TCP SYN (JA4T)
27136_2-4-8-1-3_1320_7
first seen 2026-07-19 14:54 · last seen 2026-07-19 14:54 · JSON
Decomposed attributes
| TCP window | 27136 |
|---|---|
| Option kinds | 2-4-8-1-3 |
| MSS | 1320 |
| Window scale | 7 |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
t12d210700_76e208dd3e22_2dae41c691ec | 1 |
HTTP request (JA4H)
| fingerprint | co-occurrences |
|---|---|
ge11nn030000_cd680697de12_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: powershell 7.6.5, powershell 7.6.4, go-net/http 1.27.0, +7 more.The fingerprint page shows the full measured match list. More on the catalog. | 1 |
TCP SYN (p0f)
| fingerprint | co-occurrences |
|---|---|
6:50+14:0:1320:27136,7:mss,sok,ts,nop,ws::0 | 1 |
User-Agent
| fingerprint | co-occurrences |
|---|---|
Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; en-US) PowerShell/7.6.0 | 1 |
Country
| fingerprint | co-occurrences |
|---|---|
US · United States | 1 |
Network (ASN)
| fingerprint | co-occurrences |
|---|---|
AS11878 · tzulo, inc. | 1 |