Report - files.sampmobile.com/files/samp03dsvr_R2-800p

Report Overview

Visited public
2025-05-01 17:02:38
Tags
URL
files.sampmobile.com/files/samp03dsvr_R2-800p_win32.zip
Finishing URL
about:privatebrowsing
IP / ASN
172.67.154.118
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
files.sampmobile.com	unknown	2022-11-27	2023-09-27	2025-05-01	523 B	1.9 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
files.sampmobile.com/files/samp03dsvr_R2-800p_win32.zip
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.9 MB (1876338 bytes)
Hash
9f7151813f21f87a991020628d489dfb
357f4d273f854c7ceeceeff8c0796767f47e6eed
84fb75115cc69b103b5c483b25715589597c320f959820414719a28d7b0f7137

Archive (134)

Filename

Md5

File type

samp-license.txt

5308a732ea72aabc59cd987abce04236

ASCII text, with CRLF line terminators

samp-npc.exe

b7d72ba91bdb5cd03cb15b01e3cbf6ef

PE32 executable (console) Intel 80386, for MS Windows, 4 sections

samp-server.exe

4cde0c5ba9754b7bb114ed74835d9b54

PE32 executable (console) Intel 80386, for MS Windows, 4 sections

server.cfg

76f51b189360c0dcb702fe049a327612

ASCII text, with CRLF line terminators

server-readme.txt

d89dd094cd019ebfda27cdb79d1b7cc5

ASCII text, with CRLF line terminators

adminspec.amx

360bba4990202e001dd468ef6f6d057b

data

adminspec.pwn

08103c2c4483d2a6f8d4934b3192905d

C source, ASCII text, with CRLF line terminators

base.amx

65901d0cce578b680b1fe17dc9bade6d

data

base.pwn

652b24c1df57a2663382e6ee457994fe

C source, ASCII text, with CRLF line terminators

baseaf.amx

cdfe708cad1b5a797a6571ba22adfc5e

data

baseaf.pwn

f92cfdda97728f06d4ce7b869148fa1e

C source, ASCII text, with CRLF line terminators

cargoship.amx

610bf81ae25ef275f0d65b8f44673424

data

cargoship.pwn

c4727f3d4070b55ab8501a45f2d29b1d

C source, ASCII text, with CRLF line terminators

ferriswheel.amx

c83997ab43a95a403c628209e0dd6626

data

ferriswheel.pwn

f75e83948d617ad550c888966437d918

C source, ASCII text, with CRLF line terminators

fsdebug.amx

f1f6141fef03dbc0d8be0e113efbba69

data

fsdebug.pwn

fae6616d7dbabfed4f396403a3f78f35

C source, ASCII text, with very long lines (371), with CRLF line terminators

gl_actions.amx

c9cb00e915e0d570f62007e88883fa7c

data

gl_actions.pwn

922b46d7e81c0de458fcf95764bb756e

C source, ASCII text, with CRLF line terminators

gl_chatbubble.amx

117ef4fc84b2c31e3b47a1963f806821

data

gl_chatbubble.pwn

dbbd04172f39d3aff02d8f7174dbdf59

C source, ASCII text, with CRLF line terminators

gl_mapicon.amx

a699ec4dca8f768f349dddd0c8997bf1

data

gl_mapicon.pwn

cda399151b7012f7df4c0e6e3ab5db7b

C source, ASCII text, with CRLF line terminators

gl_npcs.amx

8e5d7dc3fa723b7bae9c8a8f5bd21db1

data

gl_npcs.pwn

f6b3acd92c511597962ccc8bd14705fb

C source, ASCII text, with CRLF line terminators

gl_property.amx

cdc99fc30d8adecaa12788f1bae64a5a

data

gl_property.pwn

969501c350a7d377b7899ce6a3355c8d

C source, ASCII text, with CRLF line terminators

gl_realtime.amx

04dea022047e95ce3c2d63629e406b74

data

gl_realtime.pwn

b4846398c9f4d2bb6ff49342b726bcda

C source, ASCII text, with CRLF line terminators

iradio.amx

550663da07240d7b50ecc6ab517589a6

data

iradio.pwn

4d679f22cdb7a5ecf155dc3e43a70139

C source, ASCII text, with CRLF line terminators

ls_elevator.amx

27082755efe1e8c41d7ca3c217d0e0ed

data

ls_elevator.pwn

58dca3a70494602f3ee067e9e4259991

C source, ASCII text, with CRLF line terminators

ls_mall.amx

d581228af171fad3f966183405cd7eaa

data

ls_mall.pwn

c449caf642dd1bee1b434df503fec92a

C source, ASCII text, with CRLF line terminators

maxips.amx

af4cab6db25e0743e7f891c86f5aa235

data

maxips.pwn

009ba532c0b1a2454e6bb35b5d91d16a

C source, ASCII text, with CRLF line terminators

menutest.amx

bf3c4c16a6c446f6ba3502a8f2b48c08

data

menutest.pwn

75851b56750995f43d4319227e0480de

C source, ASCII text, with CRLF line terminators

netstats.amx

e1a8026917d24f5ed3f40caa3d529b54

data

netstats.pwn

90628c413858cb7a93130650e981fc86

C source, ASCII text, with CRLF line terminators

npc_record.amx

a1619627fbb2c4cd92abe1492fcbe17c

data

npc_record.pwn

35129830a9b639337767f0583d8da01e

C source, ASCII text, with CRLF line terminators

pirateship.amx

e7590accc5ff6f7b5e3d3a074b8c8bca

data

pirateship.pwn

11c7ee1462162c7f261beb396779bc4e

C source, ASCII text, with CRLF line terminators

pnetstats.amx

b891a2e012cfce224f396a2985e04c03

data

pnetstats.pwn

92b2d6de790944aa58022ffcd0013bde

C source, ASCII text, with CRLF line terminators

test_cmds.amx

90003496f2b6882365017ebd36bcfa73

data

test_cmds.pwn

e65392d6fdbc7c85d6f5ed813fd0124d

C source, ISO-8859 text, with CRLF line terminators

bare.amx

fb9b1acd138d1b5051d7260e41d248d9

data

bare.pwn

30c952f3f3315874f02f928bf15866f4

C source, ASCII text, with CRLF line terminators

barron.amx

d6ff60628b5c5e186329294748f22703

data

barron.pwn

79c9a233f04755c2ec06871fa0e3d2e1

C source, ASCII text, with CRLF line terminators

grandlarc.amx

6f05bc4d1fe650235a2aa2d61b075c61

data

grandlarc.pwn

e46917c883076b5412a5c0a14f10646e

C source, ASCII text, with CRLF line terminators

lvdm.amx

3aed6967c9aed73977cec6a3888f5cd0

data

lvdm.pwn

5d01cf16ffd5d677f82fae1773328716

C source, ASCII text, with CRLF line terminators

rivershell.amx

6c324bb28cd24e90884a180ba44ee77e

data

rivershell.pwn

7337a3871e9083d74efa05c472beae13

C source, ASCII text, with CRLF line terminators

timertest.amx

f7797020e8b8366de9970032bcbea485

data

timertest.pwn

27cfa782901562849c8f72e65e317875

C source, ASCII text, with CRLF line terminators

gl_common.inc

6b99e282b7800041e39221c71d6eb3e5

ASCII text, with CRLF line terminators

gl_spawns.inc

6a85e8bd5a8cc66f259ec1c5b8bab74a

ASCII text, with CRLF line terminators

at400_ls.amx

1a632b04528f96eddec79c6954616ed9

data

at400_ls.pwn

c850ad010f648661710165049f961879

C source, ASCII text, with CRLF line terminators

at400_lv.amx

60b91946079de115554b41c2b62071ed

data

at400_lv.pwn

55b9814b4e6f9327bb5ddc974a4c021f

C source, ASCII text, with CRLF line terminators

at400_sf.amx

ea82873250735a67ece26a9f2a0ca90d

data

at400_sf.pwn

236389a4942120261141a390048cdc11

C source, ASCII text, with CRLF line terminators

npcidle.amx

2a38b122922dc806ff45b245fc328e99

data

npcidle.pwn

3f73725f9397ac896250b0a43ae58000

C source, ASCII text, with CRLF line terminators

npctest.amx

9143696894669e3c9422284e1e1b4659

data

npctest.pwn

4a01c4d306ec19992e7c308387224fc7

C source, ASCII text, with CRLF line terminators

onfoot_test.amx

2bb19e55bcdc1dca48a9c00e5ea95a12

data

onfoot_test.pwn

2ca5d01f74d500f22bea6a8ded61ae24

C source, ASCII text, with CRLF line terminators

at400_ls_to_lv_x1.rec

43cabcf96127983e9d4823a55aabdf85

data

at400_lv_to_sf_x1.rec

0f5b52679a3e7e89102db664e4b3eb1d

data

at400_sf_to_ls_x1.rec

2e0ee013dceb131793733b9d63a9ec08

data

train_ls_to_sf1.rec

c4f32391e3ef4d58cabc672a8a4d7bf9

data

train_lv_to_ls1.rec

cf4bbeefb04c04309ed253324ce987e9

data

train_sf_to_lv1.rec

f35f5c0ecbd027d627d715ad62e07c02

data

taxi_ls_test.amx

175123d1107b7b7a2823e692d61f6818

data

taxi_ls_test.pwn

2b4604801292a7c03520a3440cc7ae9d

C source, ASCII text, with CRLF line terminators

train_ls.amx

9324430f2175b9ef76e5e92c083aaa78

data

train_ls.pwn

967233083d6aaa74760157b0fac5b9ae

C source, ASCII text, with CRLF line terminators

train_lv.amx

c0fbabcafb28cd3335b771debec34c0f

data

train_lv.pwn

28693b451ec9fd5f77635c0bae1a08a1

C source, ASCII text, with CRLF line terminators

train_sf.amx

6309a6246327b767a6ce242043eae80e

data

train_sf.pwn

b0acf35e3cd7a34238db175f10335324

C source, ASCII text, with CRLF line terminators

a_http.inc

30400d86a65cc96d8b96e613a05c94ae

ASCII text, with CRLF line terminators

a_npc.inc

8b67403894575d5dd31818d97af6bbe8

C source, ASCII text, with CRLF line terminators

a_objects.inc

ffb709ca39eea3b3352e6d102f7a9f77

C source, ASCII text, with CRLF line terminators

a_players.inc

49443b192d1f54355fc3435e6f0ab9b4

C source, ASCII text, with CRLF line terminators

a_samp.inc

f002beca47158d2988519c913c7faaee

C source, ASCII text, with CRLF line terminators

a_sampdb.inc

569184ee831b204fb85ca36a8325b348

C source, ASCII text, with CRLF line terminators

a_vehicles.inc

57fceb4c646e9f9f87116a1cc0f4cb79

C source, ASCII text, with CRLF line terminators

core.inc

d7847438b214ffb46ab103bfc9bda4b4

C source, ASCII text, with CRLF line terminators

datagram.inc

c03fad740d538fbf2460608bf60bc133

C source, ASCII text, with CRLF line terminators

file.inc

ead275a80535d9983ab38a0267d5b2c9

C source, ASCII text, with CRLF line terminators

float.inc

520293c9550e21f42637c5bf041cf3fb

C source, ASCII text, with CRLF line terminators

string.inc

605c8ce0e7d205d9ab7f0b3daaa03c12

C source, ASCII text, with CRLF line terminators

time.inc

d34a0e524566b6d56514d34bdc6cf2c9

C source, ASCII text, with CRLF line terminators

libpawnc.dll

1f3b35dc739f9e6d843cfaa595f320b2

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

new.pwn

1131bcc3e69ada3d06d5e3543ccdcba2

C source, ASCII text, with CRLF line terminators

pawn.ico

791aa81cfaad4910ac5f8147525b4f88

MS Windows icon resource - 5 icons, 48x48, 16x16

pawnc.dll

127ce048627abc0c6e599b16334a6f24

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

pawncc.exe

5b8766d335b25f1a180af10cb736b6ba

PE32 executable (console) Intel 80386, for MS Windows, 4 sections

pawno.exe

325558d389c149c420a2753e0d163d09

PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

settings.ini

b3dfba2f359a31b39ca8fddd29615c97

Generic INItialization configuration [Display]

banks.txt

65b988c8e200dbd714b6f7c661dcc47c

CSV ASCII text

businesses.txt

1d1f6c6f77a6ed22c4c5e4827f36b524

CSV ASCII text

houses.txt

46317a991e18a5ceb7b884aba5fbd47c

CSV ASCII text

interiors.txt

ec7ba4ff94f2221a98dcbedcd31674e2

ASCII text, with CRLF line terminators

police.txt

ac6fdf5332876cfb4d02ff1b08e9ab1a

CSV ASCII text

bone.txt

57a5eedc09ecf5bab1f5ab02b27683ce

CSV ASCII text

flint.txt

66240c635bcb2b556ac085f9977a8b6b

CSV ASCII text

ls_airport.txt

1ba87fd5e2225549a901675d199a051b

CSV ASCII text

ls_gen_inner.txt

3af3ed838477d014efb3f9c4e180dca0

CSV ASCII text

ls_gen_outer.txt

e1f59c31a2ed9c96f104d3f6b9455ac4

CSV ASCII text

ls_law.txt

cb9abb97e10213203f5409f7b5872210

CSV ASCII text

lv_airport.txt

310e8d439f1584b4235136853684e581

CSV ASCII text

lv_gen.txt

887ff16c5d32924c81bd6609c03d7d59

CSV ASCII text

lv_law.txt

d19140de84e7438b2e1f73b856955c97

CSV ASCII text

pilots.txt

d61832890af1fb0153ec02991a159f97

CSV ASCII text

red_county.txt

39454fd23bd8416233feabfe7a7c5e2e

CSV ASCII text

sf_airport.txt

c838895fae7c82477ffc6fd41db6ea3c

CSV ASCII text

sf_gen.txt

c2ff7251d86ec90754d35b0fe7e221bd

CSV ASCII text

sf_law.txt

009ea04363d0838c76855c9d91d7f68c

CSV ASCII text

sf_train.txt

608cffe444832f1e2979836240372db1

ASCII text, with CRLF line terminators

tierra.txt

7547d7654fe766a5a181452bb8f78419

CSV ASCII text

trains.txt

03c4b1d66d44e815ba41c07f56ef82f8

CSV ASCII text

trains_platform.txt

bc8f15421ed50181989f696aa7c0d862

CSV ASCII text

whetstone.txt

7cb7484b53d849d81b6883d06c36c035

CSV ASCII text

announce.exe

3059415b8477d86de511a493704eeb44

PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 7/63

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

files.sampmobile.com/files/samp03dsvr_R2-800p_win32.zip

188.114.96.1

200 OK

1.9 MB

URL User Request GET
files.sampmobile.com/files/samp03dsvr_R2-800p_win32.zip
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectsampmobile.com
Fingerprint0D:09:A8:51:AB:72:53:D9:E8:39:5A:0E:13:9D:F9:84:C7:E5:8E:5A
ValidityMon, 21 Apr 2025 06:12:00 GMT - Sun, 20 Jul 2025 07:09:41 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.9 MB (1876338 bytes)
Hash
9f7151813f21f87a991020628d489dfb
357f4d273f854c7ceeceeff8c0796767f47e6eed
84fb75115cc69b103b5c483b25715589597c320f959820414719a28d7b0f7137

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 7/63

HTTP Headers

GET /files/samp03dsvr_R2-800p_win32.zip HTTP/1.1
Host: files.sampmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 01 May 2025 17:02:05 GMT
content-type: application/zip
content-length: 1876338
server: cloudflare
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 9390d832f9ebb515-OSL
last-modified: Fri, 28 Jul 2023 12:09:12 GMT
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0FmP3%2BuL59aJz1jqCZ8smBGPxq%2F4zJbeb6ipcg8Inkp6GTiawELabVb9v2rDlu2zYez52q8YCuHFaLkI6cMIy80K%2Bx8mULPMXjOFbhT0oawcs2cyAomNDhVbt0HYDIb6ylZY4DmhBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfCacheStatus;desc="MISS", cfL4;desc="?proto=TCP&rtt=6330&min_rtt=462&rtt_var=11685&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3286&recv_bytes=1286&delivery_rate=6188034&cwnd=254&unsent_bytes=0&cid=63b04ffdb849196d&ts=427&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (134)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers