Report - dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2

Report Overview

Visited public
2025-01-17 18:38:10
Tags
Submit Tags
URL
dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip
Finishing URL
about:privatebrowsing
IP / ASN
54.240.174.44
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dl.dod.cyber.mil	933999	unknown	2020-05-03	2025-01-17	529 B	1.3 MB	52.85.49.129

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip
IP
52.85.49.129
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.3 MB (1347161 bytes)
Hash
644b25a2bd3a242c53d873e4974ee34b
fff5d92c5e4c615de08d12edca92c0818b871d46
302dede999db24acce8d1f875bc70ea381bc981daf63eb2393ba760ce79e6db7

Archive (11)

Filename

Md5

File type

DOD_EP_V3.xml

2969e93e25a3d83a36c73cb1fa77c703

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

MSS-legacy.adml

9051f7c44f76ae663d52582927e030d7

ASCII text, with CRLF line terminators

MSS-legacy.admx

d6ed8f967016e69df98f35cd789fa977

ASCII text, with very long lines (332), with CRLF line terminators

SecGuide.adml

672fce6a8bf2dd19297f705b5c5ec9da

XML 1.0 document, ASCII text, with very long lines (362), with CRLF line terminators

SecGuide.admx

6d11f31198419c37be9f7315a434be1e

XML 1.0 document, ASCII text, with CRLF line terminators

DoD-DISA-logos-as-JPEG.JPG

54b5df617d6b5429ef491b646365b7a9

JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 1100x330, components 3

STIG_unclass.xsl

f3b1a3299f26ea57dbbe1d6c730f28f6

XML 1.0 document, ASCII text, with CRLF line terminators

U_MS_Windows_10_STIG_V3R2_Manual-xccdf.xml

f13cbe406e07410d341fcc88ec0c0fb3

XML 1.0 document, ASCII text, with very long lines (65536), with no line terminators

U_MS_Windows_10_V3R2_Overview.pdf

4a3d444ab0544169052c458ddafbecc7

PDF document, version 1.6 (zip deflate encoded)

U_MS_Windows_10_V3R2_Revision_History.pdf

7477eaf84a0728d7d924e50ae751ab72

PDF document, version 1.6 (zip deflate encoded)

U_Readme_SRG_and_STIG.pdf

80da0676c2b71e13ab871eb29dc5c1a9

PDF document, version 1.6 (zip deflate encoded)

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip	52.85.49.129	200 OK	1.3 MB
URL User Request GET HTTP/2 dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip IP 52.85.49.129:443 ASN #16509 AMAZON-02 Certificate IssuerEntrust, Inc. Subjectpublic.cyber.mil FingerprintE1:A4:61:60:B9:54:C8:34:4E:B3:AB:30:DA:23:DE:44:2C:9D:14:B8 ValidityWed, 10 Apr 2024 00:03:15 GMT - Mon, 14 Apr 2025 00:03:14 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.3 MB (1347161 bytes) Hash 644b25a2bd3a242c53d873e4974ee34b fff5d92c5e4c615de08d12edca92c0818b871d46 302dede999db24acce8d1f875bc70ea381bc981daf63eb2393ba760ce79e6db7 HTTP Headers GET /wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip HTTP/1.1 Host: dl.dod.cyber.mil User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: application/zip content-length: 1347161 date: Fri, 17 Jan 2025 10:58:12 GMT x-amz-replication-status: COMPLETED last-modified: Wed, 16 Oct 2024 13:41:48 GMT etag: "644b25a2bd3a242c53d873e4974ee34b" x-amz-server-side-encryption: AES256 x-amz-version-id: D7E7OU25O1_YhS8kEanYOQSX7xksm4Op accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 a481094379fbeeb96ddc8b0f96f0ce90.cloudfront.net (CloudFront) x-amz-cf-pop: HEL50-C2 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: jLJweQKeWH0aycwfsrKZQeAE8_eOWu_SciGEFhtp_M6GMQXHd8xBvQ== age: 27573 X-Firefox-Spdy: h2

GET dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip

52.85.49.129

200 OK

1.3 MB

URL User Request GET HTTP/2
dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip
IP
52.85.49.129:443
ASN
#16509 AMAZON-02

Certificate
IssuerEntrust, Inc.
Subjectpublic.cyber.mil
FingerprintE1:A4:61:60:B9:54:C8:34:4E:B3:AB:30:DA:23:DE:44:2C:9D:14:B8
ValidityWed, 10 Apr 2024 00:03:15 GMT - Mon, 14 Apr 2025 00:03:14 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.3 MB (1347161 bytes)
Hash
644b25a2bd3a242c53d873e4974ee34b
fff5d92c5e4c615de08d12edca92c0818b871d46
302dede999db24acce8d1f875bc70ea381bc981daf63eb2393ba760ce79e6db7

HTTP Headers

GET /wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R2_STIG.zip HTTP/1.1
Host: dl.dod.cyber.mil
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/zip
content-length: 1347161
date: Fri, 17 Jan 2025 10:58:12 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 16 Oct 2024 13:41:48 GMT
etag: "644b25a2bd3a242c53d873e4974ee34b"
x-amz-server-side-encryption: AES256
x-amz-version-id: D7E7OU25O1_YhS8kEanYOQSX7xksm4Op
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a481094379fbeeb96ddc8b0f96f0ce90.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jLJweQKeWH0aycwfsrKZQeAE8_eOWu_SciGEFhtp_M6GMQXHd8xBvQ==
age: 27573
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (11)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers