Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.26100; en-US) PowerShell/7.6.6
first seen 2026-09-29 00:09 · last seen 2026-10-13 21:00 · JSON
Distinct clients per day (last 30 days, peak 2/day)
Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
Decomposed attributes
Browser / client
PowerShell 7.6.6
Operating system
Windows 10.0
Device class
desktop
Note
inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
2:0;4:65535|67043329|0|m,s,a,pMatch?Exact match in Thumbprint's published controlled catalog captures: powershell 7.6.6, powershell 7.6.8.The fingerprint page shows the full measured match list. More on the catalog.