spynote | SpyNote_By 30Deep[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

SpyNote_By 30Deep.zip
Size

22.5MB
MD5

26b7e4cd58c61fa431a17f897ab420a0
SHA1

c4153f6435673244d339b6f2267122e3e7737f5e
SHA256

78bc1c088363f96eecd43f6c15337f143d8ba0ba6225aad875d0f29210a48f6b
SHA512

4b2aa021928474553f8a4f7774bfb3029b3a701e0eac193d0165971a3e73904b636305260b1728066fa9d2c8adeeaed85ce53eadbc6426d14d2c39c5bf5f7fb3
SSDEEP

393216:660JCtRhbn8gL6o8eoeoABp7uGK5xn28tXMXk8PIEsien+W7Hlg40INLdTSuVM0/:6BoTl8vo8Yo0ocX7QEixIuVM0xl

Score

10^/10

spynote

Malware Config

Extracted

Family

spynote

[SPY_NOTE_HOST_OK]:[SPY_NOTE_PORT_OK]

Signatures

Spynote family
spynote

Spynote payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/SpyNote_By 30Deep/Resources/Imports/Payload/stub.apk	family_spynote

Declares broadcast receivers with permission to handle system events 1 IoCs

Processes:

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 18 IoCs

Processes:

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/SpyNote_By 30Deep/Android Tester.exe
unpack001/SpyNote_By 30Deep/CoreAudioApi.dll
unpack001/SpyNote_By 30Deep/NAudio.dll
unpack001/SpyNote_By 30Deep/Resources/Imports/Gsm/GSM.dll
unpack001/SpyNote_By 30Deep/Resources/Imports/Payload/BuildClient.exe
unpack001/SpyNote_By 30Deep/Resources/Imports/T/sS.exe
unpack001/SpyNote_By 30Deep/Resources/Imports/platform-tools/plwin.exe

Files

SpyNote_By 30Deep.zip
.zip

Password: infected
SpyNote_By 30Deep/Android Tester.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Android Projects\Sources\AndroidTester v6\AndroidTester\obj\Release\Android Tester.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote_By 30Deep/CoreAudioApi.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Begi\Desktop\MyDesktop\CoreAudioAPI(C# .NET2)\CoreAudioAPI(C# .NET2)\obj\x86\Release\CoreAudioApi.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote_By 30Deep/NAudio.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Mark\code\github\NAudio\NAudio\obj\Release\net35\NAudio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote_By 30Deep/Resources/Audio/c.wav
SpyNote_By 30Deep/Resources/Audio/v.wav
SpyNote_By 30Deep/Resources/Icons/AccountManager/account.png
.png

Password: infected
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.android.email.png
.png

Password: infected
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.bbm.account.png
.png

Password: infected
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.bbm.contacts.png
.png

Password: infected
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.dropbox.android.account.png
.png

Password: infected
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.facebook.messenger.png
.png
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.google.png
.png
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.sec.android.app.sns3.twitter.png
.png
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.twitter.android.auth.login.png
.png
SpyNote_By 30Deep/Resources/Icons/AccountManager/com.whatsapp.png
.png
SpyNote_By 30Deep/Resources/Icons/AccountManager/org.telegram.messenger.png
.png
SpyNote_By 30Deep/Resources/Icons/AccountManager/org.telegram.plus.png
.png
SpyNote_By 30Deep/Resources/Icons/AppProperties/Activities.png
.png
SpyNote_By 30Deep/Resources/Icons/AppProperties/Permissions.png
.png
SpyNote_By 30Deep/Resources/Icons/AppProperties/Receivers.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/bluetooth.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/gps.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/mobile_data.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/normal.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/silent.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/vibrate.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/wifi_connected.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/wifi_disconnected.png
.png
SpyNote_By 30Deep/Resources/Icons/Bar/wifi_rest.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b0false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b0true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b100false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b100true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b10false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b10true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b20false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b20true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b30false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b30true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b40false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b40true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b50false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b50true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b60false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b60true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b70false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b70true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b80false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b80true.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b90false.png
.png
SpyNote_By 30Deep/Resources/Icons/Battery/b90true.png
.png
SpyNote_By 30Deep/Resources/Icons/CallsManager/Incoming.png
.png
SpyNote_By 30Deep/Resources/Icons/CallsManager/Missed.png
.png
SpyNote_By 30Deep/Resources/Icons/CallsManager/Outgoing.png
.png
SpyNote_By 30Deep/Resources/Icons/CallsManager/null.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/Flash.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/Foces.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/Multi-Capture.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/Quality.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/SelectCamera.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/Sizes.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/Zoom0.png
.png
SpyNote_By 30Deep/Resources/Icons/Camera/Zoom1.png
.png
SpyNote_By 30Deep/Resources/Icons/Chat/Cdown.png
.png
SpyNote_By 30Deep/Resources/Icons/Chat/c0.png
.png
SpyNote_By 30Deep/Resources/Icons/Chat/c1.png
.png
SpyNote_By 30Deep/Resources/Icons/Chat/lap.png
.png
SpyNote_By 30Deep/Resources/Icons/DPM/f.png
.png
SpyNote_By 30Deep/Resources/Icons/DPM/l.png
.png
SpyNote_By 30Deep/Resources/Icons/DPM/p.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Camera.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/DCIM.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Desktop.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Documents.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Download.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Drive.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Left.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Pictures.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Right.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Screenshot.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Storage.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/UserProfile.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/Videos.png
.png
SpyNote_By 30Deep/Resources/Icons/FileBox/folder.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/-1.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.3gp.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.aac.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.avi.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.bmp.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.css.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.doc.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.flac.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.flv.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.gif.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.htm.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.html.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.ico.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.imy.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.jpeg.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.jpg.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.js.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.m4a.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.mid.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.mkv.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.mov.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.mp3.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.mp4.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.mxmf.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.ogg.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.ota.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.pdf.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.php.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.png.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.rar.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.rtttl.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.rtx.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.ts.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.txt.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.wav.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.webp.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.wmv.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.xmf.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.xml.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/.zip.png
.png
SpyNote_By 30Deep/Resources/Icons/FileManager/Folder Files.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/-1.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ad.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ae.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/af.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ag.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ai.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/al.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/am.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/an.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ao.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ar.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/as.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/at.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/au.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/aw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ax.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/az.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ba.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bb.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bd.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/be.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bf.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bh.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bi.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bj.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bo.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/br.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bs.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bt.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bv.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/by.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/bz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ca.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/catalonia.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cc.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cd.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cf.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ch.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ci.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ck.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cl.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/co.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cs.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cu.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cv.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cx.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cy.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/cz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/de.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/dj.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/dk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/dm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/do.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/dz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ec.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ee.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/eg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/eh.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/england.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/er.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/es.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/et.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/europeanunion.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/fam.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/fi.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/fj.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/fk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/fm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/fo.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/fr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ga.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gb.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gd.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ge.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gf.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gh.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gi.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gl.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gp.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gq.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gs.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gt.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gu.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/gy.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/hk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/hm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/hn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/hr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ht.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/hu.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/id.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ie.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/il.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/in.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/io.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/iq.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ir.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/is.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/it.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/jm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/jo.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/jp.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ke.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/kg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/kh.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ki.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/km.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/kn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/kp.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/kr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/kw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ky.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/kz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/la.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/lb.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/lc.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/li.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/lk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/lr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ls.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/lt.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/lu.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/lv.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ly.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ma.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mc.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/md.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/me.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mh.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ml.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mo.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mp.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mq.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ms.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mt.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mu.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mv.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mx.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/my.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/mz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/na.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/nc.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ne.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/nf.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ng.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ni.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/nl.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/no.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/np.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/nr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/nu.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/nz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/om.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pa.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pe.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pf.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ph.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pl.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ps.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pt.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/pw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/py.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/qa.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/re.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ro.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/rs.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ru.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/rw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sa.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sb.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sc.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/scotland.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sd.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/se.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sh.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/si.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sj.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sl.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/so.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/st.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sv.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sy.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/sz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tc.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/td.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tf.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/th.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tj.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tk.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tl.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/to.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tr.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tt.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tv.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tw.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/tz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ua.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ug.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/um.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/us.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/uy.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/uz.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/va.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/vc.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ve.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/vg.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/vi.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/vn.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/vu.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/wales.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/wf.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ws.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/ye.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/yt.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/za.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/zm.png
.png
SpyNote_By 30Deep/Resources/Icons/Flags/zw.png
.png
SpyNote_By 30Deep/Resources/Icons/Location/ErrorImage.png
.png
SpyNote_By 30Deep/Resources/Icons/Location/InitialImage.png
.png
SpyNote_By 30Deep/Resources/Icons/Location/Zoom0.png
.png
SpyNote_By 30Deep/Resources/Icons/Location/Zoom1.png
.png
SpyNote_By 30Deep/Resources/Icons/Location/roadmap.png
.png
SpyNote_By 30Deep/Resources/Icons/Location/satellite.png
.png
SpyNote_By 30Deep/Resources/Icons/Logo/Logo.png
.png
SpyNote_By 30Deep/Resources/Icons/Microphone/1SoundTemplate/Template.png
.png
SpyNote_By 30Deep/Resources/Icons/Microphone/AudioSource.png
.png
SpyNote_By 30Deep/Resources/Icons/Microphone/SampleRate.png
.png
SpyNote_By 30Deep/Resources/Icons/NFD/nf.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/MD2G.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/MD3G.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/MD4G.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/w0.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/w1.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/w2.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/w3.png
.png
SpyNote_By 30Deep/Resources/Icons/NetworkStatus/w4.png
.png
SpyNote_By 30Deep/Resources/Icons/Note/Ndown.png
.png
SpyNote_By 30Deep/Resources/Icons/Note/Nup.png
.png
SpyNote_By 30Deep/Resources/Icons/Payload/Bi.png
.png
SpyNote_By 30Deep/Resources/Icons/Payload/b0.png
.png
SpyNote_By 30Deep/Resources/Icons/Payload/b1.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/0.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/1.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/2.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/3.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/4.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/5.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/6.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/7.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/8.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/9.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/a.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/b.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/c.png
.png
SpyNote_By 30Deep/Resources/Icons/Phone/rem.png
.png
SpyNote_By 30Deep/Resources/Icons/RE/c.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/all.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/failed.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/inbox.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/l.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/outbox.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/queued.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/r.png
.png
SpyNote_By 30Deep/Resources/Icons/SMS/sent.png
.png
SpyNote_By 30Deep/Resources/Icons/Screen/Key&ScreenOff.png
.png
SpyNote_By 30Deep/Resources/Icons/Screen/Key&ScreenOn.png
.png
SpyNote_By 30Deep/Resources/Icons/Screen/ScreenOff.png
.png
SpyNote_By 30Deep/Resources/Icons/Screen/ScreenOn.png
.png
SpyNote_By 30Deep/Resources/Icons/Screen/null.png
.png
SpyNote_By 30Deep/Resources/Icons/ScrollBar/bottom-right.png
.png
SpyNote_By 30Deep/Resources/Icons/ScrollBar/dfsdf.png
.png
SpyNote_By 30Deep/Resources/Icons/Skulls/Attacks.png
.png
SpyNote_By 30Deep/Resources/Icons/Skulls/Block.png
.png
SpyNote_By 30Deep/Resources/Icons/Skulls/Disconnect.png
.png
SpyNote_By 30Deep/Resources/Icons/Skulls/NotReady.png
.png
SpyNote_By 30Deep/Resources/Icons/Skulls/Ready.png
.png
SpyNote_By 30Deep/Resources/Icons/Skulls/TimeOut.png
.png
SpyNote_By 30Deep/Resources/Icons/Skulls/UE.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/FolderDownloads.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/cmd.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/com.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/d.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/f2.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/fir.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/folder.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/p.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/po.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/pow.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/rDNS.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/0/v.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/Add.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/AddList.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/AutoDelete.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/Check.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/Check1.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/Delete.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/DeleteAll.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/Down.png
.png
SpyNote_By 30Deep/Resources/Icons/ToolStrip/Refresh.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/acc.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/ad.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/b.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/c.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/ca.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/cat.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/ch.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/clo.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/cp.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/d.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/del.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/dn.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/ed.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/eff.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/f.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/fd.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/flash.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/foc.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/fun.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/inf.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/k.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/lgs.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/loc.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/ma.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/mc.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/op_app.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/oppf.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/pack.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/pas.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/ph.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/play.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/play_s.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/prg.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/re.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/rec_au.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/ren.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/s.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/sce.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/set.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/setw.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/stop_s.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/t.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/u.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/v.png
.png
SpyNote_By 30Deep/Resources/Icons/ctx_menu/zipF.png
.png
SpyNote_By 30Deep/Resources/Icons/devico/icon.png
.png
SpyNote_By 30Deep/Resources/Icons/pinf/battery.png
.png
SpyNote_By 30Deep/Resources/Icons/pinf/device.png
.png
SpyNote_By 30Deep/Resources/Icons/pinf/sim.png
.png
SpyNote_By 30Deep/Resources/Icons/pinf/system.png
.png
SpyNote_By 30Deep/Resources/Icons/pinf/wifi.png
.png
SpyNote_By 30Deep/Resources/Icons/terminal/c.png
.png
SpyNote_By 30Deep/Resources/Icons/terminal/su.png
.png
SpyNote_By 30Deep/Resources/Icons/window/w0.png
.png
SpyNote_By 30Deep/Resources/Icons/window/w1.png
.png
SpyNote_By 30Deep/Resources/Icons/window/w2.png
.png
SpyNote_By 30Deep/Resources/Icons/window/win/0.ico
SpyNote_By 30Deep/Resources/Icons/window/win/1.ico
SpyNote_By 30Deep/Resources/Icons/window/win/10.ico
SpyNote_By 30Deep/Resources/Icons/window/win/11.ico
SpyNote_By 30Deep/Resources/Icons/window/win/12.ico
SpyNote_By 30Deep/Resources/Icons/window/win/13.ico
SpyNote_By 30Deep/Resources/Icons/window/win/14.ico
SpyNote_By 30Deep/Resources/Icons/window/win/15.ico
SpyNote_By 30Deep/Resources/Icons/window/win/16.ico
SpyNote_By 30Deep/Resources/Icons/window/win/17.ico
SpyNote_By 30Deep/Resources/Icons/window/win/18.ico
SpyNote_By 30Deep/Resources/Icons/window/win/19.ico
SpyNote_By 30Deep/Resources/Icons/window/win/2.ico
SpyNote_By 30Deep/Resources/Icons/window/win/20.ico
SpyNote_By 30Deep/Resources/Icons/window/win/21.ico
SpyNote_By 30Deep/Resources/Icons/window/win/22.ico
SpyNote_By 30Deep/Resources/Icons/window/win/23.ico
SpyNote_By 30Deep/Resources/Icons/window/win/24.ico
SpyNote_By 30Deep/Resources/Icons/window/win/25.ico
SpyNote_By 30Deep/Resources/Icons/window/win/26.ico
SpyNote_By 30Deep/Resources/Icons/window/win/3.ico
SpyNote_By 30Deep/Resources/Icons/window/win/4.ico
SpyNote_By 30Deep/Resources/Icons/window/win/5.ico
SpyNote_By 30Deep/Resources/Icons/window/win/6.ico
SpyNote_By 30Deep/Resources/Icons/window/win/7.ico
SpyNote_By 30Deep/Resources/Icons/window/win/8.ico
SpyNote_By 30Deep/Resources/Icons/window/win/9.ico
SpyNote_By 30Deep/Resources/Icons/window/ww0.png
.png
SpyNote_By 30Deep/Resources/Icons/window/ww1.png
.png
SpyNote_By 30Deep/Resources/Icons/window/ww2.png
.png
SpyNote_By 30Deep/Resources/Imports/GeoIP/GeoIP.dat
SpyNote_By 30Deep/Resources/Imports/Gsm/GSM.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\scream\Desktop\GSM\GSM\obj\Debug\netstandard2.0\GSM.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote_By 30Deep/Resources/Imports/OBU.inf
SpyNote_By 30Deep/Resources/Imports/Payload/BuildClient.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\AndroidTesterSource\SL\SL\obj\Release\SL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote_By 30Deep/Resources/Imports/Payload/ClientSettings.inf
SpyNote_By 30Deep/Resources/Imports/Payload/apktool.ascii
SpyNote_By 30Deep/Resources/Imports/Payload/apktool.zip
.zip
SpyNote_By 30Deep/Resources/Imports/Payload/stub.apk
.apk android

com.android.tester

com.android.tester.C7

Activities

com.android.tester.C7

android.intent.action.MAIN

Permissions

android.permission.FLASHLIGHT
android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_CALL_LOG
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.CAMERA
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CALL_LOG
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
android.permission.GET_TASKS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE

Receivers

com.android.tester.C10

android.provider.Telephony.SMS_RECEIVED

com.android.tester.C9

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.android.tester.C13

android.intent.action.BOOT_COMPLETED

com.android.tester.C4

android.intent.action.BOOT_COMPLETED

com.android.tester.C2

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

com.android.tester.C3

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_INSTALL

com.android.tester.C8

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

com.android.tester.C1

android.accessibilityservice.AccessibilityService
SpyNote_By 30Deep/Resources/Imports/PlayerJava/PlayerJava.jar
.jar
SpyNote_By 30Deep/Resources/Imports/T/sS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\GAMER\Desktop\Client_vb.net\Client_vb.net\obj\Debug\Client_vb.net.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote_By 30Deep/Resources/Imports/Xml/Settings/AndroidTester.xml
SpyNote_By 30Deep/Resources/Imports/options.inf
SpyNote_By 30Deep/Resources/Imports/platform-tools/pack.inf
SpyNote_By 30Deep/Resources/Imports/platform-tools/platform-tools-windows.zip
.zip
SpyNote_By 30Deep/Resources/Imports/platform-tools/plwin.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\GAMER\Desktop\plat\Build_client\obj\Debug\ld.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpyNote_By 30Deep/Resources/Imports/terminal.inf
SpyNote_By 30Deep/icon.png
.png

Sharing

General

Malware Config

Extracted

Signatures

Files

Password: infected

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 41KB - Virtual size: 40KB

.reloc Size: 512B - Virtual size: 12B

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 22KB - Virtual size: 22KB

.rsrc Size: 1024B - Virtual size: 848B

.reloc Size: 512B - Virtual size: 12B

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 496KB - Virtual size: 495KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 12B

Password: infected

Password: infected

Password: infected

Password: infected

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 41KB - Virtual size: 40KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

com.android.tester

com.android.tester.C7

Activities

com.android.tester.C7

Permissions

Receivers

com.android.tester.C10

com.android.tester.C9

com.android.tester.C13

com.android.tester.C4

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 41KB - Virtual size: 40KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 496KB - Virtual size: 495KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 41KB - Virtual size: 40KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 18KB - Virtual size: 17KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B