM0OTE4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgwNyJ9'" -e "main()" -q"
[2025-08-20 20:51:13][359156945734918][588 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:51:13][359156945734918][588 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ1NzM0OTE4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgwNyJ9'" -e "main()" -q"
[2025-08-20 20:51:16][359156945734918][3228 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTU2OTQ1NzM0OTE4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODgwNyJ9"\r\n
[2025-08-20 20:51:17][359156945734918][5119 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-20 20:51:17][359156945734918][5119 ms][DEBUG] proc_open done in 4531 ms; code=0; res.len=93
[2025-08-20 20:51:17][359156945734918][5119 ms][DEBUG] END   runCmdUntilRes#1 in 4531 ms
[2025-08-20 20:51:17][359156945734918][5119 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-20 20:51:18][][0 ms][INFO] === Request start ===
[2025-08-20 20:51:18][][0 ms][DEBUG] START check_frida
[2025-08-20 20:51:18][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:51:18][][273 ms][DEBUG] SU: done in 273 ms; outroot         20950     1 2279504  20208 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:51:18][][274 ms][DEBUG] check_frida: running
[2025-08-20 20:51:18][][274 ms][DEBUG] END   check_frida in 273 ms
[2025-08-20 20:51:18][][274 ms][DEBUG] START check_scloud
[2025-08-20 20:51:18][][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:51:18][][600 ms][DEBUG] SU: done in 326 ms; outu0_a118      20979 10674 23624032 85152 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:51:18][][600 ms][DEBUG] targetPkg: running
[2025-08-20 20:51:18][][600 ms][DEBUG] END   check_scloud in 327 ms
[2025-08-20 20:51:18][][600 ms][DEBUG] rawBody.length=1131
[2025-08-20 20:51:18][][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwMyJ9'" -e "main()" -q"
[2025-08-20 20:51:18][][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:51:18][][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwMyJ9'" -e "main()" -q"
[2025-08-20 20:51:21][][3178 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzgwMyJ9"\r\n
[2025-08-20 20:51:23][][5037 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 20:51:23][][5037 ms][DEBUG] proc_open done in 4437 ms; code=0; res.len=107
[2025-08-20 20:51:23][][5037 ms][DEBUG] END   runCmdUntilRes#1 in 4437 ms
[2025-08-20 20:51:23][][5037 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 20:51:23][][0 ms][INFO] === Request start ===
[2025-08-20 20:51:23][][0 ms][DEBUG] START check_frida
[2025-08-20 20:51:23][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:51:23][][295 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2279504  20192 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:51:23][][295 ms][DEBUG] check_frida: running
[2025-08-20 20:51:23][][295 ms][DEBUG] END   check_frida in 295 ms
[2025-08-20 20:51:23][][295 ms][DEBUG] START check_scloud
[2025-08-20 20:51:23][][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:51:24][][592 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23624064 85716 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:51:24][][592 ms][DEBUG] targetPkg: running
[2025-08-20 20:51:24][][592 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-20 20:51:24][][592 ms][DEBUG] rawBody.length=1131
[2025-08-20 20:51:24][][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM1OSJ9'" -e "main()" -q"
[2025-08-20 20:51:24][][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:51:24][][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM1OSJ9'" -e "main()" -q"
[2025-08-20 20:51:26][][3201 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJMVFkiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzM1OSJ9"\r\n
[2025-08-20 20:51:28][][4638 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 20:51:28][][4638 ms][DEBUG] proc_open done in 4046 ms; code=0; res.len=107
[2025-08-20 20:51:28][][4638 ms][DEBUG] END   runCmdUntilRes#1 in 4046 ms
[2025-08-20 20:51:28][][4638 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 20:51:30][359156945734918][0 ms][INFO] === Request start ===
[2025-08-20 20:51:30][359156945734918][0 ms][DEBUG] START check_frida
[2025-08-20 20:51:30][359156945734918][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:51:30][359156945734918][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2279504  20196 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:51:30][359156945734918][296 ms][DEBUG] check_frida: running
[2025-08-20 20:51:30][359156945734918][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-20 20:51:30][359156945734918][296 ms][DEBUG] START check_scloud
[2025-08-20 20:51:30][359156945734918][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:51:30][359156945734918][592 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23624096 86276 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:51:30][359156945734918][592 ms][DEBUG] targetPkg: running
[2025-08-20 20:51:30][359156945734918][592 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 20:51:30][359156945734918][592 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:51:30][359156945734918][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ1NzM0OTE4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUWSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjM1In0='" -e "main()" -q"
[2025-08-20 20:51:30][359156945734918][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:51:30][359156945734918][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTU2OTQ1NzM0OTE4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUWSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjM1In0='" -e "main()" -q"
[2025-08-20 20:51:33][359156945734918][3201 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTU2OTQ1NzM0OTE4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhCMFBUVFROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUWSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MjM1In0="\r\n
[2025-08-20 20:51:37][359156945734918][6919 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9610d91f-d60e-444f-84bb-1c9c454aa1d0","id":"QR_9610d91f-d60e-444f-84bb-1c9c454aa1d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:51:37][359156945734918][6919 ms][DEBUG] proc_open done in 6327 ms; code=0; res.len=3152
[2025-08-20 20:51:37][359156945734918][6919 ms][DEBUG] END   runCmdUntilRes#1 in 6327 ms
[2025-08-20 20:51:37][359156945734918][6919 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:53:10][356663764037631][0 ms][INFO] === Request start ===
[2025-08-20 20:53:10][356663764037631][0 ms][DEBUG] START check_frida
[2025-08-20 20:53:10][356663764037631][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:53:10][356663764037631][303 ms][DEBUG] SU: done in 303 ms; outroot         20950     1 2262072  20016 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:53:10][356663764037631][303 ms][DEBUG] check_frida: running
[2025-08-20 20:53:10][356663764037631][303 ms][DEBUG] END   check_frida in 303 ms
[2025-08-20 20:53:10][356663764037631][303 ms][DEBUG] START check_scloud
[2025-08-20 20:53:10][356663764037631][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:53:11][356663764037631][584 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624128 78856 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:53:11][356663764037631][584 ms][DEBUG] targetPkg: running
[2025-08-20 20:53:11][356663764037631][584 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 20:53:11][356663764037631][584 ms][DEBUG] rawBody.length=1159
[2025-08-20 20:53:11][356663764037631][584 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY0MDM3NjMxIiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlXTkMwQVpUVkoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzUzNDgifQ=='" -e "main()" -q"
[2025-08-20 20:53:11][356663764037631][584 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:53:11][356663764037631][584 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY0MDM3NjMxIiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlXTkMwQVpUVkoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzUzNDgifQ=='" -e "main()" -q"
[2025-08-20 20:53:13][356663764037631][3224 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NjYzNzY0MDM3NjMxIiwibW9kZWwiOiJTTS1UNTAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjlXTkMwQVpUVkoiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMjgiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzUzNDgifQ=="\r\n
[2025-08-20 20:53:17][356663764037631][6583 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e799a02d-6a11-4683-9ce0-7a4b5d8bd74e","id":"QR_e799a02d-6a11-4683-9ce0-7a4b5d8bd74e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:53:17][356663764037631][6583 ms][DEBUG] proc_open done in 5999 ms; code=0; res.len=3152
[2025-08-20 20:53:17][356663764037631][6583 ms][DEBUG] END   runCmdUntilRes#1 in 5999 ms
[2025-08-20 20:53:17][356663764037631][6584 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:53:25][351771923017819][1 ms][INFO] === Request start ===
[2025-08-20 20:53:25][351771923017819][1 ms][DEBUG] START check_frida
[2025-08-20 20:53:25][351771923017819][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:53:25][353960260532609][1 ms][INFO] === Request start ===
[2025-08-20 20:53:25][351771923017819][300 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2279504  20076 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:53:25][351771923017819][300 ms][DEBUG] check_frida: running
[2025-08-20 20:53:25][351771923017819][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-20 20:53:25][351771923017819][300 ms][DEBUG] START check_scloud
[2025-08-20 20:53:25][351771923017819][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:53:26][351771923017819][612 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23624160 79428 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:53:26][351771923017819][612 ms][DEBUG] targetPkg: running
[2025-08-20 20:53:26][351771923017819][612 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-20 20:53:26][351771923017819][612 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:53:26][351771923017819][612 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIzMDE3ODE5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMUdYTjJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTAwIn0='" -e "main()" -q"
[2025-08-20 20:53:26][351771923017819][612 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:53:26][351771923017819][612 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzcxOTIzMDE3ODE5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMUdYTjJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTAwIn0='" -e "main()" -q"
[2025-08-20 20:53:28][351771923017819][3221 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzcxOTIzMDE3ODE5IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMUdYTjJGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTAwIn0="\r\n
[2025-08-20 20:53:31][351771923017819][5751 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cae99d12-27a6-4466-a6de-c77edcc51b14","id":"QR_cae99d12-27a6-4466-a6de-c77edcc51b14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:53:31][351771923017819][5752 ms][DEBUG] proc_open done in 5139 ms; code=0; res.len=3152
[2025-08-20 20:53:31][351771923017819][5752 ms][DEBUG] END   runCmdUntilRes#1 in 5139 ms
[2025-08-20 20:53:31][351771923017819][5752 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:53:31][353960260532609][6084 ms][DEBUG] START check_frida
[2025-08-20 20:53:31][353960260532609][6084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:53:32][353960260532609][6365 ms][DEBUG] SU: done in 281 ms; outroot         20950     1 2279504  20116 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:53:32][353960260532609][6366 ms][DEBUG] check_frida: running
[2025-08-20 20:53:32][353960260532609][6366 ms][DEBUG] END   check_frida in 281 ms
[2025-08-20 20:53:32][353960260532609][6366 ms][DEBUG] START check_scloud
[2025-08-20 20:53:32][353960260532609][6366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:53:32][353960260532609][6647 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624192 78504 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:53:32][353960260532609][6647 ms][DEBUG] targetPkg: running
[2025-08-20 20:53:32][353960260532609][6647 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 20:53:32][353960260532609][6647 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:53:32][353960260532609][6647 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTYwMjYwNTMyNjA5IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI2MDFZQUxCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzgxIn0='" -e "main()" -q"
[2025-08-20 20:53:32][353960260532609][6647 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:53:32][353960260532609][6647 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTYwMjYwNTMyNjA5IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI2MDFZQUxCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzgxIn0='" -e "main()" -q"
[2025-08-20 20:53:34][353960260532609][9271 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTYwMjYwNTMyNjA5IiwibW9kZWwiOiJTTS1HNzgwRyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFI2MDFZQUxCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MzgxIn0="\r\n
[2025-08-20 20:53:38][353960260532609][12380 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe911a7e-092b-4ddc-b366-a056957a64d5","id":"QR_fe911a7e-092b-4ddc-b366-a056957a64d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:53:38][353960260532609][12380 ms][DEBUG] proc_open done in 5733 ms; code=0; res.len=3152
[2025-08-20 20:53:38][353960260532609][12380 ms][DEBUG] END   runCmdUntilRes#1 in 5734 ms
[2025-08-20 20:53:38][353960260532609][12380 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:54:08][350525850811904][0 ms][INFO] === Request start ===
[2025-08-20 20:54:08][350525850811904][1 ms][DEBUG] START check_frida
[2025-08-20 20:54:08][350525850811904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:54:08][350525850811904][306 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2263084  20080 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:54:08][350525850811904][306 ms][DEBUG] check_frida: running
[2025-08-20 20:54:08][350525850811904][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-20 20:54:08][350525850811904][306 ms][DEBUG] START check_internet
[2025-08-20 20:54:08][350525850811904][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:54:09][350525850811904][759 ms][DEBUG] SU: done in 453 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.148/201.148/201.148/0.000 ms\n
[2025-08-20 20:54:09][350525850811904][759 ms][DEBUG] check_internet: online
[2025-08-20 20:54:09][350525850811904][759 ms][DEBUG] END   check_internet in 453 ms
[2025-08-20 20:54:09][350525850811904][759 ms][DEBUG] START check_scloud
[2025-08-20 20:54:09][350525850811904][759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:54:09][350525850811904][1009 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23624224 79100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:54:09][350525850811904][1009 ms][DEBUG] targetPkg: running
[2025-08-20 20:54:09][350525850811904][1009 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 20:54:09][350525850811904][1009 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:54:09][350525850811904][1009 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI1ODUwODExOTA0IiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUzNyJ9'" -e "main()" -q"
[2025-08-20 20:54:09][350525850811904][1009 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:54:09][350525850811904][1009 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI1ODUwODExOTA0IiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUzNyJ9'" -e "main()" -q"
[2025-08-20 20:54:11][350525850811904][3602 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTI1ODUwODExOTA0IiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjUzNyJ9"\r\n
[2025-08-20 20:54:13][350525850811904][5555 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-20 20:54:13][350525850811904][5555 ms][DEBUG] proc_open done in 4546 ms; code=0; res.len=115
[2025-08-20 20:54:13][350525850811904][5555 ms][DEBUG] END   runCmdUntilRes#1 in 4546 ms
[2025-08-20 20:54:13][350525850811904][5555 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-20 20:54:14][][0 ms][INFO] === Request start ===
[2025-08-20 20:54:14][][1 ms][DEBUG] START check_frida
[2025-08-20 20:54:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:54:14][][272 ms][DEBUG] SU: done in 271 ms; outroot         20950     1 2279504  20104 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:54:14][][272 ms][DEBUG] check_frida: running
[2025-08-20 20:54:14][][272 ms][DEBUG] END   check_frida in 271 ms
[2025-08-20 20:54:14][][272 ms][DEBUG] START check_internet
[2025-08-20 20:54:14][][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:54:14][][474 ms][DEBUG] SU: done in 202 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=102 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 102.558/102.558/102.558/0.000 ms\n
[2025-08-20 20:54:14][][474 ms][DEBUG] check_internet: online
[2025-08-20 20:54:14][][474 ms][DEBUG] END   check_internet in 202 ms
[2025-08-20 20:54:14][][474 ms][DEBUG] START check_scloud
[2025-08-20 20:54:14][][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:54:14][][771 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23624256 78752 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:54:14][][771 ms][DEBUG] targetPkg: running
[2025-08-20 20:54:14][][771 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-20 20:54:14][][771 ms][DEBUG] rawBody.length=1131
[2025-08-20 20:54:14][][771 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU3MyJ9'" -e "main()" -q"
[2025-08-20 20:54:14][][771 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:54:14][][771 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU3MyJ9'" -e "main()" -q"
[2025-08-20 20:54:17][][3379 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjU3MyJ9"\r\n
[2025-08-20 20:54:19][][4879 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 20:54:19][][4880 ms][DEBUG] proc_open done in 4109 ms; code=0; res.len=107
[2025-08-20 20:54:19][][4880 ms][DEBUG] END   runCmdUntilRes#1 in 4109 ms
[2025-08-20 20:54:19][][4880 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 20:54:19][][0 ms][INFO] === Request start ===
[2025-08-20 20:54:19][][1 ms][DEBUG] START check_frida
[2025-08-20 20:54:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:54:19][][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2279504  20144 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:54:19][][302 ms][DEBUG] check_frida: running
[2025-08-20 20:54:19][][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-20 20:54:19][][302 ms][DEBUG] START check_internet
[2025-08-20 20:54:19][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:54:19][][521 ms][DEBUG] SU: done in 219 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.859/116.859/116.859/0.000 ms\n
[2025-08-20 20:54:19][][521 ms][DEBUG] check_internet: online
[2025-08-20 20:54:19][][521 ms][DEBUG] END   check_internet in 219 ms
[2025-08-20 20:54:19][][521 ms][DEBUG] START check_scloud
[2025-08-20 20:54:19][][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:54:20][][848 ms][DEBUG] SU: done in 327 ms; outu0_a118      20979 10674 23624288 79308 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:54:20][][849 ms][DEBUG] targetPkg: running
[2025-08-20 20:54:20][][849 ms][DEBUG] END   check_scloud in 328 ms
[2025-08-20 20:54:20][][849 ms][DEBUG] rawBody.length=1131
[2025-08-20 20:54:20][][849 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ2MCJ9'" -e "main()" -q"
[2025-08-20 20:54:20][][849 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:54:20][][849 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ2MCJ9'" -e "main()" -q"
[2025-08-20 20:54:22][][3473 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQ2MCJ9"\r\n
[2025-08-20 20:54:24][][5004 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 20:54:24][][5004 ms][DEBUG] proc_open done in 4155 ms; code=0; res.len=107
[2025-08-20 20:54:24][][5004 ms][DEBUG] END   runCmdUntilRes#1 in 4155 ms
[2025-08-20 20:54:24][][5004 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 20:54:26][350525850811904][0 ms][INFO] === Request start ===
[2025-08-20 20:54:26][350525850811904][1 ms][DEBUG] START check_frida
[2025-08-20 20:54:26][350525850811904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:54:26][350525850811904][318 ms][DEBUG] SU: done in 316 ms; outroot         20950     1 2279504  20168 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:54:26][350525850811904][318 ms][DEBUG] check_frida: running
[2025-08-20 20:54:26][350525850811904][318 ms][DEBUG] END   check_frida in 317 ms
[2025-08-20 20:54:26][350525850811904][318 ms][DEBUG] START check_internet
[2025-08-20 20:54:26][350525850811904][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:54:27][350525850811904][614 ms][DEBUG] SU: done in 296 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.922/193.922/193.922/0.000 ms\n
[2025-08-20 20:54:27][350525850811904][614 ms][DEBUG] check_internet: online
[2025-08-20 20:54:27][350525850811904][614 ms][DEBUG] END   check_internet in 297 ms
[2025-08-20 20:54:27][350525850811904][615 ms][DEBUG] START check_scloud
[2025-08-20 20:54:27][350525850811904][615 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:54:27][350525850811904][864 ms][DEBUG] SU: done in 249 ms; outu0_a118      20979 10674 23624320 78400 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:54:27][350525850811904][864 ms][DEBUG] targetPkg: running
[2025-08-20 20:54:27][350525850811904][864 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 20:54:27][350525850811904][864 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:54:27][350525850811904][864 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI1ODUwODExOTA0IiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjkwIn0='" -e "main()" -q"
[2025-08-20 20:54:27][350525850811904][864 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:54:27][350525850811904][864 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTI1ODUwODExOTA0IiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjkwIn0='" -e "main()" -q"
[2025-08-20 20:54:29][350525850811904][3473 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTI1ODUwODExOTA0IiwibW9kZWwiOiJTTS1GNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1Q4MDNaU1REIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkVVQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NjkwIn0="\r\n
[2025-08-20 20:54:33][350525850811904][6847 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5be6b24-e1bf-4d7e-a090-c91e56d4e207","id":"QR_c5be6b24-e1bf-4d7e-a090-c91e56d4e207","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:54:33][350525850811904][6847 ms][DEBUG] proc_open done in 5983 ms; code=0; res.len=3152
[2025-08-20 20:54:33][350525850811904][6847 ms][DEBUG] END   runCmdUntilRes#1 in 5983 ms
[2025-08-20 20:54:33][350525850811904][6847 ms][INFO] SUCCESS response from frida (len=3152)