{"desc":"Adium 1.5.10 (a)","ja3_hash":"93948924e733e9df15a3bb44404cd909","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-49190-49189-49157-49156-49155-49194-49193-49167-49166-49165-107-103-57-51-22-61-60-53-47-10-49159-49169-49154-49164-5,0-10-11-13,23-24-25,0"}
{"desc":"Adium 1.5.10 (b)","ja3_hash":"e4adf57bf4a7a2dc08e9495f1b05c0ea","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-49190-49189-49157-49156-49155-49194-49193-49167-49166-49165-107-103-57-51-22-61-60-53-47-10-49159-49169-49154-49164-5-4,0-10-11-13172,23-24-25,0"}
{"desc":"AirCanada Android App","ja3_hash":"d5169d6e19447685bf6f1af8c055d94d","ja3_str":"769,52393-52392-52244-52243-49195-49199-49196-49200-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-11-10,29-23-24,0"}
{"desc":"AirCanada Android App","ja3_hash":"0bb402a703d08a608bf82763b1b63313","ja3_str":"769,52393-52392-52244-52243-49195-49199-49196-49200-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-11-10-21,29-23-24,0"}
{"desc":"Android App","ja3_hash":"662fdc668dd6af994a0f903dbcf25d66","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-51-57-156-47-53-255,0-23-35-13-16-11-10,23-24-25,0"}
{"desc":"Android Google API Access","ja3_hash":"515601c4141e718865697050a7a1765f","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-49159-49169-156-157-47-53-5-255,0-11-10-13,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Android Webkit Thing","ja3_hash":"855953256ecc8e2b6d2360aff8e5d337","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-50-57-47-53-10,0-65281-10-11-35-13172-16-5-13-21,23-24-25,0"}
{"desc":"Android Webkit Thing","ja3_hash":"99d8afeec9a4422120336ad720a5d692","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-50-57-47-53-10,0-65281-10-11-35-13172-16-5-13,23-24-25,0"}
{"desc":"Android Webkit Thing","ja3_hash":"85bb8aa8e5ba373906348831bdbed41a","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-50-56-49159-49169-156-157-47-53-5-255,0-11-10-35-13-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Android Webkit Thing","ja3_hash":"1aab4c2c84b6979c707ed052f724734b","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-50-56-49159-49169-156-157-47-53-5-255,0-11-10-35-13,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Android Webkit Thing","ja3_hash":"5331a12866e19199b363f6e903381498","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-50-56-49159-49169-156-157-47-53-5-255,11-10-13,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Android Webkit Thing","ja3_hash":"25b72c88f837567856118febcca761e0","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,0-11-10-13-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Apple Push Notification System, apple.WebKit.Networking,CalendarAgent,Go for Gmail","ja3_hash":"d4693422c5ce1565377aca25940ad80c","ja3_str":", 771,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10-49159-49169-5-4,0-10-11-13-13172-16-5-18,23-24-25,0"}
{"desc":"Apple Spotlight Search (OSX)","ja3_hash":"3e404f1e1b5a79e614d7543a79f3a1da","ja3_str":"771,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-49198-49197-49190-49189-49157-49156-49155-49202-49201-49194-49193-49167-49166-49165-159-158-107-103-57-51-22-157-156-61-60-53-47-10-49159-49169-49154-49164-5-4,35-0-10-11-13-21,23-24-25,0"}
{"desc":"Apple Spotlight","ja3_hash":"69b2859aec70e8934229873fe53902fd","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10,35-0-10-11-13,23-24-25,0"}
{"desc":"Apple Spotlight","ja3_hash":"6b9b64bbe95ea112d02c8812fc2e7ef0","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10,35-0-10-11-13-21,23-24-25,0"}
{"desc":"Apple Spotlight","ja3_hash":"e5e4c0eeb02fdcf30af8235b4de07780","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10,35-0-10-11-13-13172-16,23-24-25,0"}
{"desc":"Apple SpotlightNetHelper (OSX)","ja3_hash":"97827640b0c15c83379b7d71a3c2c5b4","ja3_str":"771,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-49198-49197-49190-49189-49157-49156-49155-49202-49201-49194-49193-49167-49166-49165-159-158-107-103-57-51-22-157-156-61-60-53-47-10-49159-49169-49154-49164-5-4,35-0-10-11-13-13172-16-21,23-24-25,0"}
{"desc":"Apple usbmuxd iOS socket multiplexer","ja3_hash":"47e42b00af27b87721e526ff85fd2310","ja3_str":"769,57-56-53-22-19-10-51-50-47-154-153-150-5-4-21-18-9-20-17-8-6-3-255,35,,"}
{"desc":"AppleWebKit/533.1 (KHTML like Gecko) Version/4.0 Mobile Safari/533.1","ja3_hash":"b677934e592ece9e09805bf36cd68d8a","ja3_str":"769,4-5-47-51-50-10-22-19-9-21-18-3-8-20-17-255,,,"}
{"desc":"AppleWebKit/533.1 (KHTML like Gecko) Version/4.0 Mobile Safari/533.1","ja3_hash":"1a6ef47ab8325fbb42c447048cea9167","ja3_str":"769,57-56-53-22-19-10-51-50-47-5-4-21-18-9-20-17-8-6-3-255,,,"}
{"desc":"AppleWebKit/534.30 (KHTML like Gecko) Version/4.0 Safari & Safari Mobile/534.30, AppleWebKit/534.30","ja3_hash":"ef323f542a99ab12d6b5348bf039b7b4","ja3_str":"769,49172-49162-49186-49185-57-56-49167-49157-53-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-49166-49156-47-49169-49159-49164-49154-5-4-255,0-11-10-35-13172,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"AppleWebKit/534.30","ja3_hash":"e1e03b911a28815836d79c5cdd900a20","ja3_str":"769,49172-49162-57-56-49167-49157-53-49170-49160-22-19-49165-49155-10-49171-49161-51-50-49166-49156-47-49169-49159-49164-49154-5-4-255,0-11-10-35-13172,1-2-3-4-5-6-7-8-9-10-11-12-13-14-15-16-17-18-19-20-21-22-23-24-25,0-1-2"}
{"desc":"AppleWebKit/534.46 Mobile/9A334","ja3_hash":"04e1f90d8719caabafb76d4a7b13c984","ja3_str":"769,255-49188-49187-49162-49161-49159-49160-49192-49191-49172-49171-49169-49170-49190-49189-49194-49193-49156-49157-49154-49155-49166-49167-49164-49165-61-60-47-5-4-53-10-103-107-51-57-22,0-10-11,23-24-25,0"}
{"desc":"AppleWebKit/534.46, iOS AppleWebKit/534.46","ja3_hash":"dc08cf4510f70bf16d4106ee22f89197","ja3_str":"771,255-49188-49187-49162-49161-49159-49160-49192-49191-49172-49171-49169-49170-49190-49189-49194-49193-49156-49157-49154-49155-49166-49167-49164-49165-61-60-47-5-4-53-10-103-107-51-57-22,0-10-11-13,23-24-25,0"}
{"desc":"AppleWebKit/535 & Ubuntu Product Search","ja3_hash":"4049550d5f57eae67d958440bdc133e4","ja3_str":"768,51-103-69-57-107-136-22-50-64-68-56-106-135-19-102-47-60-65-53-61-132-10-5-4,0-65281-13,,"}
{"desc":"AppleWebKit/600.7.12 or 600.1.4","ja3_hash":"ef75a13be2ed7a82f16eefe6e84bc375","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-49190-49189-49157-49156-49155-49194-49193-49167-49166-49165-107-103-57-51-22-61-60-53-47-10-49159-49169-49154-49164-5-4,0-10-11-13,23-24-25,0"}
{"desc":"AppleWebKit/600.7.12","ja3_hash":"eaa8a172289b09a6789a415d1faac4c9","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-49190-49189-49157-49156-49155-49194-49193-49167-49166-49165-107-103-57-51-22-61-60-53-47-10-49159-49169-49154-49164-5-4,0-10-11-13-13172,23-24-25,0"}
{"desc":"Atlassian SourceTree (Tested v1.6.21.0)","ja3_hash":"1c8a17e58c20b49e3786fc61e0533e50","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-49196-49195-49188-49187-49162-49161-61-60-53-47-106-64-56-50-10-19-5-4,0-5-10-11-13-65281,23-24-25,0"}
{"desc":"Atlassian SourceTree (git library?) (Tested v1.6.21.0)","ja3_hash":"42215ee83bbf3a857a72ef42213cfbd6","ja3_str":"769,57-56-53-22-19-10-51-50-47-7-5-4-21-18-9-20-17-8-6-3-255,0,,"}
{"desc":"Aviator (Mystery 3rd) (37.0.2062.99) (OS X)","ja3_hash":"58360f4f663a0f5657f415ac2f47fe1b","ja3_str":"769,49195-49199-158-52244-52243-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-13172-16-5-18-13,23-24-25,0"}
{"desc":"Aviator Updates","ja3_hash":"5149f53b5554a31116f9d86237552ee3","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-61-60-53-47-10-49159-49169-5-4,0-10-11-13172-16-5-18,23-24-25,0"}
{"desc":"BlackBerry Browser (Tested BB10)","ja3_hash":"add211c763889c665ae4ab675165cbc4","ja3_str":"769,49196-49200-49195-49199-49188-49162-49192-49172-49187-49161-49191-49171-49160-49170-159-163-158-162-107-57-106-56-103-51-64-50-49198-49202-49197-49201-49190-49157-49194-49167-49189-49156-49193-49166-49155-49165-157-156-61-53-60-47-49169-49159-49164-49154-5-4-10-255,0-11-10-35-13-5-21,25-24-9-23-19-1,0-1-2"}
{"desc":"BlackBerry Mail Client","ja3_hash":"a921515f014005af03fc1e2c4c9e66ce","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-20-17-8-6-3-255,0-11-10-35-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Blackberry Messenger (Android) 2","ja3_hash":"4692263d4130929ae222ef50816527ca","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49170-49160-22-19-49165-49155-10-255,0-11-10-13-15-13172-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Blackberry","ja3_hash":"b5d42ca0e68a39d5c0a294134a21f020","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-20-17-8-6-3-255,0-11-10,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Blackbery Messenger (Android)","ja3_hash":"32b0ae286d1612c82cad93b4880ee512","ja3_str":"769,53-47-255,0-11-10-35-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"BrowserShots Script","ja3_hash":"01aead19a1b1780978f732e056b183a6","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-255,0-11-10-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Browsershots","ja3_hash":"a4dc1c39a68bffec1cc7767472ac85a8","ja3_str":"769,57-56-53-22-19-10-51-50-47-5-4-21-18-9-20-17-8-6-3-255,35,,"}
{"desc":"BurpSuite Free (1.6.01)","ja3_hash":"c3ca411515180e79c765dc2c3c8cea88","ja3_str":"769,49162-49172-53-49157-49167-57-56-49161-49171-47-49156-49166-51-50-49160-49170-10-49155-49165-22-19-255,10-11-0,23-24-25,0"}
{"desc":"BurpSuite Free (1.6.01)","ja3_hash":"93fbcdadc1bf98ff0e3c03e7f921edd1","ja3_str":"769,49162-49172-53-49157-49167-57-56-49161-49171-47-49156-49166-51-50-49160-49170-10-49155-49165-22-19-255,10-11,23-24-25,0"}
{"desc":"BurpSuite Free (tested: 1.6.32 Kali)","ja3_hash":"34f8cac266d07bfc6bd3966e99b54d00","ja3_str":"768,49162-49172-53-49157-49167-57-56-49161-49171-47-49156-49166-51-50-49160-49170-10-49155-49165-22-19-255,10-11-0,23-24-25,0"}
{"desc":"BurpSuite Free (tested: 1.6.32 Kali)","ja3_hash":"15617351d807aa3145547d0ad0c976cc","ja3_str":"770,49162-49172-53-49157-49167-57-56-49161-49171-47-49156-49166-51-50-49160-49170-10-49155-49165-22-19-255,10-11-0,23-24-25,0"}
{"desc":"Candy Crush (testing iOS 8.3)","ja3_hash":"17a40616b856ec472714cd144471e0e0","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-69-68-49201-49197-49193-49189-49166-49156-156-60-47-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,0-11-10-13-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Choqok 1.5 (KDE 4.14.18 Qt 4.8.6 on OpenSUSE 42.1)","ja3_hash":"64bb259b446fe13f66bcd62d1f0d33df","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-255,0-11-10-35-15,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"Chrome (Possible 41.x)","ja3_hash":"d54a0979516e607a1166e6efd157301c","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-11-10-21,23-24-25,0"}
{"desc":"Chrome (Tested: 47.0.2526.XX & 48.XX (64-bit)) #1","ja3_hash":"ac67a2d0e3bd59459c32c996b5985979","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome (Tested: 47.0.2526.XX & 48.XX (64-bit)) #2","ja3_hash":"34dfce2bb848da7c5dafa4d475f0ba41","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10-21,23-24,0"}
{"desc":"Chrome (Tested: 47.0.2526.XX & 48.XX (64-bit)) #3","ja3_hash":"937edefedb6fe13f26d1a425ef1c15a5","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-11-10,23-24,0"}
{"desc":"Chrome (Tested: 47.0.2526.XX & 48.XX (64-bit)) #4","ja3_hash":"a342d14afad3a448029ec808295ccce9","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-30032-11-10,23-24,0"}
{"desc":"Chrome (Tested: 47.0.2526.XX & 48.XX (64-bit)) #5","ja3_hash":"71e74faaed87acd177bd3b47a543f476","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-11-10-21,23-24,0"}
{"desc":"Chrome (iOS)","ja3_hash":"bec8267042d5885aa3acc07b4409cafc","ja3_str":"769,52244-52243-49195-49199-158-49162-49161-49171-49172-51-57-156-47-53-10,0-65281-10-11-35-13172-16-30032-5-18-13,23-24-25,0"}
{"desc":"Chrome (tested: Version 46.0.2490.86 (64-bit) - OS X)","ja3_hash":"1d64ab25ad6f7258581d43077147b9b1","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-11-10-21,23-24,0"}
{"desc":"Chrome (tested: Version 46.0.2490.86 (64-bit) - OS X)","ja3_hash":"230018e44608686b64907360b6def678","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-11-10,23-24,0"}
{"desc":"Chrome (tested: Version 46.0.2490.86 (64-bit) - OS X)","ja3_hash":"dea05e8c68dfeb28003f21d22efc0aba","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome 10, Chrome 10.0.648.82 (Chromium Portable 9.0)","ja3_hash":"62351d5ea3cd4f21f697965b10a9bbbe","ja3_str":"769,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-102-51-50-49164-49166-49154-49156-150-65-4-5-47-49160-49170-22-19-49165-49155-65279-10,0-65281-10-11-35-13172,23-24-25,0"}
{"desc":"Chrome 11 - 18, Chrome 11.0.696.16 - 18.0.1025.33  Chrome 11.0.696.16 (Chromium Portable 9.2), Malware Test FP: angler-ek-traffic-02","ja3_hash":"a9da823fe77cd3df081644249edbf395","ja3_str":"769,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-102-51-50-49164-49166-49154-49156-150-65-4-5-47-49160-49170-22-19-49165-49155-65279-10,0-65281-10-11-35-13172-5,23-24-25,0"}
{"desc":"Chrome 19 - 20, Chrome 19.0.1084.15 - 20.0.1132.57, Chrome 21.0.1180.89, Chrome 22.0.1229.96 - 23.0.1271.64 Safari/537.11","ja3_hash":"df4a50323dfcaf1789f72e4946a7be44","ja3_str":"769,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-102-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-65281-10-11-35-13172-5,23-24-25,0"}
{"desc":"Chrome 22.0.1201.0, Chrome/22.0.1229.96","ja3_hash":"3c8cb61208e191af38b1fbef4eacd502","ja3_str":"770,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-102-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-65281-10-11-35-13172-5,23-24-25,0"}
{"desc":"Chrome 24.0.1312.57 - 28.0.1500.72 Safari/537.36","ja3_hash":"1ef061c02d85b7e2654e11a9959096f4","ja3_str":"769,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-102-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-65281-10-11-35-13172-30031-5,23-24-25,0"}
{"desc":"Chrome 26.0.1410.43-27.0.1453.110 Safari/537.31","ja3_hash":"89d37026246d4888e78e69af4f8d1147","ja3_str":"770,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-102-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-65281-10-11-35-13172-30031-5,23-24-25,0"}
{"desc":"Chrome 29.0.1547.0","ja3_hash":"206ee819879457f7536d2614695a5029","ja3_str":"769,49162-49172-136-135-57-107-56-49167-49157-132-53-61-49159-49161-49187-49169-49171-49191-69-68-102-51-103-50-49164-49166-49154-49156-150-65-5-4-47-60-49160-49170-22-19-49165-49155-65279-10,0-65281-10-11-35-13172-30031-5-13,23-24-25,0"}
{"desc":"Chrome 29.0.1547.62","ja3_hash":"bbc3992faa92affc0d835717ea557e99","ja3_str":"769,49162-49172-57-107-53-61-49159-49161-49187-49169-49171-49191-51-103-50-5-4-47-60-10,0-65281-10-11-35-13172-30031-5-13,23-24-25,0"}
{"desc":"Chrome 29.0.1547.62","ja3_hash":"76d36fc79db002baa1b5e741fcd863bb","ja3_str":"771,49162-49172-57-107-53-61-49159-49161-49187-49169-49171-49191-51-103-50-5-4-47-60-10,0-65281-10-11-35-13172-30031-5-13,23-24-25,0"}
{"desc":"Chrome 30.0.0.0","ja3_hash":"dc3eaee99a9221345698f8a8b2f4fc3f","ja3_str":"769,49200-49196-49172-49162-163-159-107-106-57-56-157-61-53-49170-49160-22-19-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-156-60-47-49169-49159-5-4-255,0-11-10-35-13-13172,25-24-23,0"}
{"desc":"Chrome 30.0.1599.101","ja3_hash":"53c7ed581cbaf36951559878fcec4559","ja3_str":"769,49162-49172-57-107-53-61-49159-49161-49187-49169-49171-49191-51-103-50-5-4-47-60-10,0-65281-10-11-35-13172-16-30031-5-13,23-24-25,0"}
{"desc":"Chrome 31.0.1650.57 & 32.0.1700.76 Safari/537.36","ja3_hash":"fb8a6d2441ee9eaee8b560d48a8f59df","ja3_str":"769,49195-49199-158-156-49162-49172-57-53-49159-49161-49169-49171-51-50-5-4-47-10,0-65281-10-11-35-13172-16-30031-5-13,23-24-25,0"}
{"desc":"Chrome 31.0.1650.63","ja3_hash":"f7c4dc1d9595c27369a183a5df9f7b52","ja3_str":"769,49162-49172-57-53-49159-49161-49169-49171-51-50-5-4-47-10,0-65281-10-11-35-13172-16-30031-5,23-24-25,0"}
{"desc":"Chrome 33.0.1750.117","ja3_hash":"16d7ebc398d772ef9969d2ed2a15f4c0","ja3_str":"769,49195-49199-158-52244-52243-156-49162-49172-57-53-49159-49161-49169-49171-51-50-5-4-47-10,0-65281-10-11-35-13172-16-5-13-18-35655,23-24-25,0"}
{"desc":"Chrome 33.0.1750.117","ja3_hash":"f3136cf565acf70dd2f98ca652f43780","ja3_str":"769,49195-49199-158-52244-52243-156-49162-49172-57-53-49159-49161-49169-49171-51-50-5-4-47-10,0-65281-10-11-35-13172-16-30032-5-13-18-35655,23-24-25,0"}
{"desc":"Chrome 33.0.1750.154","ja3_hash":"af0ae1083ab10ac957e394c2e7ec4634","ja3_str":"769,49195-49199-158-52244-52243-156-49162-49172-57-53-49159-49161-49169-49171-51-50-5-4-47-10,0-65281-10-11-35-13172-16-30032-5-13-18,23-24-25,0"}
{"desc":"Chrome 34.0.1847.116 & 35.0.1916.114 Safari/537.36","ja3_hash":"ef3364da4d76c98a669cb828f2e5283a","ja3_str":"769,49195-49199-158-52244-52243-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-13172-16-5-13-18-35655,23-24-25,0"}
{"desc":"Chrome 34.0.1847.116 & 35.0.1916.114 Safari/537.36","ja3_hash":"4807d61f519249470ebed0b633e707cf","ja3_str":"769,49195-49199-158-52244-52243-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-13172-16-30032-5-13-18,23-24-25,0"}
{"desc":"Chrome 36.0.1985.125 & 37.0.2062.102 Safari/537.36","ja3_hash":"5b348680dec77f585cfe82513213ac3a","ja3_str":"769,49195-49199-158-52244-52243-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-13172-16-5-18-13-21,23-24-25,0"}
{"desc":"Chrome 36.0.1985.125 - 40.0.2214.93 Safari/537.36","ja3_hash":"52be6e88840d2211a243d9356550c4a5","ja3_str":"769,49195-49199-158-52244-52243-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-13172-16-30032-5-18-13,23-24-25,0"}
{"desc":"Chrome 37.0.0.0 Safari & Mobile Safari/537.36","ja3_hash":"5f775bbfc50459e900d464ca1cecd136","ja3_str":"769,52244-52243-52245-49172-49162-57-56-53-49170-49160-22-19-10-49199-49195-49171-49161-162-158-51-50-156-47-49169-49159-5-4-255,0-35-13-13172-11-10,25-24-23,0"}
{"desc":"Chrome 37.0.0.0","ja3_hash":"a167568462b993d5787488ece82a439a","ja3_str":"769,52244-52243-52245-49172-49162-57-56-53-49170-49160-22-19-10-49199-49195-49171-49161-162-158-51-50-156-47-49169-49159-5-4-255,0-35-13-13172-11-10-21,25-24-23,0"}
{"desc":"Chrome 37.0.2062.120","ja3_hash":"98652faa7e0a4d85f91e37aa6b8c0135","ja3_str":"769,49162-49161-49171-49172-49159-49169-51-50-57-47-53-10-5-4,0-65281-10-11-35-13172-16-30032-5-18,23-24-25,0"}
{"desc":"Chrome 41.0.2272.89","ja3_hash":"8b8322bad90e8bfbd66e664839b7a037","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-30032-11-10,23-24-25,0"}
{"desc":"Chrome 42.0.2311.135","ja3_hash":"aa9074aa1ff31c65d01c35b9764762b6","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-30032-11-10-21,23-24,0"}
{"desc":"Chrome 42.0.2311.135","ja3_hash":"de0963bc1f3a0f70096232b272774025","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome 43.0.2357.132 & 45.02454.94","ja3_hash":"3bb36ec17fef5d3da04ceeb6287314c6","ja3_str":"769,52244-52243-52245-49195-49199-158-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome 48.0.2564.116","ja3_hash":"cd3f72760dfd5575b91213a8016c596b","ja3_str":"769,49195-49199-52244-52243-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome 48.0.2564.97","ja3_hash":"5406c4a87aa6cbcb7fc469fee526a206","ja3_str":"769,52244-52243-49195-49199-158-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome 49.0.2623.75","ja3_hash":"503fe06db7ef09b2cbd771c4e784c686","ja3_str":"769,49195-49199-52393-52392-52244-52243-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome 50.0.2661.102 1","ja3_hash":"bd4267e1672f9df843ada7c963490a0d","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10,0-10-11-13-5-18,23-24-25,0"}
{"desc":"Chrome 50.0.2661.102 2","ja3_hash":"caeb3b546fc7469776d51f1f54a792ca","ja3_str":"769,49195-49199-52393-52392-52244-52243-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-11-10,29-23-24,0"}
{"desc":"Chrome 51.0.2704.106 (test)","ja3_hash":"aa84deda2a937ad225ef94161887b0cb","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-65-49170-49160-22-19-16-13-49165-49155-10-255,11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Chrome 51.0.2704.84 1","ja3_hash":"473e8bad0e8e1572197be80faa1795c3","ja3_str":"769,49195-49199-52393-52392-52244-52243-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,29-23-24,0"}
{"desc":"Chrome 51.0.2704.84 2","ja3_hash":"e0b0e6c934c686fd18a5727648b3ed4f","ja3_str":"769,49195-49199-49196-49200-52393-52392-52244-52243-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10,29-23-24,0"}
{"desc":"Chrome 51.0.2704.84 3","ja3_hash":"7ddfe8d6f8b51a90d10ab3fe2587c581","ja3_str":"769,49195-49199-49196-49200-52393-52392-52244-52243-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-11-10,29-23-24,0"}
{"desc":"Chrome 51.0.2704.84 4","ja3_hash":"bc76a4185cc9bd4c72471620e552618c","ja3_str":"769,49195-49199-49196-49200-52393-52392-52244-52243-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-30032-11-10,29-23-24,0"}
{"desc":"Chrome 51.0.2704.84 5","ja3_hash":"8e3eea71cb5a932031d90cc0fba581bc","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10,0-10-11-13-13172-16-5-18,23-24-25,0"}
{"desc":"Chrome 51.0.2704.84 6","ja3_hash":"653924bcb1d6fd09a048a4978574e2c5","ja3_str":"769,49195-49199-49196-49200-52393-52392-52244-52243-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10-21,29-23-24,0"}
{"desc":"Chrome 51.0.2704.84 7","ja3_hash":"1ef652ecfb8e60e771a4710166afc262","ja3_str":"769,49195-49199-49196-49200-52393-52392-52244-52243-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-11-10-21,29-23-24,0"}
{"desc":"Chrome WebSockets (48.xxxx) - also TextSecure Desktop","ja3_hash":"cafd1f84716def1a414c688943b99faf","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-18-30032-11-10-21,23-24,0"}
{"desc":"Chrome WebSockets (48.xxxx)","ja3_hash":"62d8823f52dd8e1ba75a9a83e8748313","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-18-30032-11-10,23-24,0"}
{"desc":"Chrome/30.0.1599.101","ja3_hash":"c405bbbe31c0e53ac4c8448355b2af5b","ja3_str":"771,49162-49172-57-107-53-61-49159-49161-49187-49169-49171-49191-51-103-50-5-4-47-60-10,0-65281-10-11-35-13172-16-30031-5-13,23-24-25,0"}
{"desc":"Chrome/41.0.2272.89","ja3_hash":"2c3221f495d5e4debbb34935e1717703","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-30032-11-10-21,23-24-25,0"}
{"desc":"Cisco AnyConnect Secure Mobility Client (3.1.09013)","ja3_hash":"7f340e6caa1fa4c979df919227160ff6","ja3_str":"769,53-47-10-5-4-255,,,"}
{"desc":"Citrix Receiver 4.4.0.8014","ja3_hash":"203157ed9f587f0cfd265061bf309823","ja3_str":"769,157-156-53-47-5-4-10-255,13-5,,"}
{"desc":"Customised Postfix - Damnit Matt","ja3_hash":"f865de0807a17e9cb797e618162356db","ja3_str":"769,49199-49200-49171-49172-49191-49192-158-159-51-57-103-107-49196-49188-49162-165-163-161-106-105-104-56-55-54-136-135-134-133-49177-167-109-58-137-49202-49198-49194-49190-49167-49157-157-61-53-132-49195-49187-49161-164-162-160-64-63-62-50-49-48-154-153-152-151-69-68-67-66-49176-166-108-52-155-70-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49170-49160-22-19-16-13-49175-27-49165-49155-10-49169-49159-49174-24-49164-49154-5-4-255,11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"DropBox (tested: 3.12.5 - Ubuntu 14.04TS & Win 10)","ja3_hash":"653d342bee5001569662198a672746af","ja3_str":"769,49172-49171-49169-57-51-53-47-255,0-11-10-35-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Dropbox (Win 8.1)","ja3_hash":"482a11a20da1629b77aaadf640478d13","ja3_str":"769,49172-49171-49169-57-51-53-47-255,0-35,,"}
{"desc":"Dropbox (installer?)","ja3_hash":"ede63467191e9a12300e252c41ca9004","ja3_str":"769,49172-49171-53-47-49162-49161-56-50-10-19,65281-0-5-10-11-35,23-24,0"}
{"desc":"Dropbox Setup (tested: 3.10.11 on Win 8.x)","ja3_hash":"2f8363419a9fb80ad46b380778d8eaf1","ja3_str":"769,49172-49171-53-47-49162-49161-56-50-10-19,0-5-10-11-35-65281,23-24,0"}
{"desc":"Dropbox Splash Pages (Win 10)","ja3_hash":"c1e8322501b4d56d484b50bd7273e798","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-65-49169-49159-49164-49154-5-4-255,0-11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Dropbox Windows","ja3_hash":"6c141f98cd79d8b505123e555c1c3119","ja3_str":"769,49162-49161-49172-49171-53-47-10-56-50-19-5-4,0-5-10-11-35-23-65281,23-24,0"}
{"desc":"Dropbox","ja3_hash":"36bc8c7e10647bbfea3f740e7f05c0f1","ja3_str":"769,49200-49192-49172-49199-49191-49171-159-107-57-158-103-51-157-61-53-156-60-47-255,0-11-10-35-13,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Facebook iOS","ja3_hash":"576a1288426703ae0008c42f95499690","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-49202-49198-49194-49190-49167-49157-157-61-53-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-49201-49197-49193-49189-49166-49156-156-60-47-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,0-11-10-35-13-13172,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"FireFox 40.0.3 (tested Windows 8), Firefox/37.0","ja3_hash":"2872afed8370401ec6fe92acb53e5301","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-65281-10-11-35-13172-16-5-13-21,23-24-25,0"}
{"desc":"FireFox 49 (TLSv1.3 enabled - I think websockets)","ja3_hash":"1996e434b11323df4e87f8fe0e702209","ja3_str":"769,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-65282-40-13,23-24-25,0"}
{"desc":"FireFox 49 (TLSv1.3 enabled)","ja3_hash":"8ed0a2cdcad81fc29313910eb94941d8","ja3_str":"769,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-65282-40-13-21,23-24-25,0"}
{"desc":"FireFox 49 (dev edition)","ja3_hash":"f586111542f330901d9a3885a9c821b5","ja3_str":"769,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-13,23-24-25,0"}
{"desc":"Firefox 24.0 Iceweasel24.3.0","ja3_hash":"3d99dda4f6992b35fdb16d7ce1b6ccba","ja3_str":"769,49162-49161-49171-49172-49160-49170-49159-49169-51-50-69-68-57-56-136-135-22-19-49156-49166-49157-49167-49155-49165-49154-49164-47-65-53-132-150-65279-10-5-4,0-65281-10-11-35-13172,23-24-25,0"}
{"desc":"Firefox 25.0","ja3_hash":"c57914fadb301a73e712378023b4b177","ja3_str":"769,255-49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-10-11-35-13172-5,23-24-25,0"}
{"desc":"Firefox 26.0, Firefox/26.0","ja3_hash":"755cdaa3496eb8728247a639dee17aad","ja3_str":"769,255-49162-49172-136-135-57-56-49167-49157-132-53-49161-49159-49171-49169-69-68-51-50-49166-49164-49156-49154-150-65-47-5-4-49160-49170-22-19-49165-49155-65279-10,0-10-11-35-13172-5,23-24-25,0"}
{"desc":"Firefox 27.0","ja3_hash":"ff9223b5c9a5d44a8a423833751fa158","ja3_str":"769,49195-49199-49161-49171-49162-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4,0-65281-10-11-35-13172-5-13,23-24-25,0"}
{"desc":"Firefox 3.0.19","ja3_hash":"df9bedd5713fe0cc2e9184d7c16a5913","ja3_str":"769,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-65-4-5-47-49160-49170-22-19-49165-49155-65279-10,0-10-11-35,23-24-25,0"}
{"desc":"Firefox 3.5 - 3.6, Firefox 3.5.19  3.6.27  SeaMonkey 2.0.14","ja3_hash":"4a9bd55341e1ffe6fedb06ad4d3010a0","ja3_str":"769,255-49162-49172-136-135-56-49167-49157-132-53-57-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-4-5-47-49160-49170-22-19-49165-49155-65279-10,0-10-11-35,23-24-25,0"}
{"desc":"Firefox 46.0","ja3_hash":"46129449560e5731dc9c5106f111a3db","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-13-21,23-24-25,0"}
{"desc":"Firefox 46.0","ja3_hash":"d06b3234356cb3df0983fc8dd02ece68","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-13,23-24-25,0"}
{"desc":"Firefox 47.0 2","ja3_hash":"05ece02fb23acf2efbfff54ce4099a45","ja3_str":"769,49195-49199-52393-52392-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-13-21,23-24-25,0"}
{"desc":"Firefox 47.x 1 / FireFox 47.x (Windows 7SP1)","ja3_hash":"aa907c2c4720b6f54cd8b67a14cef0a3","ja3_str":"769,49195-49199-52393-52392-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-13,23-24-25,0"}
{"desc":"Firefox 49.0a2 Developer TLS 1.3 enabled","ja3_hash":"8b18c5b0c54cba1ffb2438fe24792b63","ja3_str":"769,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-13172-16-5-65282-40-13,23-24-25-256,0"}
{"desc":"Firefox 63.0","ja3_hash":"b20b44b18b853ef29ab773e921b03422","ja3_str":"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-16-5-51-43-13-45-28-21,29-23-24-25-256-257,0"}
{"desc":"Firefox/10.0.11esrpre Iceape/2.7.12","ja3_hash":"55f2bd38d462d74fb6bb72d3630aae16","ja3_str":"769,255-49162-49172-136-135-56-49167-49157-132-53-57-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-10-11-35,23-24-25,0"}
{"desc":"Firefox/13.0-25.0, Malware Test FP: angler-ek-traffic-02","ja3_hash":"85c420ab089dac5025034444789a8fb5","ja3_str":"769,255-49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-10-11-35-13172,23-24-25,0"}
{"desc":"Firefox/25.0","ja3_hash":"e98db583389531a37f2fe8d251f0f7ae","ja3_str":"769,255-49162-49172-136-135-57-56-49167-49157-132-53-49161-49159-49171-49169-69-68-51-50-49166-49164-49156-49154-150-65-47-5-4-49160-49170-22-19-49165-49155-65279-10,0-10-11-35-13172,23-24-25,0"}
{"desc":"Firefox/27.0-32.0, IceWeasel 31.8.0","ja3_hash":"cc9bcf019b339c01d200515d1cb39092","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4,0-65281-10-11-35-13172-5-13,23-24-25,0"}
{"desc":"Firefox/28.0-30.0","ja3_hash":"45d22e6403f053bfb2cc223755588533","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4,0-65281-10-11-35-13172-5-13-35655,23-24-25,0"}
{"desc":"Firefox/32.0","ja3_hash":"8df37d4e7430e2d9a291ae9ee500a1a9","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4,0-65281-10-11-35-13172-5-13-21,23-24-25,0"}
{"desc":"Firefox/33.0","ja3_hash":"c5392af25feaf95cfefe858abd01c86b","ja3_str":"769,49195-49199-49162-49161-49171-49172-49159-49169-51-50-57-47-53-10-5-4,0-65281-10-11-35-13172-5-13-21,23-24-25,0"}
{"desc":"Firefox/33.0","ja3_hash":"5ba6ed04b246c96c6839e0268a8b826f","ja3_str":"769,49195-49199-49162-49161-49171-49172-49159-49169-51-50-57-47-53-10-5-4,0-65281-10-11-35-13172-5-13,23-24-25,0"}
{"desc":"Firefox/34.0-35.00","ja3_hash":"ab834ac5135f2204d473878821979cea","ja3_str":"769,49195-49199-49162-49161-49171-49172-49159-49169-51-50-57-47-53-10-5-4,0-65281-10-11-35-13172-16-5-13-21,23-24-25,0"}
{"desc":"Firefox/34.0-35.00","ja3_hash":"9250f97ba65d86e7b0e60164c820d91a","ja3_str":"769,49195-49199-49162-49161-49171-49172-49159-49169-51-50-57-47-53-10-5-4,0-65281-10-11-35-13172-16-5-13,23-24-25,0"}
{"desc":"Firefox/37.0, Google Chrome 45.0.2454.85 or FireFox 41-42","ja3_hash":"514058a66606ae870bcc670e95ca7e68","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-65281-10-11-35-13172-16-5-13,23-24-25,0"}
{"desc":"Firefox/6.0.1 - 12.0","ja3_hash":"2aef69b4ba1938c3a400de4188743185","ja3_str":"769,255-49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-4-5-47-49160-49170-22-19-49165-49155-65279-10,0-10-11-35,23-24-25,0"}
{"desc":"Firefox/52","ja3_hash":"ca0f3f4c08cbd372720beb1af7d2721f","ja3_str":"769,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-16-5-18-65283-13-0,29-23-24-25,0"}
{"desc":"Flux","ja3_hash":"504ecb2d3e5e83a179316f098dadbaeb","ja3_str":"769,255-49196-49195-49188-49162-49187-49161-49200-49199-49192-49191-49171,0-10-11-13-13172-16-5-18,23-24-25,0"}
{"desc":"FullTilt Poker v16.5 (OS X) #1","ja3_hash":"a6090977601dc1345948f101e46d5759","ja3_str":"769,51-57-255,35,,"}
{"desc":"FullTilt Poker v16.5 (OS X) or DropBox","ja3_hash":"f1b9f86645cb839bd6992e848d943898","ja3_str":"769,57-56-53-22-19-10-51-50-47-5-4-255,0-35,,"}
{"desc":"GMail SMTP Relay","ja3_hash":"a3b2fe29619fdcb7a9422b8fddb37a67","ja3_str":"769,49195-49199-49159-49169-49161-49171-49162-49172-156-5-4-47-10-53-51-57-255,0-35-13-11-10-23,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"GNU Wget 1.16.1 built on darwin14.0.0","ja3_hash":"94b94048a438e77122fc4eee3a6a4a26","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,0-11-10-35-13-15,14-13-25-28-11-12-27-24-9-10-26-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"GNUTLS Commandline","ja3_hash":"0267b752d6a8b5fd195096b41ea5839c","ja3_str":"769,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49160-49159-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-49169-156-157-49274-49275-47-60-53-61-65-186-132-192-10-5-4-158-159-49276-49277-51-103-57-107-69-190-136-196-22-162-163-49280-49281-50-64-56-106-68-189-135-195-19-102,5-0-65281-35-10-11-13,23-24-25-21-19,0"}
{"desc":"Git-Bash (Tested v2.6.0) / curl 7.47.1 (cygwin)","ja3_hash":"d0df7f7c9ca173059b2cd17ce5c2e5cc","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49170-49160-22-19-16-13-49165-49155-10-255,0-11-10-13-15-13172-16-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"GitHub Desktop (tested build 216 on OSX)","ja3_hash":"f8c50bbee59c526ca66da05f3dc4b735","ja3_str":"769,255-49196-49195-49188-49162-49187-49161-49200-49199-49192-49191-49171,0-10-11-13-5-18,23-24-25,0"}
{"desc":"Glympse Location Tracking??","ja3_hash":"c5cbafbbcf53dfbfc2a803ca3833fce2","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-20-17-8-6-3-255,0-11-10-35,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Google Calendar Agent (Tested on OSX)","ja3_hash":"07ef3a7f5f8ffef08affb186284f2af4","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10-49159-49169-5-4,0-10-11-13172-16-5-18,23-24-25,0"}
{"desc":"Google Chrome (43.0.2357.130 64-bit OSX)","ja3_hash":"abe568de919448adcd756aea9a136aea","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-16-11-10-21,23-24,0"}
{"desc":"Google Chrome (Android)","ja3_hash":"400961c8161ba7661a7029d3f7e8bb95","ja3_str":"769,52244-52243-52245-49195-49199-158-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-30032-11-10,23-24-25,0"}
{"desc":"Google Chrome (tested: 43.0.2357.130 64-bit OSX)","ja3_hash":"072c0469aa4f2f597bb38bcc17095c51","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-16-11-10,23-24,0"}
{"desc":"Google Chrome (tested: 43.0.2357.130 64-bit OSX)","ja3_hash":"c40b51e2a59425b6a2b500d569962a60","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-16-30032-11-10-21,23-24,0"}
{"desc":"Google Chrome (tested: 43.0.2357.130 64-bit OSX)","ja3_hash":"696cd0c8c241e19e3d6336c3d3d9e2e0","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Google Chrome 45.0.2454.101","ja3_hash":"e8aabc4fe1fc8d47c648d37b2df7485f","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-51-57-156-47-53-10,0-65281-10-11-35-13172-16-30032-5-18-13,23-24-25,0"}
{"desc":"Google Chrome 46.0.2490.71 m","ja3_hash":"7ea3e17d09294aee8425ae05588f0c66","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10-21,23-24,0"}
{"desc":"Google Chrome 46.0.2490.71","ja3_hash":"a9030ea4837810ce89fb8a3d39ca12ed","ja3_str":"769,52244-52243-52245-49195-49199-158-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Google Drive (tested: 1.26.0707.2863 - Win 8.x & Win 10)","ja3_hash":"c1741dd3d2eec548df0bcd89e08fa431","ja3_str":"769,49172-49162-49167-49157-57-56-49171-49161-49166-49156-51-50-49170-49160-49165-49155-136-135-69-68-22-19-53-47-132-65-10-255,0-11-10-35-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Google Earth Linux 7.1.4.1529","ja3_hash":"b16614e71d26ba348c94bfc8e33b1767","ja3_str":"769,136-135-57-56-132-53-69-68-102-51-50-150-65-4-5-47-22-19-65279-10,0-65281-10-11-35-5,23-24-25,0"}
{"desc":"Google Mail server starttls connection","ja3_hash":"9af622c65a17a0bf90d6e9504be96a43","ja3_str":"769,49195-49199-49200-49161-49171-49162-49172-156-157-47-10-53-51-57-49159-49169-5-4,65281-0-23-35-13-11-10,29-23-24,0"}
{"desc":"GoogleBot","ja3_hash":"50dfee94717e9640b1c384e5bd78e61e","ja3_str":"769,49195-49199-49200-49161-49171-49162-49172-156-157-47-10-53-51-57,65281-0-23-35-13-13172-11-10,29-23-24,0"}
{"desc":"Great Firewall of China Probe (via pcaps from https://nymity.ch/active-probing/)","ja3_hash":"e76ac6872939f6ebfdf75f1ea73b4daf","ja3_str":"769,57-56-53-22-19-10-51-50-47-5-255,35,,"}
{"desc":"HipChat","ja3_hash":"d9b07b9095590f4ff910ceee7b6af88a","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-141-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-140-49169-49159-49164-49154-5-4-138-255,0-11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"IE 11","ja3_hash":"78273d33877a36c0c30e3fb7578ee9e7","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-5-10-11-13-35-16-13172-65281,23-24,0"}
{"desc":"IE 11","ja3_hash":"4cafc7a0acf83a49317ca199b2f25c82","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-5-10-11-13-35-65281,23-24,0"}
{"desc":"In all the malware samples - Java updater perhaps, java","ja3_hash":"a61299f9b501adcf680b9275d79d4ac6","ja3_str":", 771,49187-49191-60-49189-49193-103-64-49161-49171-47-49156-49166-51-50-49195-49199-156-49197-49201-158-162-49160-49170-10-49155-49165-22-19-49159-49169-5-49154-49164-4-255,10-11-13-0,23-1-3-19-21-6-7-9-10-24-11-12-25-13-14-15-16-17-2-18-4-5-20-8-22,0"}
{"desc":"Internet Explorer 11 .0.9600.1731.(Win 8.1)","ja3_hash":"a6776199188c09f5124b46b895772fa2","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,65281-0-5-10-11-13-35-16-13172,23-24,0"}
{"desc":"Internet Explorer 11.0.9600.17959","ja3_hash":"a264c0bb146b2fade4410bcd61744b69","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-49196-49195-49188-49187-49162-49161-61-60-53-47-106-64-56-50-10-19,0-5-10-11-13-65281,23-24-25,0"}
{"desc":"Internet Explorer 11.0.9600.18349 / TeamViewer 10.0.47484P / Notepad++ Update Check / Softperfect Network Scanner Update Check / Wireshark 2.0.4 Update Check, Malware Test FP: usps-malspam-js-file-post-infection-traffic","ja3_hash":"d54b3eb800cbeccf99fd5d5cdcd7b5b5","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-5-10-11-13-23-65281,23-24,0"}
{"desc":"Java 8U91 Update Check, Windows Java Plugin (tested: v8 Update 60), BurpSuite Free (Tested: 1.7.03 on Windows 10), java,studio,eclipse, Malware Test FP: java-update-traffic-edited","ja3_hash":"2db6873021f2a95daa7de0d93a1d1bf2","ja3_str":", 771,49187-49191-60-49189-49193-103-64-49161-49171-47-49156-49166-51-50-49195-49199-156-49197-49201-158-162-49160-49170-10-49155-49165-22-19-255,10-11-13-0,23-1-3-19-21-6-7-9-10-24-11-12-25-13-14-15-16-17-2-18-4-5-20-8-22,0"}
{"desc":"K9 Mail (Android)","ja3_hash":"ced7418dee422dd70d2a6f42bb042432","ja3_str":"769,49172-49162-57-56-53-49171-49161-51-50-47-49169-49159-5-49195-49196-49199-49200-158-159-156-157-255,11-10-13,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Konqueror 4.14.18 (openSUSE Leap 42.1) 2","ja3_hash":"8194818a46f5533268472f2167ffec70","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-255,0-11-10-35-13-15-21,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"Konqueror 4.14.18 / Kmail 4.14.18 (openSUSE Leap 42.1) 1","ja3_hash":"78253eb48a1431a4bbbe6bb4358464ac","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-255,0-11-10-35-13-15,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"Konqueror 4.8, OpenSSL s_client (tested: 1.0.1f - Ubuntu 14.04TS)","ja3_hash":"0e0b798d0208ad365eec733b29da92a6","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-21-18-9-255,11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"MS Edge","ja3_hash":"8d2e46c9e2b1ee9b1503cab4905cb3e0","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10-106-64-56-50-19,0-5-10-11-13-35-16-23-65281,23-24,0"}
{"desc":"MS Office Components","ja3_hash":"f66b0314f269695fe3528ef39a27c158","ja3_str":"769,49172-49171-49162-49161-53-47-56-50-10-19,0-10-11-65281,25-23-24,0"}
{"desc":"MSIE 10.0 Trident/6.0, Malware Test FP: blackhole-ek-traffic, sweet-orange-ek-post-infection-traffic, sweet-orange-ek-traffic, styx-ek-traffic","ja3_hash":"2201d8e006f8f005a6b415f61e677532","ja3_str":"769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,65281-0-5-10-11,23-24,0"}
{"desc":"MSIE 10.0 Trident/6.0)","ja3_hash":"7b3b37883b5e80065b35f27888ed2b04","ja3_str":"769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,65281-0-5-10-11-35,23-24,0"}
{"desc":"MSIE 8.0 & 9.0 Trident/5.0)","ja3_hash":"2baf01616e930d378df97576e2686df3","ja3_str":"769,47-53-5-10-49161-49162-49171-49172-50-56-19-4,0-5-10-11-65281,23-24-25,0"}
{"desc":"Mail app iOS","ja3_hash":"0cbbafcdaf63cbf1e490c4a2d903f24b","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-49190-49189-49157-49156-49155-49194-49193-49167-49166-49165-107-103-57-51-22-61-60-53-47-10-49159-49169-49154-49164-5-4,0-10-11,23-24-25,0"}
{"desc":"Malware: Dridex, Malware Test FP: dyre-phishing-run-traffic, upatre-dyre-infection-traffic, phishing-email-traffic, upatre-dyre-malspam-infecting-a-vm, upatre-dyre-malspam-traffic, ups-themed-kovter-malspam-traffic","ja3_hash":"67f762b0ffe3aad00dfdb0e4b1acd8b5","ja3_str":"769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,65281-5-10-11,23-24,0"}
{"desc":"Malware: Gootkit","ja3_hash":"a34e8a810b5f390fc7aa5ed711fa6993","ja3_str":"769,49169-49159-49164-49154-5-49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-69-68-49166-49156-47-65-49170-49160-22-19-49165-49155-10-255,0-11-10-35-13172,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware: Gootkit, Malware Test FP: neutrino-ek-after-mu-media.co.uk, realstatistics-gate-neutrino-ek-sends-gootkit-after-nebularoficial.com, post-infection-traffic-for-gootkit-malware-from-eitest-neutrino-ek, example-of-gootkit-post-infection-traffic, eitest-angler-ek-first-run-post-infection-traffic-gootkit, st-run-gootkit-post-infection-traffic","ja3_hash":"c6e36d272db78ba559429e3d845606d1","ja3_str":"769,49169-49159-49164-49154-5-49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-69-68-49166-49156-47-65-49170-49160-22-19-49165-49155-10-255,11-10-35-13172,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware: TBot / Skynet Tor Botnet","ja3_hash":"b50f81ae37fb467713e167137cf14540","ja3_str":"769,49162-49172-57-56-49167-49157-53-49159-49161-49169-49171-51-50-49164-49166-49154-49156-4-5-47-49160-49170-22-19-49165-49155-65279-10-255,0-11-10-35,1-2-3-4-5-6-7-8-9-10-11-12-13-14-15-16-17-18-19-20-21-22-23-24-25,0-1-2"}
{"desc":"Malware: Unknown traffic associated with Dridex","ja3_hash":"b9103d9d134e0c59cafbe4ae0a8299a8","ja3_str":"768,5-10-19-4-255,,,"}
{"desc":"Malware: https://www.virustotal.com/en/file/802d683b596d7ce7ae373b15fa4a8e8c2a237bd15bc8ef655fbd2c41239fa2c8/analysis/1433178940/","ja3_hash":"84a315236aceb31ad56f5647dc64f793","ja3_str":"769,49172-49162-57-56-49167-49157-53-136-135-132-49171-49161-51-50-49166-49156-47-154-153-69-68-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-20-17-8-6-3-255,11-10-35-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware: https://www.virustotal.com/file/07853289247c4c932ddfbf4c215b4e86240fab6661a6d6a85ac8ee37fe92b9be/analysis/1433596684/o","ja3_hash":"73fab4ba757fdd5aac4729eb20f07c04","ja3_str":"769,52244-52243-49195-49199-158-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-13172-16-30032-5-18-13,23-24-25,0"}
{"desc":"Malware: https://www.virustotal.com/file/bbb3fbd2e8289d04733f8f005dc6410b050bee193a12ddf2f819141834e9c8fa/analysis/1433054369/","ja3_hash":"4954bf2b5e6592b390a89d3b1dbe550a","ja3_str":"769,52244-52243-52245-49195-49199-158-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-11-10,23-24,0"}
{"desc":"Malware: https://www.virustotal.com/file/bbb3fbd2e8289d04733f8f005dc6410b050bee193a12ddf2f819141834e9c8fa/analysis/1433054369/o","ja3_hash":"45c2897e06c4979bd3b8e512523590d7","ja3_str":"769,52244-52243-52245-49195-49199-158-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10-255,0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Marble (KDE 5.21.0 QT 5.5.1 openSUSE Leap 42.1)","ja3_hash":"fc5574de96793b73355ca9e555748225","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-141-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-140-255,0-11-10-35-13-15-21,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"May Be Superfish","ja3_hash":"cfaa6f79904b33fdca83dbb5d4b537d4","ja3_str":"769,49172-49162-49186-49185-57-56-136-135-49167-49157-53-132-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-154-153-69-68-49166-49156-47-150-65-7-49169-49159-49164-49154-5-4-21-18-9-20-17-8-6-3-255,0-11-10-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"May Be Superfish","ja3_hash":"1b5a75e6d0f679aa312edb060ea8d932","ja3_str":"769,49172-49162-49186-49185-57-56-136-135-49167-49157-53-132-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-154-153-69-68-49166-49156-47-150-65-7-49169-49159-49164-49154-5-4-21-18-9-20-17-8-6-3-255,0-11-10-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Metaploit http scanner (tested: 4.11.5 Kali)","ja3_hash":"16f17c896273d1d098314a02e87dd4cb","ja3_str":"769,49172-49162-57-56-55-54-136-135-134-133-49167-49157-53-132-49171-49161-51-50-49-48-154-153-152-151-69-68-67-66-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Metasploit CCS Scanner","ja3_hash":"950ccdd64d360a7b24c70678ac116a44","ja3_str":"769,49172-49162-49186-49185-57-56-136-135-135-49167-53-132-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-21-18-9-20-17-8-6-3-255,,,"}
{"desc":"Metasploit HeartBleed Scanner","ja3_hash":"ee031b874122d97ab269e0d8740be31a","ja3_str":"769,49172-49162-49186-49185-57-56-136-135-135-49167-53-132-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-21-18-9-20-17-8-6-3-255,15,,"}
{"desc":"Metasploit SSL Scanner","ja3_hash":"6825b330bf9de50ccc8745553cb61b2f","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,11-10-35-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Microsoft Updater (Windows 7SP1) / TeamViewer 11.0.56083P, Malware Test FP: eitest-angler-ek-third-run","ja3_hash":"bff2c7b5c666331bfe9afacefd1bdb51","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0"}
{"desc":"Microsoft Windows Socket (Tested: Windows 10)","ja3_hash":"48cf5fb702315efbfc88ee3c8c94c6cb","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-57-51-157-156-61-60-53-47-10-106-64-56-50-19,0-5-10-11-13-35-23-65281,23-24,0"}
{"desc":"Mozilla Sync Services (Android)","ja3_hash":"d65ddade944f9acfe4052b2c9435eb85","ja3_str":"769,49195-49199-49191-49171-49200-49192-49172-51-47-255,11-10-13,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Mozilla Thunderbird (tested: 31.5.0)","ja3_hash":"c2116e5bb14394aafbefe12ade9bd8ab","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4,0-65281-10-11-35-5-13,23-24-25,0"}
{"desc":"Mozilla Thunderbird (tested: 38.3.0), ThunderBird (v38.0.1 OS X)","ja3_hash":"6fd163150b060dd7d07add280f42f4ed","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-65281-10-11-35-5-13,23-24-25,0"}
{"desc":"Mozilla/4.0 (compatible; MSIE 6.0 or MSIE 7.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022), Malware Test FP: angler-ek-malware-payload-sandbox-analysis-winxp, smoke-loader-post-infection-traffic","ja3_hash":"de350869b8c85de67a350c8d186f11e6","ja3_str":"769,4-5-10-9-100-98-3-6-19-18-99,,,"}
{"desc":"NVIDEA GeForce Experience, Windows Diagnostic and Telemetry (also Security Essentials and Microsoft Defender) (Tested Win7)","ja3_hash":"4025f224557638ee81afc4f272fd7577","ja3_str":"769,49172-49171-49162-49161-53-47-56-50-10-19-5-4,0-10-11-65281,25-23-24,0"}
{"desc":"NetFlix App on AppleTV (possibly others also)","ja3_hash":"146c6a6537ba4cc22d874bf8ff346144","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49170-49160-22-19-49165-49155-10-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-7-49169-49159-49164-49154-5-4-21-18-9-20-17-8-6-3-255,0-11-10,1-2-3-4-5-6-7-8-9-10-11-12-13-14-15-16-17-18-19-20-21-22-23-24-25,0-1-2"}
{"desc":"Nikto (tested 2.1.6 - Kali)","ja3_hash":"f4262963691a8f123d4434c7308ad7fe","ja3_str":"768,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,,,"}
{"desc":"Nikto (tested 2.1.6 - Kali)","ja3_hash":"5eeeafdbc41e5ca7b81c92dbefa03ab7","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,11-10-35-13-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Nikto (tested v2.1.6)","ja3_hash":"a563bb123396e545f5704a9a2d16bcb0","ja3_str":"769,49196-49188-49195-49187-49200-49192-49199-49191-159-107-158-103-165-161-105-104-157-61-164-160-63-62-156-60-49162-49161-49172-49171-57-51-154-55-54-53-49-48-47-49159-49169-5-255,0-11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Non-Specific Microsoft Socket, Malware Test FP: brazil-malspam-pushes-banload, dhl-malspam-traffic, post-infection-traffic-from-terror-ek-payload, contract-malspam-traffic, cryptowall-traffic, fake-font-update-for-chrome, phishing-malware-run-on-vm, fiesta-ek-post-infection-and-click-fraud-traffic, phishing-malware-sandbox-analysis, angler-ek-traffic, goon-ek-traffic, magnitude-ek-traffic, brazil-malspam-solicitacao-de-orcamento-traffic-example, cryptowall-infection-on-vm, nuclear-ek-traffic, zeus-panda-banker-malspam-traffic, traffic-analysis-pop-quiz, netflix-phishing-traffic, malspam-pushing-remcosrat, sweet-orange-ek-traffic, brazil-malspam-traffic, eitest-hoelflertext-popup-sends-netsupport-manager-rat, eitest-hoeflertext-popup-sends-netsupport-rat, th-run-seamless-rig-ek-sends-ramnit-with-post-infection-traffic, nuclear-ek-from-my-infected-vm, fake-nf-e-malspam-traffic, fake-netflix-login-page-traffic-1st-run, payment-slip-malspam-traffic, rig-ek-traffic, malspam-pushing-smoke-loader, brazil-malspam-traffic-example, smoke-loader-traffic, phishing-malware-run-in-a-vm, boleto-malspam-traffic, infinity-ek-traffic","ja3_hash":"1d095e68489d3c535297cd8dffb06cb9","ja3_str":"769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,65281-0-10-11,23-24,0"}
{"desc":"OS X WebSockets","ja3_hash":"43bb6a18756587426681e4964e5ea4bf","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-30032-11-10,23-24,0"}
{"desc":"OpenConnect version v7.01","ja3_hash":"a35c1457421bcfaf5edaccb910bfea1d","ja3_str":"769,49172-49162-57-56-55-54-136-135-134-133-49167-49157-53-132-49171-49161-51-50-49-48-154-153-152-151-69-68-67-66-49166-49156-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"OpenConnect version v7.06 / wget 1.17.1-1 (cygwin)","ja3_hash":"07aa6d7cac645c8845d6e96503f7d985","ja3_str":"769,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49160-49159-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-49169-156-157-49274-49275-47-60-53-61-65-186-132-192-10-5-4-158-159-49276-49277-51-103-57-107-69-190-136-196-22-162-163-49280-49281-50-64-56-106-68-189-135-195-19-102,5-0-65281-35-10-11-13-21,23-24-25-21-19,0"}
{"desc":"Opera 10.53  10.60  11.61  11.64  12.02, Presto 2.5.24  2.6.30  2.10.229  2.10.289","ja3_hash":"4e6f7f036fb2b05a50ee8a686b1176a6","ja3_str":"769,107-106-105-104-61-57-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5-13,,"}
{"desc":"Opera 11.11  11.52, Presto 2.8.131  2.9.168","ja3_hash":"ceee08c3603b53be80c8afdc98babdd6","ja3_str":"769,255-107-106-105-104-61-57-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5-13,,"}
{"desc":"Opera 12.14 - 12.16, Presto 2.12.388","ja3_hash":"561271bdcbfe68504ce78b38c957eef0","ja3_str":"769,107-106-105-104-61-57-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5-13-13172,,"}
{"desc":"Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.6.30 Version/10.60","ja3_hash":"8b475d6105c72827a234fbd47e25b0a3","ja3_str":"771,107-106-105-104-61-57-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5-13,,"}
{"desc":"Opera/9.80 Presto/2.10.229 Version/11.62","ja3_hash":"44f37c3ceccb551271bfe0ba6d39426c","ja3_str":"769,255-107-106-105-104-61-57-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5,,"}
{"desc":"Opera/9.80 Presto/2.10.289 & Presto/2.10.229","ja3_hash":"a16170ff03466c8ee703dd71feda9bfe","ja3_str":"769,57-107-106-105-104-61-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5,,"}
{"desc":"Opera/9.80 Presto/2.10.289 Version/12.00","ja3_hash":"b237ac4bcc16c142168df03a871677bd","ja3_str":"769,107-106-105-104-61-57-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5,,"}
{"desc":"Opera/9.80 Presto/2.12.388","ja3_hash":"07715901e2c6fe4c45e7c42587847d5d","ja3_str":"769,57-107-106-105-104-61-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5-13172,,"}
{"desc":"Opera/9.80 Presto/2.12.388","ja3_hash":"329ff4616732b84de926caa7fd6777b0","ja3_str":"769,107-106-105-104-61-57-56-55-54-53-103-64-63-62-60-51-50-49-48-47-5-4-19-13-22-16-10,0-65281-5-13172,,"}
{"desc":"Outlook 2007 (Win 8.1)","ja3_hash":"53eb89fe6147474039c1162e4d9d3dc0","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,65281-0-10-11-13-35,23-24,0"}
{"desc":"Pidgin (tested 2.10.11)","ja3_hash":"b74f9ecf158e0575101c16c5265a85b0","ja3_str":"769,49195-49199-49162-49161-49171-49191-49172-49159-49169-158-51-50-103-57-107-47-53,0-65281-10-11-13,23-24-25,0"}
{"desc":"Pocket/Slack/Duo (Android)","ja3_hash":"6ea7cfa450ce959818178b420f59fec4","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-51-50-57-156-47-53-255,0-11-10-35-13-16,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Polycom IP Phone Directory Lookup","ja3_hash":"9e41b6bf545347abccf0dc8fd76083a5","ja3_str":"769,53-10-47-5,,,"}
{"desc":"Postfix with StartTLS","ja3_hash":"26fa3da4032424ab61dc9be62c8e3ed0","ja3_str":"769,49177-167-109-58-137-49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49176-166-108-52-155-70-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49174-24-49169-49159-49164-49154-5-4-49175-27-49170-49160-22-19-16-13-49165-49155-10-255,11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"PubNub data stream #1 & Apteligent","ja3_hash":"ef48bf8b2ccaab35642fd0a9f1bbe831","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-49159-49169-156-157-47-53-5-255,0-23-35-13-16-11-10-21,23-24-25,0"}
{"desc":"PubNub data stream #2","ja3_hash":"8cc24a6ff485c62e3eb213d2ca61cf12","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-49159-49169-156-157-47-53-5-255,0-23-35-13-16-11-10,23-24-25,0"}
{"desc":"Pusherapp API","ja3_hash":"12ad03cb3faa2748e92c9a38faab949f","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-30032-11-10-21,23-24,0"}
{"desc":"Python Requests Library 2.4.3","ja3_hash":"c398c55518355639c5a866c15784f969","ja3_str":"769,49200-49196-49202-49198-49199-49195-49201-49197-163-159-162-158-49192-49188-49172-49162-49194-49190-49167-49157-107-106-57-56-49191-49187-49171-49161-49193-49189-49166-49156-103-64-51-50-49170-49160-49165-49155-136-135-22-19-69-68-157-156-61-53-60-47-132-10-65-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Rapid7 Nexpose","ja3_hash":"c22dea495cef869edbeb3458adaf497f","ja3_str":"769,49162-49172-53-49157-49167-57-56-49161-49171-47-49156-49166-51-50-49159-49169-5-49154-49164-49160-49170-10-49155-49165-19-4-255,10-11,23-1-3-19-21-6-7-9-10-24-11-12-25-13-14-15-16-17-2-18-4-5-20-8-22,0"}
{"desc":"Reported as -","ja3_hash":"4b06b445e3e12cdae777cec815ab90f5","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-20-17-8-6-3-255,0-11-10-35-13172,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"RingCentral App (unknown platform) #2","ja3_hash":"90f755509cba37094eb66be02335b932","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-49159-49169-156-157-47-53-5-255,0-23-13-11-10,23-24-25,0"}
{"desc":"RingCentral App (unknown platform)","ja3_hash":"7743db23afb26f18d632420e6c36e076","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-20-17-8-6-3-255,11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"SSLPing Scanner 1","ja3_hash":"24339ea346521d98a8c50fd3713090c9","ja3_str":"770,0-1-2-3-4-5-6-8-9-11-12-14-15-17-18-20-21-23-24-25-26-27-28-30-32-34-36-38-39-40-41-42-43-44-45-46-52-58-59-70-71-72-73-96-97-98-99-100-101-102-108-109-130-131-137-138-142-146-155-167-176-177-180-181-184-185-49153-49154-49158-49159-49163-49164-49168-49169-49173-49174-49175-49176-49177-49203-49209-49210-49211-65278-65505,0-10-11-13-5-18,23-24-25,0"}
{"desc":"SSLPing Scanner 2","ja3_hash":"ad5d6f490f3819dc60b2a2fbe5bd1cba","ja3_str":"771,0-1-2-3-4-5-6-8-9-11-12-14-15-17-18-20-21-23-24-25-26-27-28-30-32-34-36-38-39-40-41-42-43-44-45-46-52-58-59-70-71-72-73-96-97-98-99-100-101-102-108-109-130-131-137-138-142-146-155-167-176-177-180-181-184-185-49153-49154-49158-49159-49163-49164-49168-49169-49173-49174-49175-49176-49177-49203-49209-49210-49211-65278-65505,0-10-11-13-5-18,23-24-25,0"}
{"desc":"SSLPing Scanner 3","ja3_hash":"1e9557c377f8ff50b80b7f87b60b1054","ja3_str":"769,0-1-2-3-4-5-6-8-9-11-12-14-15-17-18-20-21-23-24-25-26-27-28-30-32-34-36-38-39-40-41-42-43-44-45-46-52-58-59-70-71-72-73-96-97-98-99-100-101-102-108-109-130-131-137-138-142-146-155-167-176-177-180-181-184-185-49153-49154-49158-49159-49163-49164-49168-49169-49173-49174-49175-49176-49177-49203-49209-49210-49211-65278-65505,0-10-11-13-5-18,23-24-25,0"}
{"desc":"SSLPing Scanner 4","ja3_hash":"c3c59ec21835721c92571e7742fadb88","ja3_str":"768,0-1-2-3-4-5-6-8-9-11-12-14-15-17-18-20-21-23-24-25-26-27-28-30-32-34-36-38-39-40-41-42-43-44-45-46-52-58-59-70-71-72-73-96-97-98-99-100-101-102-108-109-130-131-137-138-142-146-155-167-176-177-180-181-184-185-49153-49154-49158-49159-49163-49164-49168-49169-49173-49174-49175-49176-49177-49203-49209-49210-49211-65278-65505,0-10-11-13-5-18,23-24-25,0"}
{"desc":"Safari 525 - 533  534.57.2, Safari 525.21  525.29  531.22.7  533.21.1  534.57.2 / Adobe Reader DC 15.x Updater, Malware Test FP: eitest-angler-ek-traffic","ja3_hash":"cbcd1d81f242de31fd683d5acbc70dca","ja3_str":"769,49172-49171-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24,0"}
{"desc":"Safari 534.34, rekonq1.1  Arora0.11.0","ja3_hash":"30701f5050d504c31805594fb5c083b8","ja3_str":"769,49172-49162-49186-49185-57-56-136-135-49167-49157-53-132-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-21-18-9-20-17-8-6-3-255,0-11-10-35-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Safari 534.34","ja3_hash":"4c551900711d12c864cfe2f95e1c98c2","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Safari 534.34, Safari/537.21","ja3_hash":"41ba55231de6643721fbe2ae25fab85d","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-21-18-9-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Safari 534.59.8","ja3_hash":"fb1d89e16f4dd558ad99011070785cce","ja3_str":"769,49162-49161-49159-49160-49171-49172-49169-49170-49156-49157-49154-49155-49166-49167-49164-49165-47-5-4-53-10-9-3-8-6-50-51-56-57-22-21-20-19-18-17,0-10-11,23-24-25,0"}
{"desc":"Safari 536.30.1","ja3_hash":"e2a482fbb281f7662f12ff6cc871cfe7","ja3_str":"769,49162-49161-49159-49160-49171-49172-49169-49170-49156-49157-49154-49155-49166-49167-49164-49165-47-5-4-53-10-50-51-56-57-22-19,0-10-11,23-24-25,0"}
{"desc":"Safari 537.71","ja3_hash":"cc5925c4720edb550491a12a35c15d4d","ja3_str":"769,255-49162-49161-49159-49160-49172-49171-49169-49170-49156-49157-49154-49155-49166-49167-49164-49165-47-5-4-53-10-51-57-22,0-10-11,23-24-25,0"}
{"desc":"Safari 537.78.2","ja3_hash":"88770e3ad9e9d85b2e463be2b5c5a026","ja3_str":"769,255-49188-49187-49162-49161-49159-49160-49192-49191-49172-49171-49169-49170-49190-49189-49194-49193-49157-49156-49154-49155-49167-49166-49164-49165-61-60-47-5-4-53-10-103-107-51-57-22,0-10-11-13,23-24-25,0"}
{"desc":"Safari/534.57.2, hola_svc","ja3_hash":"77310efe11f1943306ee317cf02150b7","ja3_str":", 769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,65281-0-10-11-35,23-24,0"}
{"desc":"ShadowServer Scanner 1","ja3_hash":"fa8b8ed07b1dd0e4a262bd44d31251ec","ja3_str":"769,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-15,23-24-25,0"}
{"desc":"ShadowServer Scanner 2","ja3_hash":"c05809230e9f7a6bf627a48b72dc4e1c","ja3_str":"769,49171-49161-49172-49162-47-53-49170-10,5-10-11-15,23-24-25,0"}
{"desc":"ShadowServer Scanner 3","ja3_hash":"0ad94fcb7d3a2c56679fbd004f6b12cd","ja3_str":"769,3-6-8-11-14-17-20-23-25-38-39-40-41-42-43,5-10-11-13-65281-15,23-24-25,0"}
{"desc":"Shodan","ja3_hash":"0b63812a99e66c82a20d30c3b9ba6e06","ja3_str":"769,49172-49162-57-56-55-54-136-135-134-133-49167-49157-53-132-49171-49161-51-50-49-48-154-153-152-151-69-68-67-66-49166-49156-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Shodan","ja3_hash":"f59a024cf47fdb835053ebf144189a47","ja3_str":"769,20-17-25-8-6-23-3-255,35-15,,"}
{"desc":"Shodan","ja3_hash":"302579fd4ba13eca27932664f66725ad","ja3_str":"769,20-17-25-8-6-23-3-255,35-13-15,,"}
{"desc":"Shodan","ja3_hash":"109dbd9238634b21363c3d62793c029c","ja3_str":"769,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"}
{"desc":"Shodan","ja3_hash":"0add6ceb611a7613f97329af3b6828d9","ja3_str":"769,163-159-107-106-57-56-136-135-162-158-103-64-51-50-154-153-69-68-22-19-21-18-20-17-255,35-13-15,,"}
{"desc":"Shodan, mutt (tested: 1.6.2 OS X)","ja3_hash":"3fcc12d9ee1f75a0212d1d16f7b9f8ad","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-255,11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Shodan","ja3_hash":"badc09d74edf43c0204c4827a038c2fa","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-13-5-15-13172,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Shodan","ja3_hash":"f8f522671d2d2eba5803e6c002760c05","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-13-5-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Shodan, mutt (tested: 1.5.23 - OS X)","ja3_hash":"9d5869f950eeca2e39196c61fdf510c8","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Shodan","ja3_hash":"11e49581344c117df2c9ceb46e5594c4","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49177-167-109-58-137-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49176-166-108-52-155-70-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49174-24-49164-49154-5-4-49170-49160-22-19-16-13-49175-27-49165-49155-10-49168-49158-49173-49163-49153-59-2-1-255,0-11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Signal (tested: 3.16.0 - Android)","ja3_hash":"7dde4e4f0dceb29f711fb34b4bdbf420","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-49159-49169-51-57-156-47-53-10-5-4-255,0-23-35-13-16-11-10,23-24-25,0"}
{"desc":"Signal Chrome App","ja3_hash":"07931ada5b9dd93ec706e772ee60782d","ja3_str":"769,49195-49199-49196-49200-52393-52392-52244-52243-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-30032-11-10-21,29-23-24,0"}
{"desc":"SkipFish (tested: v2.10b kali)","ja3_hash":"cfb6d1c72d09d4eaa4c7d2c0b1ecbce7","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Skype (additional Win 10)","ja3_hash":"7a75198d3e18354a6763860d331ff46a","ja3_str":"769,53-47-10-255,35-15,,"}
{"desc":"Skype (multiple platforms)","ja3_hash":"06207a1730b5deeb207b0556e102ded2","ja3_str":"769,49162-49157-49161-49156-49159-49154-49160-49155-49172-49167-49171-49166-49169-49164-49170-49165-57-51-53-47-5-4-10,,,"}
{"desc":"Skype (tested 7.18(341) on OSX)","ja3_hash":"5ef08bc989a9fcc18d5011f07d953c14","ja3_str":"769,49200-49196-49192-49188-49172-49162-49202-49198-49194-49190-49167-49157-157-61-53-49199-49195-49191-49187-49171-49161-49201-49197-49193-49189-49166-49156-156-60-47-49170-49160-49165-49155-10-255,0-11-10-13-15,23-25-28-27-24-26-22,0-1-2"}
{"desc":"Slack Desktop App","ja3_hash":"c8ada45922a3e7857e4bfd4fc13e8f64","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-30032-11-10-21,23-24,0"}
{"desc":"Slack","ja3_hash":"3d72e4827837391cd5b6f5c6b2d5b1e1","ja3_str":"769,49195-49199-52393-52392-52244-52243-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-18-30032-11-10,23-24,0"}
{"desc":"Slackbot Link Expander","ja3_hash":"22cca8ed59288f4984724f0ee03484ea","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-21-18-9-255,0-11-10-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"SpiderOak (tested: 6.0.1)","ja3_hash":"f51156bcd5033603e750c8bd4db254e3","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,11-10-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Synology DDNS Beacon","ja3_hash":"cab4a6a0c7ac91c2bd9e93cb0507ad4e","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49170-49160-22-19-49165-49155-10-255,0-11-10-13-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Tenable Passive Vulnerability Scanner Plugin Updater","ja3_hash":"24993abb75ddda7eaf0709395e47ab4e","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-255,11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Test FP: Dridex Malware, Malware Test FP: dhl-malspam-traffic, kovter-malspam-traffic, ups-malspam-traffic, fedex-malspam-sends-kovter, usps-malspam-traffic-1-of-2, kovter-nemucodaes-malspam-traffic, cerber-kovter-malspam-traffic, dridex-malspam-traffic, kovter-nemucod-malspam-traffic, usps-malspam-traffic-2nd-run, ups-themed-kovter-malspam-traffic, fedex-malspam-traffic, unidentified-campaign-rig-ek-sends-deloader, booking-malspam-dridex-traffic, dridex-confirmation-letter-dridex-traffic, upatre-malspam-infection-traffic, upatre-dyre-infection, kovter-locky-malspam-traffic","ja3_hash":"74927e242d6c3febf8cb9cab10a7f889","ja3_str":"771,60-47-61-53-5-10-49191-49171-49172-49195-49187-49196-49188-49161-49162-64-50-106-56-19-4,65281-10-11-13,23-24,0"}
{"desc":"Test FP: Nuclear Exploit Kit","ja3_hash":"f3603b5b21cdb30f2a089b78fc2dde0d","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Test FP: Nuclear Exploit Kit, Malware Test FP: brazil-malspam-pushes-banload, eitest-campaign-hoeflertext-popup-traffic, parking-service-malspam-traffic-2nd-run, globeimposter-malspam-traffic, fake-font-update-for-chrome, eitest-tech-support-scam-after-canadoodles.com, rig-ek-sends-qbot-traffic, neutrino-ek-traffic, upatre-dyre-malspam-traffic, cerber-kovter-malspam-traffic, pseudodarkleech-rig-ek-sends-cerber-ransomware, necurs-botnet-malspam-pushes-globeimposter, income-report-malspam-traffic, angler-ek-sends-cryptowall-3.0-traffic, dridex-confirmation-letter-dridex-traffic, contract-malspam-traffic, angler-ek-traffic, malspam-pushing-formbook-info-stealer, kovter-locky-malspam-traffic, portuguese-malspam-traffic, fake-av-page-after-viewing-mitchandgina.com, zeuspandabanker-malspam-traffic, magnitude-ek-traffic, necurs-botnet-malspam-traffic, eitest-campaign-fake-av-page-traffic, java-update-traffic-edited, necurs-botnet-malspam-pushes-globeimposter-traffic, necurs-botnet-malspam-traffic-2nd-run, mole-ransomware-malspam-2nd-attempt-on-a-physical-host, usps-malspam-traffic-2-of-2-panda-banker-only, loki-bot-malspam-traffic, boleto-malspam-infection-from-pdf-attachment, nuclear-ek-from-windigo-group-traffic, brazil-boleto-malspam-traffic, pseudo-darkleech-angler-ek-traffic, neutrino-ek-sends-teslacrypt-2.0-traffic, japanese-malspam-traffic, malspam-email-infected-vm-traffic, portuguese-invoice-malspam-traffic, brazil-malspam-traffic, compromised-site-generates-angler-and-rig-ek-traffic, flashpack-ek-traffic, chanitor-vawtrak-traffic, whatsapp-malspam-traffic, necurs-botnet-malspam-traffic-1st-run, necurs-botnet-malspam-pushes-globeimposter-ransomware, angler-ek-and-ransomware-traffic, eitest-hoeflertext-popup-sends-netsupport-manager-rat, fake-hoeflertext-font-pushes-netsupport-manager-rat, ups-themed-kovter-malspam-traffic, chanitor-vawtrak-malspam-traffic, nuclear-ek-from-my-infected-vm, fake-flash-player-installs-coinminer-malware, malspam-pushing-smoke-loader, brazil-detran-malspam-traffic, brazil-malspam-traffic-example, eitest-campaign-hoeflertext-popup-sends-netsupport-manager-rat, rig-ek-sends-zbot, tt-copy-malspam-traffic, operation-windigo-nuclear-ek-traffic, fiesta-ek-infection-traffic, eitest-angler-ek-sends-panda-banker, emotet-malspam-traffic, nuclear-ek-traffic, eitest-angler-ek-traffic, usps-malspam-sends-exe-file-with-post-infection-traffic, fedex-malspam-traffic, malspam-traffic, boleto-malspam-link-from-email-full-infection, angler-ek-delivers-ransomware, emotet-and-zeus-panda-banker-traffic, hancitor-malspam-traffic, boleto-malspam-traffic, angler-and-magnitude-ek-traffic, brazilian-malspam-traffic","ja3_hash":"4d7a28d6f2263ed61de88ca66eb011e3","ja3_str":"771,60-47-61-53-5-10-49191-49171-49172-49195-49187-49196-49188-49161-49162-64-50-106-56-19-4,65281-0-10-11-13,23-24,0"}
{"desc":"Test FP: Tweetdeck maybe Webkit","ja3_hash":"38aea89b122f799954cf3f4e8878498b","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10-49159-49169-5-4,0-10-11-5-18,23-24-25,0"}
{"desc":"TextSecure Name Lookup (Tested: Android)","ja3_hash":"97d3b9036d5a4d7f1fe33fe730f38231","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4-255,0-11-10-35-13-16,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"ThunderBird (v17.0 OS X)","ja3_hash":"207409c2b30e670ca50e1eac016a4831","ja3_str":"769,255-49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-5-4-47-49160-49170-22-19-49165-49155-65279-10,0-10-11-35,23-24-25,0"}
{"desc":"ThunderBird (v38.0.1 OS X), Thunderbird 38.7.0 (openSUSE Leap 42.1)","ja3_hash":"4623da8b4586a8a4b86e31d689aa0c15","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-65281-10-11-35-5-13-21,23-24-25,0"}
{"desc":"Tor Browser (tested: 5.0.1f - May clash with FF38)","ja3_hash":"0ed768d6e3bc66af60d31315afd423f2","ja3_str":"769,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-65281-10-11-13172-16-5-13,23-24-25,0"}
{"desc":"Tor Browser (v4.5.3 OS X - based on FF 31.8.0)","ja3_hash":"8c9a7fe81ba61dab1454e08f42f0a004","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4,0-65281-10-11-13172-5-13,23-24-25,0"}
{"desc":"Tor Relay Traffic (tested 0.2.7.6)","ja3_hash":"5b3eee2766b876e623ba05508d269830","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4-255,0-11-10-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Tor Relay Traffic (tested 0.2.7.6), Tor Uplink (via Tails distro)","ja3_hash":"79f0842a32b359d1b683c569bd07f23b","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Tor uplink (tested: 0.2.6.10)","ja3_hash":"659007d8bae74d1053f6ca4a329d25a7","ja3_str":"769,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4-255,0-11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Tracking something (noted with Dropbox Installer & Skype - Win 10)","ja3_hash":"bc329d2a71e749067424502f1f72e13a","ja3_str":"769,49172-49171-53-47-49162-49161-56-50-10-19-5-4,0-5-10-11-35-23-65281,23-24,0"}
{"desc":"Trident/7.0","ja3_hash":"aea96546ac042f29fed1e2203a9b4c3f","ja3_str":"771,60-47-61-53-10-49191-49171-49172-49195-49187-49196-49188-49161-49162-64-50-106-56-19,65281-0-5-10-11-13-35-16-13172,23-24,0"}
{"desc":"Trident/7.0, Malware Test FP: eitest-rig-ek-second-example, phishing-malware-run-on-a-vm, contract-malspam-traffic, globeimposter-malspam-traffic","ja3_hash":"2a458dd9c65afbcf591cd8c2a194b804","ja3_str":"771,60-47-61-53-5-10-49191-49171-49172-49195-49187-49196-49188-49161-49162-64-50-106-56-19-4,65281-0-5-10-11-13,23-24,0"}
{"desc":"UMich Scanner (can use: zgrab)","ja3_hash":"9a1c3fed39b016b8d81cc77dae70f60f","ja3_str":"769,3-6-8,5-10-11-13-65281-15,23-24-25,0"}
{"desc":"UMich Scanner (can use: zgrab)","ja3_hash":"0e580f864235348848418123f96bbaa0","ja3_str":"769,20-17-23-25,5-10-11-13-65281-15,23-24-25,0"}
{"desc":"UMich Scanner (can use: zgrab)","ja3_hash":"dc76bc3a4e3bc38939dfd90d8b7214b7","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-49159-49169-156-53-47-5-4-10,5-10-11-13-65281-15,23-24-25,0"}
{"desc":"UNVERIFIED: May be BlueCoat proxy","ja3_hash":"f6bae8bacf93b5e97e80b594ffeba859","ja3_str":"769,49199-49171-49172-47-53-10-255,0-11-10-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Ubuntu Software Center","ja3_hash":"b9b4d1f7283b5ddc59d0b8d15e386106","ja3_str":"769,49172-49162-49186-49185-57-56-136-135-49167-49157-53-132-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-255,11-10-35-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Ubuntu Software Center","ja3_hash":"633e9558d4b25b46e8b1c49e10faaff4","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-255,11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Ubuntu Web Socket #1","ja3_hash":"ac206b75530d569a0a64cec378eb4b66","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-51-57-156-47-53-10,0-65281-10-11-35-30032-5-18-13,23-24-25,0"}
{"desc":"Ubuntu Web Socket #2","ja3_hash":"94feb9008aeb393e76bac31b30af6ad0","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-51-57-156-47-53-10,0-65281-10-11-35-5-18-13-21,23-24-25,0"}
{"desc":"Ubuntu Web Socket #3","ja3_hash":"f1b7bbeb8b79cecd728c72bba350d173","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-51-57-156-47-53-10,0-65281-10-11-35-5-18-13,23-24-25,0"}
{"desc":"Ubuntu Web Socket #4","ja3_hash":"3f00755c412442e642f5572ed4f2eaf2","ja3_str":"769,49195-49199-158-49162-49161-49171-49172-51-57-156-47-53-10,0-65281-10-11-35-30032-5-18-13-21,23-24-25,0"}
{"desc":"Unidentified attack tool","ja3_hash":"90f6c4b0577fb24a31bea0acc1fcc27d","ja3_str":"768,47-10-19-57-4-255,13,,"}
{"desc":"Unknown SMTP Server (used by Facebook)","ja3_hash":"26cdef14ec70c2d6ebd943fe8069c4da","ja3_str":"769,49171-49161-49172-49162-51-57-50-49169-49159-47-53-10-5-4-255,11-10-35,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Unknown SMTP server (207.46.100.103)","ja3_hash":"23a9b0eb3584e358816a123c208a2c8b","ja3_str":"771,49192-49191-49172-49171-61-60-53-47-10,10-11-13-65281,24-23,0"}
{"desc":"Unknown TLS Scanner","ja3_hash":"18e9afaf91db6f8a2470e7435c2a1d6b","ja3_str":"770,49162-49172-57-107-53-61-49159-49161-49187-49169-49171-49191-51-103-50-5-4-47-60-10,61184-65281-10-11-35-13172-30031-5,23-24-25,0"}
{"desc":"Unknown: 192.168.1.23:53352 -> 95.85.50.201:443","ja3_hash":"4392ae644e5a440b3b5f84b490893589","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-20-17-14-11-8-6-3-255,0-11-10-35-13-15,14-13-25-28-11-12-27-24-9-10-26-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Unknown: BrowserStack timeframe SMTP STARTLS","ja3_hash":"7bc3475b771c44c764614397da069d28","ja3_str":"769,49177-167-109-58-137-49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49176-166-108-52-155-70-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49174-24-49169-49159-49164-49154-5-4-49175-27-49170-49160-22-19-16-13-49165-49155-10-26-21-18-15-12-9-25-20-17-8-6-23-3-255,11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Unknown: Something on Android that talks to Google Analytics.. help","ja3_hash":"335ec05b3ddb3800a8df47641c2d8e33","ja3_str":"769,49195-49196-49199-49200-158-159-49161-49162-49171-49172-51-57-49159-49169-156-157-47-53-5-255,0-11-10-35-13-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"VLC","ja3_hash":"81fb3e51bf3f18c5755146c28d07431b","ja3_str":"768,49195-49196-49161-49187-49162-49188-49160-49199-49200-49171-49191-49172-49170-156-47-60-53-61-65-132-10-5-4-158-51-103-57-107-69-136-22-162-50-64-56-106-68-135-19-102,5-0-65281-35-10-11-13,19-21-23-24-25,0"}
{"desc":"VMWare Fusion / Workstation / Player Update Check 8.x-12.x","ja3_hash":"cff90930827e8b0f4e5a6fcc17319954","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49170-49160-22-19-49165-49155-10-255,0-11-10-13-15-13172-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"VMware vSphere Client (Tested v4.1.0)","ja3_hash":"48e69b57de145720885af2894f2ab9e7","ja3_str":"769,49172-49171-49162-49161-53-47-56-50-10-19-5-4,10-11-65281,25-23-24,0"}
{"desc":"Valve Steam Client #1","ja3_hash":"2d96ffb535c7c7a30cad924b9b9f2b52","ja3_str":"769,49199-49195-49200-49196-49191-49187-49171-49161-49192-49188-49172-49162-49170-49160-156-60-47-157-61-53-65-132-10-5-255,11-10-35-13-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Valve Steam Client #2","ja3_hash":"ab1fa6468096ab057291aa381d5de2b7","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-11-10,23-24,0"}
{"desc":"VirtualBox Update Poll (tested 5.0.8 r103449)","ja3_hash":"41e3681b7c8c915e33b1f80d275c19d5","ja3_str":"769,159-107-57-157-61-53-158-103-51-154-156-60-47-150-255,0-13-15-13172,,"}
{"desc":"WPScan (tested: 2.9 Kali)","ja3_hash":"4c8ff2ddb1890482e5989b80e48b54d4","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49170-49160-22-19-16-13-49165-49155-10-255,0-11-10-13-15-13172-16-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Web","ja3_hash":"0172e9e41a8940e6a809967e4835214a","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10-49159-49169-5-4,0-10-11-13-13172-16-5-18-21,23-24-25,0"}
{"desc":"WebKit per Safari 9.0.1 (11601.2.7.2)","ja3_hash":"58d97971a14d0520c5c56caa75470948","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10-49159-49169-5-4,0-10-11-13-5-18,23-24-25,0"}
{"desc":"WebKit per Safari 9.0.1 (11601.2.7.2)","ja3_hash":"9ef7a86952e78eeb83590ff4d82a5538","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10-49159-49169-5-4,0-10-11-13-13172-16-5-18,23-24-25,0"}
{"desc":"WeeChat","ja3_hash":"8e1172bd5dcc4698928c7eb454a2c3de","ja3_str":"769,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49160-49159-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-49169-156-157-49274-49275-47-60-53-61-65-186-132-192-10-5-4-158-159-49276-49277-51-103-57-107-69-190-136-196-22-162-163-49280-49281-50-64-56-106-68-189-135-195-19-102,5-65281-35-10-11-13,23-24-25-21-19,0"}
{"desc":"Wii-U","ja3_hash":"444434ebe3f52b8453c3803bff077ebd","ja3_str":"769,49172-49162-57-49167-49157-53-49170-49160-22-49165-49155-10-49171-49161-51-49166-49156-47-49169-49159-49164-49154-5-4-21-9-20-8-3-255,0-11-10,1-2-3-4-5-6-7-8-9-10-11-12-13-14-15-16-17-18-19-20-21-22-23-24-25,0-1-2"}
{"desc":"Win default thing a la webkit","ja3_hash":"c8d1364bba308db5a4a20c65c58ffde1","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,65281-0-5-10-11-13-35,23-24,0"}
{"desc":"Windows 10 Native Connection","ja3_hash":"aee020803d10a4d39072817184c8eedc","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10-106-64-56-50-19,0-5-10-11-13-35-23-65281,23-24,0"}
{"desc":"Windows 10 WebSockets (inc Edge) #1","ja3_hash":"205200cdaac61b110838556b834070d1","ja3_str":"771,49200-49199-49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-5-10-11-13-35-23-65281,23-24,0"}
{"desc":"Windows 10 WebSockets (inc Edge) #2","ja3_hash":"5a0fa8873e5ffe7d9385647adc8912d7","ja3_str":"771,49200-49199-49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-5-10-11-13-35-16-23-65281,23-24,0"}
{"desc":"Windows 8.x Apps Store thing (unconfirmed)","ja3_hash":"a7b2f0639f58f97aec151e015be1f684","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-35-65281,23-24,0"}
{"desc":"Windows 8.x Builtin Mail Client","ja3_hash":"0d15924fe8f8950a3ec3a916e97c8498","ja3_str":"769,49172-49171-53-47-49162-49161-56-50-10-19-5-4,0-10-11-35-65281,23-24,0"}
{"desc":"Windows 8.x TLS Socket","ja3_hash":"a8ee937cf82bb0972fecc23d63c9cd82","ja3_str":"769,49195-49199-158-52244-52243-52245-49162-49172-57-49161-49171-51-156-53-47-10,65281-0-23-35-13-5-13172-18-30032-11-10,23-24,0"}
{"desc":"Yahoo! Slurp Indexer","ja3_hash":"de364c46b0dfc283b5e38c79ceae3f8f","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-49170-49160-154-153-69-68-22-19-49201-49197-49193-49189-49166-49156-49165-49155-156-60-47-150-65-10-7-49169-49159-49164-49154-5-4-255,0-11-10-13-15,25-24-23,0-1-2"}
{"desc":"Yahoo! Slurp Indexer","ja3_hash":"1202a58b454f54a47d2c216567ebd4fb","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-49170-49160-154-153-69-68-22-19-49201-49197-49193-49189-49166-49156-49165-49155-156-60-47-150-65-10-7-49169-49159-49164-49154-5-4-255,0-11-10-35-13-15,25-24-23,0-1-2"}
{"desc":"Yandex Bot, wget 1.18","ja3_hash":"d83881675de3f6aacbcc0b2bae6f8923","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-255,0-11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Zite (Android) 1 - May collide with Chrome","ja3_hash":"f8f5b71e02603b283e55b50d17ede861","ja3_str":"769,49161-49162-49171-49172-51-57-50-56-49159-49169-47-53-5-255,11-10,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Zite (Android) 2 - May collide with Chome","ja3_hash":"5ae88f37a16f1b054f2edff1c8730471","ja3_str":"769,52244-52243-52245-49195-49199-158-49162-49172-57-49161-49171-51-156-53-47-10-255,0-23-35-13-5-13172-18-16-11-10,23-24,0"}
{"desc":"atom.io #1","ja3_hash":"4e5e5d9fbc43697be755696191fe649a","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,0-11-10-35-13-13172,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"atom.io #2","ja3_hash":"c94858c6eb06de179493b3fac847143e","ja3_str":"769,49199-49195-49200-49196-158-49191-103-49192-107-49188-49172-49162-165-163-161-159-106-105-104-57-56-55-54-49202-49198-49194-49190-49167-49157-157-61-53-49187-49171-49161-164-162-160-64-63-62-51-50-49-48-49201-49197-49193-49189-49166-49156-156-60-47-49170-49160-22-19-16-13-49165-49155-10-255,0-11-10-35-13-13172,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"curl (tested: 7.22.0 on Linux)","ja3_hash":"764b8952983230b0ac23dbd3741d2bb0","ja3_str":"769,49172-49162-49186-49185-57-56-136-135-49167-49157-53-132-49170-49160-49180-49179-22-19-49165-49155-10-49171-49161-49183-49182-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-21-18-9-20-17-8-6-3-255,0-11-10-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"curl (tested: 7.43.0 OS X)","ja3_hash":"9f198208a855994e1b8ec82c892b7d37","ja3_str":"769,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-49198-49197-49190-49189-49157-49156-49155-49202-49201-49194-49193-49167-49166-49165-159-158-107-103-57-51-22-157-156-61-60-53-47-10-49159-49169-49154-49164-5-4-175-174-141-140-138-139,0-10-11-13-5-18,23-24-25,0"}
{"desc":"curl 7.35.0 (tested Ubuntu 14.x  openssl 1.0.1f)","ja3_hash":"c458ae71119005c8bc26d38a215af68f","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-255,0-11-10-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"curl 7.37.0 / links 2.8 / git 2.6.6 (openSUSE Leap 42.1)","ja3_hash":"e14d427fab707af91e4bbd0bf03076f8","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-255,0-11-10-13-15-21,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"curl","ja3_hash":"f672d8f0e827ca1e704a9489b14dd316","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-49190-49189-49157-49156-49155-49194-49193-49167-49166-49165-107-103-57-51-22-61-60-53-47-10-49159-49169-49154-49164-5-4-175-174-141-140-138-139,0-10-11-13,23-24-25,0"}
{"desc":"curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.16.2.3 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2","ja3_hash":"e3891da2a758d67ba921e5eec0b9707d","ja3_str":"769,255-57-107-56-53-61-51-103-50-5-4-47-60-22-19-10,0,,"}
{"desc":"fetchmail 6.3.26 (openSUSE Leap 42.1)","ja3_hash":"a698fe6c52d210e3376bb6667729d4d2","ja3_str":"769,49172-49162-57-56-136-135-49167-49157-53-132-49171-49161-51-50-154-153-69-68-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-255,11-10-35-15,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"git commandline (tested: 1.9. Linux)","ja3_hash":"3e765b7a69050906e5e48d020921b98e","ja3_str":"768,51-103-69-57-107-136-22-50-64-68-56-106-135-19-47-60-65-53-61-132-10,0-65281-13,,"}
{"desc":"golang (tested: 1.4.1)","ja3_hash":"f11b0fca6c063aa69d8d39e0d68b6178","ja3_str":"769,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,0-5-10-11-13-65281,23-24-25,0"}
{"desc":"https://www.virustotal.com/file/07853289247c4c932ddfbf4c215b4e86240fab6661a6d6a85ac8ee37fe92b9be/analysis/1433596684/","ja3_hash":"318b9778e96efb5090c43b514c7ab184","ja3_str":"769,52244-52243-49195-49199-158-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-13172-16-5-18-13,23-24-25,0"}
{"desc":"iOS AppleWebKit/536.26","ja3_hash":"06d930b072bf052b10d0a9eea1554f60","ja3_str":"771,255-49188-49187-49162-49161-49159-49160-49192-49191-49172-49171-49169-49170-49190-49189-49194-49193-49156-49157-49154-49155-49166-49167-49164-49165-61-60-47-5-4-53-10-103-107-51-57-22-49158-49168-49153-49163-59-2-1,0-10-11-13,23-24-25,0"}
{"desc":"iOS Mail App (tested: iOS 9.3.3)","ja3_hash":"99204897b101b15f87e9b07f67453f4e","ja3_str":"769,255-49188-49187-49162-49161-49160-49192-49191-49172-49171-49170-107-103-57-51-22-61-60-53-47-10-49159-49169-5-4,0-10-11-5-18,23-24-25,0"}
{"desc":"iTunes/iBooks #1","ja3_hash":"c6ecc5ba2a6ab724a7430fa4890d957d","ja3_str":"769,49195-49199-158-52244-52243-49162-49172-57-49161-49171-51-156-53-47-10-49192,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"iTunes/iBooks #2","ja3_hash":"c07295da5465d5705a38f044e53ef7c4","ja3_str":"769,49162-49172-57-49161-49171-51-53-47-10-22016,65281-0-23-35-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"mitmproxy","ja3_hash":"4d01f8b1afc22e138127611b62f1e6ec","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"mitmproxy","ja3_hash":"8ef6a005eae3d51b652ffe41984f8869","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"mutt (tested: 1.5.23 OSX)","ja3_hash":"dc7c914e1817944435dd6b82a8495fbb","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-13-15,14-13-25-28-11-12-27-24-9-10-26-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"mutt","ja3_hash":"6761a36cfa692fcd3bc7d570b23cc168","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-20-17-14-11-8-6-3-255,11-10-35-13-15,14-13-25-28-11-12-27-24-9-10-26-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"openssl s_client / msmtp 1.6.2 (openSUSE Leap 42.1)","ja3_hash":"6fffa2be612102d25dbed5f433b8238c","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-255,11-10-35-13-15,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"osc (python openSUSE Leap 42.1) 1","ja3_hash":"3b6da2971936ac24457616e8ad46f362","ja3_str":"769,49191-156-49169-49159-49164-49154-5-49200-49196-49192-49188-49172-49162-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49187-49171-49161-49201-49197-49193-49189-49166-49156-60-47-65-49170-49160-49165-49155-10-255,0-11-10-35-13-15,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"osc (python openSUSE Leap 42.1) 2","ja3_hash":"95baa3d2068d8c8da71990a353cf8453","ja3_str":"769,49169-49159-49164-49154-5-49172-49162-49167-49157-53-132-49171-49161-49166-49156-47-65-49170-49160-49165-49155-10-255,0-11-10-35-15-21,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"php script (tested 5.5.27)","ja3_hash":"16765fe48127809dc0ca406769c9391e","ja3_str":"769,57-56-53-22-19-10-51-50-47-154-153-150-5-4-21-18-9-20-17-8-6-3-255,0-35,,"}
{"desc":"py2app application (including box.net & google drive clients)","ja3_hash":"ba502b2f5d64ac3d1d54646c0d6dd4dc","ja3_str":"769,57-56-51-50-22-19-53-47-10-255,0-35,,"}
{"desc":"python-requests/2.7.0 CPython/2.6.6 Linux/2.6.32-504.23.4.el6.x86_64","ja3_hash":"1a9fb04aa1b4439666672be8661f9386","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-49170-49160-154-153-69-68-22-19-49201-49197-49193-49189-49166-49156-49165-49155-156-60-47-150-65-10-7-49169-49159-49164-49154-5-4-255,11-10-35-13-15,25-24-23,0-1-2"}
{"desc":"ruby script (tested: 2.0.0p481)","ja3_hash":"688b34ca00a291ece0bc07b264b1344c","ja3_str":"769,57-56-53-51-50-47-22-19-10-154-153-150-5-4-21-18-9-255,0-35,,"}
{"desc":"sqlmap (tested: v1.0-dev kali)","ja3_hash":"615788655a0e65b71e47c3ebe2302564","ja3_str":"769,49200-49196-49202-49198-49199-49195-49201-49197-165-163-161-159-164-162-160-158-49192-49188-49172-49162-49194-49190-49167-49157-107-106-105-104-57-56-55-54-49191-49187-49171-49161-49193-49189-49166-49156-103-64-63-62-51-50-49-48-49170-49160-49165-49155-136-135-134-133-69-68-67-66-22-19-16-13-157-156-61-53-60-47-132-65-10-255,0-11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"sqlmap (tested: v1.0.7.0 OS X)","ja3_hash":"1ab5d0f756e0692a975fda9a6474969f","ja3_str":"769,57-56-51-50-22-19-53-47-10-255,35,,"}
{"desc":"tor uplink (tested 0.2.2.35)","ja3_hash":"3b8f3ace50a7c7cd5205af210f17bb70","ja3_str":"769,49162-49172-57-56-49167-49157-53-49159-49161-49169-49171-51-50-49164-49166-49154-49156-4-5-47-49160-49170-22-19-49165-49155-65279-10-255,0-11-10-35-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"w3af (tested: v1.6.54 Kali 1)","ja3_hash":"10a686de1c41107df06c21df245e24cd","ja3_str":"769,49172-49162-57-56-55-54-136-135-134-133-49167-49157-53-132-49171-49161-51-50-49-48-154-153-152-151-69-68-67-66-49166-49156-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,0-11-10-35-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"w3af (tested: v1.6.54 Kali 2)","ja3_hash":"f13e6d84b915e17f76fdf4ea8c959b4d","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,0-11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"w3af (tested: v1.6.54 Kali 3)","ja3_hash":"345b5717dae9006a8bcd4cb1a5f09891","ja3_str":"769,49200-49196-49202-49198-49199-49195-49201-49197-165-163-161-159-164-162-160-158-49192-49188-49172-49162-49194-49190-49167-49157-107-106-105-104-57-56-55-54-49191-49187-49171-49161-49193-49189-49166-49156-103-64-63-62-51-50-49-48-49170-49160-49165-49155-136-135-134-133-69-68-67-66-22-19-16-13-157-156-61-53-60-47-132-65-10-255,11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"w3c HTML Validator","ja3_hash":"74ebac04b642a0cab032dd46e8099fdc","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49177-167-109-58-137-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49175-27-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49176-166-108-52-155-70-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49174-24-49164-49154-5-4-20-17-25-8-6-23-3-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"w3c HTML Validator, java,eclipse","ja3_hash":"4056657a50a8a4e5cfac40ba48becfa2","ja3_str":", 771,49188-49192-61-49190-49194-107-106-49162-49172-53-49157-49167-57-56-49187-49191-60-49189-49193-103-64-49161-49171-47-49156-49166-51-50-49196-49195-49200-157-49198-49202-159-163-49199-156-49197-49201-158-162-49160-49170-10-49155-49165-22-19-255,10-11-13-0,23-1-3-19-21-6-7-9-10-24-11-12-25-13-14-15-16-17-2-18-4-5-20-8-22,0"}
{"desc":"w3m (tested: 0.5.3 OS X)","ja3_hash":"975ef0826e8485f2335db71873cb34c6","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,0-11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"w3m 0.5.3 (OS X version)","ja3_hash":"6b4b535249a1dcd95e3b4b6e9e572e5e","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-255,0-11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"w3m 0.5.3 / lynx 3.2 / svn 1.8.10 (openSUSE Leap 42.1)","ja3_hash":"575771dbc723df24b764ac0303c19d10","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-255,0-11-10-35-13-15-21,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"wget (tested GNU Wget 1.16.1 & 1.17 on OS X)","ja3_hash":"5f1d4c631ddedf942033c9ae919158b8","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,0-11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"wget 1.14 (openSUSE Leap 42.1)","ja3_hash":"70663c6da28b3b9ac281d7b31d6b97c3","ja3_str":"769,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-255,0-11-10-35-13-15,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"youtube-dl 2016.06.03 (openSUSE Leap 42.1)","ja3_hash":"11404429d240670cc018bed04e918b6f","ja3_str":"769,49200-49196-49202-49198-49199-49195-49201-49197-163-159-162-158-49192-49188-49172-49162-49194-49190-49167-49157-107-106-57-56-49191-49187-49171-49161-49193-49189-49166-49156-103-64-51-50-49170-49160-49165-49155-136-135-69-68-22-19-157-156-61-53-60-47-132-65-10-49169-49159-49164-49154-5-255,0-11-10-35-13-15-21,25-24-22-23-20-21-18-19-15-16-17,0-1-2"}
{"desc":"Slack","ja3_hash":"cdd8179dc9c0e4802f557b62bae73d43","ja3_str":"769,49195-49199-52393-52392-52244-52243-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10-21,29-23-24,0"}
{"desc":"MS Edge","ja3_hash":"888ecd3b5821a497195932b0338f2f12","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-57-51-157-156-61-60-53-47-10-106-64-56-50-19,0-5-10-11-13-35-16-23-21760-65281,23-24,0"}
{"desc":"MS Edge","ja3_hash":"5bf43fbca3454853c26df6d996954aca","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-57-51-157-156-61-60-53-47-10-106-64-56-50-19,0-5-10-11-13-35-16-23-65281,23-24,0"}
{"desc":"Dropbox Client","ja3_hash":"21ed4c7ee1daeb84c72199ceaf119b24","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-141-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-65-140-49169-49159-49164-49154-5-4-138-255,0-11-10-35-13-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Win10 Mail Client","ja3_hash":"123b8f4705d525caffa3f2b36447f481","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-57-51-157-156-61-60-53-47-10-106-64-56-50-19-5-4,0-10-11-13-35-23-65281,23-24,0"}
{"desc":"Dropbox Client","ja3_hash":"f8e42933ba5b3990858ba621489047e3","ja3_str":"769,49162-49161-49172-49171-57-51-53-47-10-56-50-19-5-4,0-5-10-11-35-23-65281,23-24,0"}
{"desc":"Dropbox Client","ja3_hash":"30b168d81e38d9a55c474c1e30eaf9f9","ja3_str":"769,49200-49196-49202-49198-49199-49195-49201-49197-163-159-162-158-49192-49188-49172-49162-49194-49190-49167-49157-107-106-57-56-49191-49187-49171-49161-49193-49189-49166-49156-103-64-51-50-49170-49160-49165-49155-136-135-69-68-22-19-157-156-61-53-60-47-132-65-10-255,0-11-10-35-13-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"One Drive","ja3_hash":"388a4049af7e631f8d36eb0f909de65a","ja3_str":"769,49162-49161-49172-49171-57-51-53-47-10-56-50-19-5-4,0-10-11-35-23-65281,23-24,0"}
{"desc":"HTTRack","ja3_hash":"a1ec6fd012b9ee6f84c50339c4205270","ja3_str":"769,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-255,11-10-35-13-15-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"BlueCoat Proxy, Malware Test FP: zeuspandabanker-malspam-traffic","ja3_hash":"5182f54f9c6e99d117d9dde3fa2b4cff","ja3_str":"771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-5-10-11-13-23-65281,23-24,0"}
{"desc":"Microsoft Smartscreen","ja3_hash":"bedb7e0ff43a24272eb0a41993c65faf","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-57-51-157-156-61-60-53-47-10-106-64-56-50-19,0-5-10-11-13-35-23-21760-65281,23-24,0"}
{"desc":"BurpSuite Free (Tested: 1.7.03 on Windows 10), eclipse,JavaApplicationStub,idea","ja3_hash":"8c5a50f1e833ed581e9cfc690814719a","ja3_str":", 771,49187-49191-60-49189-49193-103-64-49161-49171-47-49156-49166-51-50-49195-49199-156-49197-49201-158-162-49160-49170-10-49155-49165-22-19-255,10-11-13,23-1-3-19-21-6-7-9-10-24-11-12-25-13-14-15-16-17-2-18-4-5-20-8-22,0"}


{"desc":"Chrome Version 49.0.2623,87 (64-bit) Linux","ja3_hash":"a7f2d0376cdcfde3117bf6a8359b2ab8","ja3_str":"771,52393-52392-52244-52243-49195-49199-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"Chrome Version 49.0.2623,87 (64-bit) Linux","ja3_hash":"8a8159e6abf9fe493ca87efc38855149","ja3_str":"771,52393-52392-52244-52243-49195-49199-49162-49172-49161-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-11-10,23-24,0"}
{"desc":"Chrome Version 57.0.2987.110 (64-bit) Linux","ja3_hash":"e330bca99c8a5256ae126a55c4c725c5","ja3_str":"771,52393-52392-52244-52243-49195-49199-49196-49200-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-11-10,29-23-24,0"}
{"desc":"Chrome Version 57.0.2987.110 (64-bit) Linux","ja3_hash":"d551fafc4f40f1dec2bb45980bfa9492","ja3_str":"771,52393-52392-52244-52243-49195-49199-49196-49200-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10,29-23-24,0"}
{"desc":"Firefox/31 Linux, firefox","ja3_hash":"ce694315cbb81ce95e6ae4ae8cbafde6","ja3_str":", 771,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4,0-65281-10-11-35-13172-5-13,23-24-25,0"}
{"desc":"Firefox/38 Linux","ja3_hash":"edf844351bc867631b5ebceda318669b","ja3_str":"771,49162-49195-49161-49172-49199-49171-57-51-53-47-10,0-65281-10-11-35-16-5-13,23-24-25,0"}
{"desc":"Firefox/52 Linux","ja3_hash":"4e66f5ad78f3d9ad8d5c7c88d138db43","ja3_str":"771,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-16-5-18-65283-13,29-23-24-25,0"}
{"desc":"Firefox/55/56 Mac/Win/Linux, firefox, Malware Test FP: fake-font-update-for-firefox","ja3_hash":"0ffee3ba8e615ad22535e7f771690a28","ja3_str":", 771,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-16-5-13,29-23-24-25,0"}
{"desc":"Chrome Version 61.0.3163,100(64-bit) Win10","ja3_hash":"d3b972883dfbd24fd20fc200ad8ab22a","ja3_str":"771,52393-52392-49195-49199-49196-49200-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10,29-23-24,0"}
{"desc":"Chrome Version 60/61.0.3163, Google Chrome, Malware Test FP: eitest-campaign-hoeflertext-popup-traffic, whatsapp-malspam-1st-run, boleto-malspam-link-from-pdf-attachment, whatsapp-malspam-2nd-run, eitest-hoeflertext-popup-from-canadoodles.com","ja3_hash":"94c485bca29d5392be53f2b8cf7f4304","ja3_str":", 771,49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10,29-23-24,0"}
{"desc":"Chrome Version 60/61.0.3163, Google Chrome","ja3_hash":"bc6c386f480ee97b9d9e52d472b772d8","ja3_str":", 771,49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-11-10,29-23-24,0"}
{"desc":"IE 11 Win10","ja3_hash":"fee8ec956f324c71e58a8c0baf7223ef","ja3_str":"771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-5-10-11-13-35-16-13172-23-65281,23-24,0"}
{"desc":"Windows Watson WCEI Telemetry Gather","ja3_hash":"2c14bfb3f8a2067fbc88d8345e9f97f3","ja3_str":"771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-5-10-11-13-35-23-65281,23-24,0"}
{"desc":"Firefox/14.0.1 Linux","ja3_hash":"847b0c334fd0f6f85457054fabff3145","ja3_str":"769,255-136-135-57-56-132-53-69-68-51-50-150-65-5-4-47-22-19-65279-10,0-35-13172,,"}
{"desc":"VMWare Update Check 6.x","ja3_hash":"a50a861119aceb0ccc74902e8fddb618","ja3_str":"769,57-56-53-22-19-10-51-50-47-5-4-21-18-9-20-17-8-6-3-255,0,,"}
{"desc":"Debian APT-CURL/1.0 (1.2.15)","ja3_hash":"f7baf7d9da27449e823a4003e14cd623","ja3_str":"771,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49324-49325-49160-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-156-157-49274-49275-47-60-53-61-65-186-132-192-49308-49309-10-158-159-49276-49277-51-103-57-107-69-190-136-196-49310-49311-22,23-22-5-0-65281-10-11-13-16,23-24-25-21-19,0"}
{"desc":"Firefox/45.0 Linux, firefox,thunderbird","ja3_hash":"07b4162d4db57554961824a21c4a0fde","ja3_str":"771,49195-49199-49162-49161-49171-49172-51-57-47-53-10,0-65281-10-11-35-13172-16-5-13,23-24-25,0, "}
{"desc":"Safari/604.1.38 Macintosh, Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"c07cb55f88702033a8f52c046d23e0b2","ja3_str":", 771,255-49196-49195-49188-49187-49162-49161-49200-49199-49192-49191-49172-49171-157-156-61-60-53-47,0-10-11-13-13172-16-5-18-23,23-24-25,0"}
{"desc":"Safari/604.3.1 Macintosh, apple.WebKit.Networking,itunesstored","ja3_hash":"3e4e87dda5a3162306609b7e330441d2","ja3_str":", 771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0"}
{"desc":"Chrome/56.0.2924.87 Linux, Charles,Google Play Music Desktop Player,Postman,Slack,and other desktop programs, Malware Test FP: eitest-hoeflertext-chrome-popup-after-techydiary.com, eitest-hoeflertext-chrome-popup-after-expervision.com, eitest-hoeflertext-chrome-popup-traffic-1-of-6, eitest-hoeflertext-chrome-popup-traffic-4-of-6, eitest-hoeflertext-chrome-popup-sends-spora-ransomware-4th-run, eitest-hoeflertext-chrome-popup-sends-spora-ransomware-3rd-run","ja3_hash":"83e04bc58d402f9633983cbf22724b02","ja3_str":", 771,49195-49199-49196-49200-52393-52392-52244-52243-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10,29-23-24,0"}
{"desc":"Chrome/59.0.3071.115 Win10, node.js","ja3_hash":"9811c1bb9f0f6835d5c13a831cca4173","ja3_str":"771,49199-49195-49200-49196-158-49191-103-49192-107-49188-49172-49162-165-163-161-159-106-105-104-57-56-55-54-49202-49198-49194-49190-49167-49157-157-61-53-49187-49171-49161-164-162-160-64-63-62-51-50-49-48-49201-49197-49193-49189-49166-49156-156-60-47-255,0-11-10-35-13-13172,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2, "}
{"desc":"Mobile Safari/537.35+ BB10","ja3_hash":"87c6dda19108d68e526a72d9ae09fb9e","ja3_str":"771,49196-49200-49195-49199-49188-49162-49192-49172-49187-49161-49191-49171-49160-49170-159-163-158-162-107-57-106-56-103-51-64-50-49198-49202-49197-49201-49190-49157-49194-49167-49189-49156-49193-49166-49155-49165-157-156-61-53-60-47-49169-49159-49164-49154-5-4-10-255,0-11-10-35-13-5,25-24-9-23-19-1,0-1-2"}
{"desc":"Chrome/60.0.3112.113 Win10, Chromium","ja3_hash":"def8761e4bcaaf91d99801a22ac6f6d4","ja3_str":", 771,4865-4866-4867-49195-49199-49196-49200-52393-52392-52244-52243-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-40-45-43-10-24,29-23-24,0"}
{"desc":"Chrome/49.0.2623.112 WinXP","ja3_hash":"248bdbc3873396b05198a7e001fbd49a","ja3_str":"771,52392-52243-49199-49172-49171-156-53-47-10,65281-0-23-35-13-5-13172-18-16-30032-11-10,23-24,0"}
{"desc":"SCRAPER: DotBot","ja3_hash":"d8844f000e5571807e9094e0fcd795fe","ja3_str":"771,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49170-49160-22-19-49165-49155-10-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-255,0-11-10-13-15-13172,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Debian APT-CURL/1.0 (1.2.20+)","ja3_hash":"ec2e8760003621ca668b5f03e616cd57","ja3_str":"771,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49324-49325-49160-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-156-157-49274-49275-47-60-53-61-65-186-132-192-49308-49309-10-158-159-49276-49277-51-103-57-107-69-190-136-196-49310-49311-22,23-22-5-0-65281-35-10-11-13-16,23-24-25-21-19,0"}
{"desc":"SCANNER: wordpress wp-login Firefox/40.1","ja3_hash":"ce5f3254611a8c095a3d821d44539877","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-23-65281,29-23-24,0"}
{"desc":"SCANNER: hoax Firefox/40.1","ja3_hash":"9a35e493f961ac377f948690b5334a9c","ja3_str":"769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,0-10-11,23-24,0"}
{"desc":"BOT: GoogleBot","ja3_hash":"a1cb2295baf199acf82d11ba4553b4a8","ja3_str":"771,49195-49199-52393-52392-49196-49200-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-13172-18-11-10,29-23-24,0"}
{"desc":"BOT: Qwant","ja3_hash":"706567223fbf37d112fba2d95b8ecac3","ja3_str":""}
{"desc":"BOT: Ahrefs, hola_svc","ja3_hash":"5c1c89f930122bccc7a97d52f73bea2c","ja3_str":""}
{"desc":"iPhone OS 10_3_3 Safari 602.1, Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"7e72698146290dd68239f788a452e7d8","ja3_str":", 771,255-49196-49195-49188-49187-49162-49161-49200-49199-49192-49191-49172-49171-157-156-61-60-53-47,0-10-11-13-5-18-23,23-24-25,0"}
{"desc":"iPad; CPU OS 9_3_5  Safari 601.1, Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"a9aecaa66ad9c6cfe1c361da31768506","ja3_str":"771,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10,0-10-11-13-5-18,23-24-25,0, "}
{"desc":"inoreader.com-like FeedFetcher-Google, inoreader.com ","ja3_hash":"3ca5d63fa122552463772d3e87d276f2","ja3_str":"771,49195-49199-158-156-49162-49172-57-107-56-53-61-49161-49171-51-103-50-47-60-5-4-22-19-10,0-65281-10-11-13,23-24-25,0"}
{"desc":"SCRAPER: yandex.ru based Mozilla 4.0; MSIE 8.0; Windows NT 5.1;","ja3_hash":"05e15a226e00230c416a8cdefeb483c7 ","ja3_str":"769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,0-10-11-23-65281,23-24,0"}
{"desc":"PaleMoon Browser;  PaleMoon/27.4.2","ja3_hash":"d82cbe0b93f2b02d490a14f6bc1d421a","ja3_str":"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-69-136-157-47-65-53-61-132,0-65281-10-11-35-16-5-40-43-13-45,29-23-24-25-256-257-258-259-260,0"}
{"desc":"RSiteAuditor","ja3_hash":"35c0a31c481927f022a3b530255ac080","ja3_str":"771,49192-159-158-157-156-49195-49187-49191-49172-49171-61-60-53-47-49196-49188-49162-49161-106-64-56-50-10-19-5-4,65281-0-10-11-13-35,23-24,0"}
{"desc":"urlgrabber/3.10 yum/3.4.3","ja3_hash":"37f691b063c10372135db21579643bf1","ja3_str":"771,49196-49162-49195-52393-49161-49200-49172-49199-52392-49171-159-57-56-107-158-52394-51-50-103-22-19-157-53-61-156-47-60-10-5-4,0-65281-10-11-13,29-23-24-25,0"}
{"desc":"Feedly/1.0, java,eclipse,Cyberduck","ja3_hash":"f22bdd57e3a52de86cda40da2d84e83b","ja3_str":"771,49188-49192-61-49190-49194-107-106-49162-49172-53-49157-49167-57-56-49187-49191-60-49189-49193-103-64-49161-49171-47-49156-49166-51-50-49196-49195-49200-157-49198-49202-159-163-49199-156-49197-49201-158-162-49160-49170-10-49155-49165-22-19-255,10-11-13-0,23-24-25-9-10-11-12-13-14-22,0, "}
{"desc":"mj12bot.com","ja3_hash":"11e1137464a4343105031631d470cd92","ja3_str":"771,52393-52392-52244-52243-49195-49199-158-49196-49200-159-49161-49187-49171-49191-51-103-49162-49188-49172-49192-57-107-156-157-47-60-53-61-10,65281-0-23-35-13-11-10,29-23-24,0"}
{"desc":"Twitterbot/1.0","ja3_hash":"edcf2fd479271286879efebd22bc8d16","ja3_str":"771,49196-49195-49199-49171-49172-156-47-53,10-11-13-0-65281,23-24-25-9-10-11-12-13-14-22,0"}
{"desc":"SeznamBot/3.2","ja3_hash":"6cc3c7debc31952d05ecaacb6021925f","ja3_str":"771,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"CRAWLER: facebookexternalhit/1.1","ja3_hash":"111da7c75fee7fe934b35a8d88eb350a","ja3_str":"771,49199-49195-49171-49161-49200-49196-49172-49162-51-57-50-49169-49159-47-53-10-5-4-255,0-11-10-13-13172-16,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Firefox/51.0 Windows 10, firefox,thunderbird","ja3_hash":"61d0d709fe7ac199ef4b2c52bc8cef75","ja3_str":", 771,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-16-5-65283-13,29-23-24-25,0"}
{"desc":"Firefox/56.0 Windows 10","ja3_hash":"be1a7de97ea176604a3c70622189d78d","ja3_str":"771,49195-49199-49196-49200-158-162-159-163-49187-49191-49161-49171-49188-49192-49162-49172-103-107-51-57-64-106-50-56-156-157-60-61-47-53-49159-49169-5-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Firefox/40.1 Windows 7","ja3_hash":"05af1f5ca1b87cc9cc9b25185115607d","ja3_str":"769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24,0"}
{"desc":"Firefox/55 Windows 10","ja3_hash":"1885aa9927f99ed538ed895d9335995c","ja3_str":"771,49195-49199-158-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}

{"desc":"Dropbox","ja3_hash":"054c9f9d304b7a2add3d6fa75bc20ae4","ja3_str":"771,49200-49192-49172-49199-49191-49171-159-107-57-158-103-51-255,0-11-10-35-13,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Dashlane","ja3_hash":"0217dc3bd88c696cc15374db0d848de4","ja3_str":"769,49172-49162-57-56-55-54-136-135-134-133-49167-49157-53-132-141-49171-49161-51-50-49-48-154-153-152-151-69-68-67-66-49166-49156-47-150-65-7-140-49169-49159-49164-49154-5-4-138-255,0-11-10-35-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}

# -- from https://raw.githubusercontent.com/salesforce/ja3/master/lists/osx-nix-ja3.csv -- 
# Copyright (c) 2017 salesforce.com inc.
# All rights reserved.
# Licensed under the BSD 3-Clause license. 
# For full license text see LICENSE.txt file in the repo root or https://opensource.org/licenses/BSD-3-Clause",
{"desc":"AcroCEF","ja3_hash":"61d50e7771aee7f2f4b89a7200b4d45e","ja3_str":""}
{"desc":"AIM","ja3_hash":"49a6cf42956937669a01438f26e7c609","ja3_str":""}
{"desc":"Airmail 3","ja3_hash":"561145462cfc7de1d6a97e93d3264786","ja3_str":""}
{"desc":"Alation Compose","ja3_hash":"f6fd83a21f9f3c5f9ff7b5c63bbc179d","ja3_str":""}
{"desc":"Amazon Music","ja3_hash":"6003b52942a2e1e1ea72d802d153ec08","ja3_str":""}
{"desc":"Amazon Music,Dreamweaver,Spotify","ja3_hash":"eb149984fc9c44d85ed7f12c90d818be","ja3_str":""}
{"desc":"AnypointStudio","ja3_hash":"8e3f1bf87bc652a20de63bfd4952b16a","ja3_str":""}
{"desc":"apple.geod","ja3_hash":"5507277945374659a5b4572e1b6d9b9f","ja3_str":""}
{"desc":"apple.geod","ja3_hash":"f753495f2eab5155c61b760c838018f8","ja3_str":""}
{"desc":"apple.geod,parsecd,apple.photomoments","ja3_hash":"ba40fea2b2638908a3b3b482ac78d729","ja3_str":""}
{"desc":"apple.WebKit.Networking","ja3_hash":"474e73aea21d1e0910f25c3e6c178535","ja3_str":""}
{"desc":"apple.WebKit.Networking","ja3_hash":"eeeb5e7485f5e10cbc39db4cfb69b264","ja3_str":""}
{"desc":"apple.WebKit.Networking,Chatter,FieldServiceApp,socialstudio","ja3_hash":"63de2b6188d5694e79b678f585b13264","ja3_str":""}
{"desc":"apple.WebKit.Networking,itunesstored","ja3_hash":"7b343af1092863fdd822d6f10645abfb","ja3_str":""}
{"desc":"apple.WebKit.Networking,Spotify,WhatsApp,Skype,iTunes","ja3_hash":"a312f9162a08eeedf7feb7a13cd7e9bb","ja3_str":""}
{"desc":"AT&T Connect","ja3_hash":"c5c11e6105c56fd29cc72c3ac7a2b78b","ja3_str":""}
{"desc":"Battle.net,Dropbox","ja3_hash":"fa030dbcb2e3c7141d3c2803780ee8db","ja3_str":""}
{"desc":"bitgo,ShapeShift","ja3_hash":"0ef9ca1c10d3f186f5786e1ef3461a46","ja3_str":""}
{"desc":"BlueJeans,CEPHtmlEngine","ja3_hash":"cdec81515ccc75a5aa41eb3db22226e6","ja3_str":""}
{"desc":"Charles,java,eclipse","ja3_hash":"424008725394c634a4616b8b1f2828a5","ja3_str":""}
{"desc":"Chromium","ja3_hash":"be9f1360cf52dc1f61ae025252f192a3","ja3_str":""}
{"desc":"Chromium","ja3_hash":"fc5cb0985a5f5e295163cc8ffff8a6e1","ja3_str":""}
{"desc":"Cisco AnyConnect Secure Mobility Client","ja3_hash":"e7d46c98b078477c4324031e0d3b22f5","ja3_str":""}
{"desc":"Cisco AnyConnect Secure Mobility Client","ja3_hash":"ed36017db541879619c399c95e22067d","ja3_str":""}
{"desc":"Citrix Viewer","ja3_hash":"5ee1a653fb824db7182714897fd3b5df","ja3_str":""}
{"desc":"Covenant Eyes","ja3_hash":"a9d17f74e55dd53fcf7c234f8a240919","ja3_str":""}
{"desc":"Creative Cloud","ja3_hash":"c882d9444412c00e71b643f3f54145ff","ja3_str":""}
{"desc":"cscan","ja3_hash":"bc0608d33dc64506b42f7f5f87958f37","ja3_str":""}
{"desc":"Deezer","ja3_hash":"4fcd1770545298cc119865aeba81daba","ja3_str":""}
{"desc":"Dynalist,Postman,Google Chrome,Franz,GOG Galaxy","ja3_hash":"4c40bf8baa7c301c5dba8a20bc4119e2","ja3_str":""}
{"desc":"eclipse","ja3_hash":"0411bbb5ff27ad46e1874a7a8beedacb","ja3_str":""}
{"desc":"eclipse","ja3_hash":"4990c9da08f44a01ecd7ddc3837caf25","ja3_str":""}
{"desc":"eclipse","ja3_hash":"fa106fe5beec443af7e211ef8902e7e0","ja3_str":""}
{"desc":"eclipse,java","ja3_hash":"d74778f454e2b047e030b291b94dd698","ja3_str":""}
{"desc":"eclipse,java,studio,STS, Malware Test FP: java-based-rat-malspam-traffic","ja3_hash":"187dfde7edc8ceddccd3deeccc21daeb","ja3_str":", 771,49187-49191-60-49189-49193-103-64-49161-49171-47-49156-49166-51-50-49195-49199-156-49197-49201-158-162-49160-49170-10-49155-49165-22-19-255,10-11-13-0,23-24-25-9-10-11-12-13-14-22,0"}
{"desc":"FieldServiceApp,socialstudio","ja3_hash":"1fbe5382f9d8430fe921df747c46d95f","ja3_str":""}
{"desc":"firefox","ja3_hash":"0a81538cf247c104edb677bdb8902ed5","ja3_str":""}
{"desc":"firefox","ja3_hash":"0b6592fd91d4843c823b75e49b43838d","ja3_str":""}
{"desc":"firefox","ja3_hash":"1c15aca4a38bad90f9c40678f6aface9","ja3_str":""}
{"desc":"firefox","ja3_hash":"5163bc7c08f57077bc652ec370459c2f","ja3_str":""}
{"desc":"firefox","ja3_hash":"a88f1426c4603f2a8cd8bb41e875cb75","ja3_str":""}
{"desc":"firefox","ja3_hash":"b03910cc6de801d2fcfa0c3b9f397df4","ja3_str":""}
{"desc":"firefox","ja3_hash":"bfcc1a3891601edb4f137ab7ab25b840","ja3_str":""}
{"desc":"firefox","ja3_hash":"f15797a734d0b4f171a86fd35c9a5e43","ja3_str":""}
{"desc":"Franz,Google Chrome,Kiwi,Spotify,nwjs,Slack","ja3_hash":"8498fe4268764dbf926a38283e9d3d8f","ja3_str":""}
{"desc":"Fuze","ja3_hash":"900c1fa84b4ea86537e1d148ee16eae8","ja3_str":""}
{"desc":"geod","ja3_hash":"107144b88827da5da9ed42d8776ccdc5","ja3_str":""}
{"desc":"geod","ja3_hash":"c46941d4de99445aef6b497679474cf4","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"002205d0f96c37c5e660b9f041363c11","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"073eede15b2a5a0302d823ecbd5ad15b","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"0b61c673ee71fe9ee725bd687c455809","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"6cd1b944f5885e2cfbe98a840b75eeb8","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"b4f4e6164f938870486578536fc1ffce","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"b8f81673c0e1d29908346f3bab892b9b","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"baaac9b6bf25ad098115c71c59d29e51","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"da949afd9bd6df820730f8f171584a71","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"f58966d34ff9488a83797b55c804724d","ja3_str":""}
{"desc":"Google Chrome","ja3_hash":"fd6314b03413399e4f23d1524d206692","ja3_str":""}
{"desc":"Google Chrome Helper","ja3_hash":"0e46737668fe75092919ee047a0b5945","ja3_str":""}
{"desc":"Google Chrome Helper","ja3_hash":"39fa85654105398ee7ef6a3a1c81d685","ja3_str":""}
{"desc":"Google Chrome Helper","ja3_hash":"4ba7b7022f5f5e1e500bb19199d8b1a4","ja3_str":""}
{"desc":"Google Chrome,Slack","ja3_hash":"5498cef2cca704eb01cf2041cc1089c1","ja3_str":""}
{"desc":"Google Drive File Stream","ja3_hash":"d27fb8deca6e3b9739db3fda2b229fe3","ja3_str":""}
{"desc":"Google Earth","ja3_hash":"ae340571b4fd0755c4a0821b18d8fa93","ja3_str":""}
{"desc":"Google Photos Backup","ja3_hash":"f059212ce3de94b1e8253a7522cb1b44","ja3_str":""}
{"desc":"gramblr","ja3_hash":"fd10cc8cce9493a966c57249e074755f","ja3_str":""}
{"desc":"hola_svc","ja3_hash":"3e860202fc555b939e83e7a7ab518c38","ja3_str":""}
{"desc":"hola_svc","ja3_hash":"54328bd36c14bd82ddaa0c04b25ed9ad","ja3_str":""}
{"desc":"hola_svc","ja3_hash":"56ac3a0bef0824c49e4b569941937088","ja3_str":""}
{"desc":"hola_svc","ja3_hash":"8bd59c4b7f3193db80fd64318429bcec","ja3_str":""}
{"desc":"hola_svc","ja3_hash":"d1f9f9b224387d2597f02095fcec96d7","ja3_str":""}
{"desc":"hola_svc","ja3_hash":"ff1040ba1e3d235855ef0d7cd9237fdc","ja3_str":""}
{"desc":"IDSyncDaemon","ja3_hash":"5af143afdbf58ec11ab3b3d53dd4e5e3","ja3_str":""}
{"desc":"Inbox OSX","ja3_hash":"d06acbe8ac31e753f40600a9d6717cba","ja3_str":""}
{"desc":"java","ja3_hash":"093081b45872912be9a1f2a8163fe041","ja3_str":""}
{"desc":"java","ja3_hash":"2080bf56cb87e64303e27fcd781e7efd","ja3_str":""}
{"desc":"java","ja3_hash":"225a24b45f0f1adbc2e245d4624c6e08","ja3_str":""}
{"desc":"java","ja3_hash":"3afe1fb5976d0999abe833b14b7d6485","ja3_str":""}
{"desc":"java","ja3_hash":"3b844830bfbb12eb5d2f8dc281d349a9","ja3_str":""}
{"desc":"java, Malware Test FP: sweet-orange-ek-traffic, styx-ek-traffic, magnitude-ek-traffic, java-update-traffic-edited, neutrino-and-nuclear-ek-traffic, flashpack-ek-traffic, sibhost-ek-traffic, nuclear-ek-traffic","ja3_hash":"51a7ad14509fd614c7bb3a50c4982b8c","ja3_str":", 769,49161-49171-47-49156-49166-51-50-49159-49169-5-49154-49164-49160-49170-10-49155-49165-22-19-4-255,10-11-0,23-1-3-19-21-6-7-9-10-24-11-12-25-13-14-15-16-17-2-18-4-5-20-8-22,0"}
{"desc":"java","ja3_hash":"550628650380ff418de25d3d890e836e","ja3_str":""}
{"desc":"java","ja3_hash":"5b270b309ad8c6478586a15dece20a88","ja3_str":""}
{"desc":"java","ja3_hash":"5d7abe53ae15b4272a34f10431e06bf3","ja3_str":""}
{"desc":"java","ja3_hash":"7c7a68b96d2aab15d678497a12119f4f","ja3_str":""}
{"desc":"java","ja3_hash":"88afa0dea1608e28f50acbad32d7f195","ja3_str":""}
{"desc":"java","ja3_hash":"8ce6933b8c12ce931ca238e9420cc5dd","ja3_str":""}
{"desc":"java","ja3_hash":"a9fead344bf3ac09f62df3cd9b22c268","ja3_str":""}
{"desc":"java,eclipse,STS","ja3_hash":"028563cffc7a3a2e32090aee0294d636","ja3_str":""}
{"desc":"java,JavaApplicationStub","ja3_hash":"5f9b53f0d39dc9d940a3b5568fe5f0bb","ja3_str":""}
{"desc":"JavaApplicationStub","ja3_hash":"c376061f96329e1020865a1dc726927d","ja3_str":""}
{"desc":"Kindle,stack,nextcloud","ja3_hash":"e516ad69a423f8e0407307aa7bfd6344","ja3_str":""}
{"desc":"LeagueClientUx","ja3_hash":"3959d0a1344896e9fb5c0564ca0a2956","ja3_str":""}
{"desc":"LINE Messaging","ja3_hash":"0fe51fa93812c2ebb50a655222a57bf2","ja3_str":""}
{"desc":"LINE Messaging","ja3_hash":"2e094913d88f0ad8dc69447cb7d2ce65","ja3_str":""}
{"desc":"LogMeIn Client","ja3_hash":"193349d34561d1d5d1a270172eb2d97e","ja3_str":""}
{"desc":"Maxthon","ja3_hash":"d732ca39155f38942f90e9fc2b0f97f7","ja3_str":""}
{"desc":"Messenger,Jumpshare","ja3_hash":"c9dbeed362a32f9a50a26f4d9b32bbd8","ja3_str":""}
{"desc":"mono-sgen,Syncplicity,Axure RP 8,Amazon Drive","ja3_hash":"6acb250ada693067812c3335705dae79","ja3_str":""}
{"desc":"node-webkit,Kindle","ja3_hash":"3ee4aaac7147ff2b80ada31686db660c","ja3_str":""}
{"desc":"node.js","ja3_hash":"641df9d6dbe7fdb74f70c8ad93def8cc","ja3_str":""}
{"desc":"node.js,Postman,WhatsApp","ja3_hash":"106ecbd3d14b4dc6e413494263720afe","ja3_str":""}
{"desc":"nwjs,Chromium","ja3_hash":"49de9b1c7e60bd3b8e1d4f7a49ba362e","ja3_str":""}
{"desc":"p4v,owncloud","ja3_hash":"38cbe70b308f42da7c9980c0e1c89656","ja3_str":""}
{"desc":"parsecd,apple.geod,apple.photomoments,photoanalysisd,FreedomProxy","ja3_hash":"62448833d8230241227c03b7d441e31b","ja3_str":""}
{"desc":"postbox-bin","ja3_hash":"e846898acc767ebeb2b4388e58a968d4","ja3_str":""}
{"desc":"Qsync Client","ja3_hash":"a7823092705a5e91ce2b7f561b6e5b98","ja3_str":""}
{"desc":"RescueTime,Plantronics Hub","ja3_hash":"c048d9f26a79e11ca7276499ef24daf3","ja3_str":""}
{"desc":"ruby","ja3_hash":"d219efd07cbb8fbe547e6a5335843f0f","ja3_str":""}
{"desc":"Safari","ja3_hash":"c36fb08942cf19508c08d96af22d4ffc","ja3_str":""}
{"desc":"Salesforce Files","ja3_hash":"844166382cc98d98595e6778c470f5d5","ja3_str":""}
{"desc":"Skype","ja3_hash":"49a341a21f4fd4ac63b027ff2b1a331f","ja3_str":""}
{"desc":"Slack","ja3_hash":"a5aa6e939e4770e3b8ac38ce414fd0d5","ja3_str":""}
{"desc":"Spark","ja3_hash":"116ffc8889873efad60457cd55eaf543","ja3_str":""}
{"desc":"SpotlightNetHelper,Safari","ja3_hash":"8db4b0f8e9dd8f2fff38ee7c5a1e4496","ja3_str":""}
{"desc":"Steam OSX","ja3_hash":"39cf5b7a13a764494de562add874f016","ja3_str":""}
{"desc":"Tableau","ja3_hash":"2d3854d1cbcdceece83eabd85bdcc056","ja3_str":""}
{"desc":"Tableau","ja3_hash":"a585c632a2b49be1256881fb0c16c864","ja3_str":""}
{"desc":"Tableau","ja3_hash":"cd7c06b9459c9cfd4af2dba5696ea930","ja3_str":""}
{"desc":"True Key","ja3_hash":"df65746370dcabc9b4f370c6e14a8156","ja3_str":""}
{"desc":"Used by many desktop apps,Quip,Spotify,GitHub Desktop","ja3_hash":"84071ea96fc8a60c55fc8a405e214c0f","ja3_str":""}
{"desc":"Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"40fd0a5e81ebdcf0ec82a4710a12dec1","ja3_str":""}
{"desc":"Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"618ee2509ef52bf0b8216e1564eea909","ja3_str":""}
{"desc":"Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"799135475da362592a4be9199d258726","ja3_str":""}
{"desc":"Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"7b530a25af9016a9d12de5abc54d9e74","ja3_str":""}
{"desc":"Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"c05de18b01a054f2f6900ffe96b3da7a","ja3_str":""}
{"desc":"Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3_str":""}
{"desc":"Used by many programs on OSX,apple.WebKit.Networking","ja3_hash":"f1c5cf087b959cec31bd6285407f689a","ja3_str":""}
{"desc":"Used by many programs,Python,PHP,Git,dotnet,Adobe","ja3_hash":"488b6b601cb141b062d4da7f524b4b22","ja3_str":""}
{"desc":"Used by many programs,Quip,Aura,Spotify,Chatty","ja3_hash":"f28d34ce9e732f644de2350027d74c3f","ja3_str":""}
{"desc":"Used by many programs,Quip,Spotify,Dropbox,GitHub Desktop,etc","ja3_hash":"190dfb280fe3b541acc6a2e5f00690e6","ja3_str":""}
{"desc":"Used by many programs,Slack,Postman,Spotify,Google Chrome","ja3_hash":"20dd18bdd3209ea718989030a6f93364","ja3_str":""}
{"desc":"Viber","ja3_hash":"e0224fc1c33658f2d3d963bfb0a76a85","ja3_str":""}
{"desc":"vpnkit","ja3_hash":"01319090aea981dde6fc8d6ae71ead54","ja3_str":""}
{"desc":"wineserver","ja3_hash":"84607748f3887541dd60fe974a042c71","ja3_str":""}
{"desc":"ZwiftApp","ja3_hash":"c2b4710c6888a5d47befe865c8e6fb19","ja3_str":""}

# Generated from all PCAPs on https://www.malware-traffic-analysis.net
{"desc":"Malware Test FP: eitest-rig-ek-traffic, cryptowall-phishing-malware-run-on-a-vm, hancitor-malspam-traffic-example, phishing-malware-analysis-from-malwr, phishing-malware-run-on-a-vm, unidentified-campaign-rig-ek-sends-deloader, hancitor-malspam-1st-run, hancitor-malspam-traffic","ja3_hash":"2d8794cb7b52b777bee2695e79c15760","ja3_str":"771,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: usps-malspam-traffic-1-of-2, usps-malspam-js-file-post-infection-traffic","ja3_hash":"92579701f145605e9edc0b01a901c6d5","ja3_str":"771,52393-52392-52244-52243-49195-49199-49196-49200-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-11-10,29-23-24,0"}
{"desc":"Malware Test FP: mordor-from-seahomevb.top, nd-run-hookads-rig-ek-sends-drembot-with-post-infection-traffic","ja3_hash":"bafc6b01eae6f4350f5db6805ace208e","ja3_str":"769,49172-49171-49162-49161-53-47-56-50-10-19-5-4,0-10-11-23-65281,25-23-24,0"}
{"desc":"Malware Test FP: eitest-rig-ek-traffic, traffic-from-portuguese-malspam-attachment, eitest-script-for-tech-scam-after-amormariano.com.br-uk-based-traffic, eitest-fake-chrome-popup-leads-to-spora-ransomware, eitest-rig-ek-1st-run, cerber-ransomware-from-sunfloridjk.top-thru-fake-chrome-page, eitest-hoeflertext-chrome-popup-traffic-5-of-6, parking-service-malspam-traffic-1st-run, eitest-rig-ek-third-run, eitest-tech-support-scam, eitest-hoeflertext-chrome-popup-traffic-2-of-6, eitest-hoeflertext-chrome-popup-sends-spora-ransomware-1st-run, eitest-script-for-tech-scam-after-activaclinics.com-uk-based-traffic, eitest-hoeflertext-chrome-popup-sends-spora-ransomware-2nd-run, eitest-hoeflertext-chrome-popup-traffic-6-of-6, tech-support-scam-traffic, mole-ransomware-malspam-1st-attempt-on-a-vm, eitest-neutrino-ek-after-classical959.com, eitest-script-for-tech-scam-after-intothebluefishing.com-uk-based-traffic, eitest-hoeflertext-chrome-popup-traffic-3-of-6, boleto-malspam-traffic, eitest-hoeflertext-chrome-popup-traffic-2nd-run","ja3_hash":"1074895078955b2db60423ed2bf8ac23","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-49196-49195-49188-49187-49162-49161-61-60-53-47-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24-25,0"}
{"desc":"Malware Test FP: trickbot-malspam-traffic","ja3_hash":"294b2f1dc22c6e6c3231d2fe311d504b","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-57-51-157-156-61-60-53-47-10-106-64-56-50-19,5-10-11-13-35-23-65281,29-23-24,0"}
{"desc":"Malware Test FP: neutrino-traffic","ja3_hash":"e107ef8ec0296e17c3f82de949b4066c","ja3_str":"769,49172-49162-57-56-55-54-49167-49157-53-136-135-134-133-132-49171-49161-51-50-49-48-49166-49156-47-154-153-152-151-69-68-67-66-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-16-13-49165-49155-10-21-18-15-12-9-20-17-14-11-8-6-3-255,11-10-35-15,14-13-25-28-11-12-27-24-9-10-26-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: fake-font-update-for-firefox","ja3_hash":"df5c30e670dba99f9270ed36060cf054","ja3_str":"771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10-5-4,0-10-11-13-35-23-65281,29-23-24,0"}
{"desc":"Malware Test FP: fiesta-ek-infection-traffic","ja3_hash":"c1fbfd09bd0bab610be60dd6819688f4","ja3_str":"769,49161-49171-47-49156-49166-51-50-49159-49169-5-49154-49164-49160-49170-10-49155-49165-22-19-4-255,10-11,23-1-3-19-21-6-7-9-10-24-11-12-25-13-14-15-16-17-2-18-4-5-20-8-22,0"}
{"desc":"Malware Test FP: rig-ek-sends-kovter-2nd-run, rig-ek-sends-kovter-1st-run, dridex-malspam-traffic-example","ja3_hash":"df8bfc363eeba63ab938cb2190ccd7b7","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-49196-49195-49188-49187-49162-49161-61-60-53-47-106-64-56-50-10-19-5-4,10-11-13-23-65281,23-24-25,0"}
{"desc":"Malware Test FP: banking-phish-traffic","ja3_hash":"10ee8d30a5d01c042afd7b2b205facc4","ja3_str":"771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-24-65281,29-23-24,0"}
{"desc":"Malware Test FP: malspam-traffic","ja3_hash":"e7d705a3286e19ea42f587b344ee6865","ja3_str":"771,49195-49199-49162-49161-49171-49172-49170-49159-49169-51-50-69-57-56-136-22-47-65-53-132-10-5-4-255,0-11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Malware Test FP: eitest-angler-ek-third-run","ja3_hash":"ff94b48f555edc2f0a4c8256eb0d81de","ja3_str":"769,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-4-5-47-49160-49170-22-19-49165-49155-65279-10-255,0-11-10-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: malspam-traffic","ja3_hash":"243a279e5aaae8841edf46d00c05195e","ja3_str":"771,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-49202-49198-49194-49190-49167-49157-157-61-53-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-49201-49197-49193-49189-49166-49156-156-60-47-150-49170-49160-22-19-16-13-49165-49155-10-255,0-11-10-13-15-13172-16-21,14-13-25-28-11-12-27-24-9-10-26-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: neutrino-traffic","ja3_hash":"aeae3901ecde8396b2f5648c02aeb37f","ja3_str":"771,49200-49196-49202-49198-49199-49195-49201-49197-165-163-161-159-164-162-160-158-49192-49188-49172-49162-49194-49190-49167-49157-107-106-105-104-57-56-55-54-49191-49187-49171-49161-49193-49189-49166-49156-103-64-63-62-51-50-49-48-136-135-134-133-69-68-67-66-49170-49160-49165-49155-22-19-16-13-157-156-61-53-60-47-132-65-10-255,0-11-10-35-13-15-13172-16-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Malware Test FP: eitest-rig-ek-second-example","ja3_hash":"2d44457ca7a1e0e754664c8469ce62a8","ja3_str":"771,49195-49199-158-52244-52243-49162-49161-49171-49172-49159-49169-51-50-57-156-47-53-10-5-4,0-65281-10-11-35-30032-5-13-18,23-24-25,0"}
{"desc":"Malware Test FP: neutrino-traffic","ja3_hash":"51b5c918558a4bfb50ce1ab1d5fddff7","ja3_str":"771,49200-49196-49202-49198-49199-49195-49201-49197-165-163-161-159-164-162-160-158-49192-49188-49172-49162-49194-49190-49167-49157-107-106-105-104-57-56-55-54-49191-49187-49171-49161-49193-49189-49166-49156-103-64-63-62-51-50-49-48-157-156-61-53-60-47-255,0-11-10-35-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Malware Test FP: usps-malspam-traffic-1-of-2, usps-malspam-js-file-post-infection-traffic","ja3_hash":"6f702efe6480d2a1c9f85b73b8a4794a","ja3_str":"771,52393-52392-52244-52243-49195-49199-49196-49200-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10-24,29-23-24,0"}
{"desc":"Malware Test FP: fake-font-update-for-firefox","ja3_hash":"a0e9f5d64349fb13191bc781f81f42e1","ja3_str":"771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-23-65281,29-23-24,0"}
{"desc":"Malware Test FP: nuclear-ek-traffic, malspam-traffic","ja3_hash":"1be3ecebe5aa9d3654e6e703d81f6928","ja3_str":"771,49195-49199-49162-49161-49171-49172-51-57-47-53-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: neutrino-traffic","ja3_hash":"fd6bbdf835788b3c7d33372127470a06","ja3_str":"769,57-56-53-22-19-10-51-50-47-7-5-4-21-18-9-20-17-8-6-3-255,0-35,,"}
{"desc":"Malware Test FP: boleto-malspam-infection-traffic","ja3_hash":"4f635262ad3fb6e634daee798082c788","ja3_str":"769,49172-49171-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24-25,0"}
{"desc":"Malware Test FP: trickbot-infection-from-usdata.estoreseller.com, malspam-infection-traffic, upatre-malspam-infection-traffic, fedex-malspam-sends-kovter, trickbot-infection-from-carriereiter.com.exe, kovter-nemucodaes-malspam-traffic, necurs-botnet-malspam-pushes-trickbot, kovter-nemucod-malspam-traffic, angler-ek-traffic, trickbot-malspam-traffic, trickbot-infection-from-carriereiserphotography.com, booking-malspam-dridex-traffic, dridex-confirmation-letter-dridex-traffic, trickbot-malspam-traffic-example, trickbot-infection-from-carriereiter.com, nuclear-ek-traffic, kovter-locky-malspam-traffic","ja3_hash":"6734f37431670b3ab4292b8f60f29984","ja3_str":"769,47-53-5-10-49171-49172-49161-49162-50-56-19-4,65281-10-11,23-24,0"}
{"desc":"Malware Test FP: angler-ek-traffic-01","ja3_hash":"96eba628dcb2b47607192ba74a3b55ba","ja3_str":"769,57-56-53-22-19-10-51-50-47-7-5-4-21-18-9-20-17-8-6-3,,,"}
{"desc":"Malware Test FP: fake-font-update-for-firefox","ja3_hash":"2efb07037a97b06201ab4fe7ec0c326e","ja3_str":"771,49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-51-57-47-53-10,0-23-65281-10-11-35-16-5-13-21,29-23-24-25,0"}
{"desc":"Malware Test FP: rig-ek-traffic","ja3_hash":"1848357994c2851c809cb01bae7d631c","ja3_str":"771,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-7-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-21-18-9-255,0-11-10-35-13-15,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: usps-malspam-traffic-1-of-2, usps-malspam-js-file-post-infection-traffic","ja3_hash":"3fab5d0fe3b2408c8b2251b46d3895de","ja3_str":"771,52393-52392-52244-52243-49195-49199-49196-49200-49161-49171-49162-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10-24-21,29-23-24,0"}
{"desc":"Malware Test FP: dridex-infection-traffic","ja3_hash":"85bedfc1914da556aab4518390798003","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,10-11-13-23-65281,23-24,0"}
{"desc":"Malware Test FP: boleto-malspam-traffic","ja3_hash":"e9273590c7875d6367325f8714890790","ja3_str":"771,49200-49196-49192-49188-49172-49162-163-159-107-106-57-56-136-135-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-162-158-103-64-51-50-154-153-69-68-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49169-49159-49164-49154-5-4-49170-49160-22-19-49165-49155-10-255,0-11-10-13-15-21,14-13-25-11-12-24-9-10-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: nuclear-ek-traffic, malspam-traffic","ja3_hash":"fd2273056f386e0ba8004e897c337037","ja3_str":"771,49195-49199-49162-49161-49171-49172-49170-51-50-57-56-22-47-53-10-255,0-11-10-35-13-15,14-13-25-28-11-12-27-24-9-10-26-22-23-8-6-7-20-21-4-5-18-19-1-2-3-15-16-17,0-1-2"}
{"desc":"Malware Test FP: neutrino-traffic","ja3_hash":"a7dfa1673bb090cab6b6658861f43473","ja3_str":"771,49200-49196-49192-49188-49172-49162-165-163-161-159-107-106-105-104-57-56-55-54-136-135-134-133-49202-49198-49194-49190-49167-49157-157-61-53-132-49199-49195-49191-49187-49171-49161-164-162-160-158-103-64-63-62-51-50-49-48-154-153-152-151-69-68-67-66-49201-49197-49193-49189-49166-49156-156-60-47-150-65-49170-49160-22-19-16-13-49165-49155-10-255,0-11-10-13-15-13172-16-21,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}
{"desc":"Malware Test FP: eitest-hoeflertext-chrome-popup-traffic-4-of-6","ja3_hash":"098f55e27d8c4b0a590102cbdb3a5f3a","ja3_str":"771,49195-49199-49196-49200-52393-52392-52244-52243-49171-49172-156-157-47-53-10,65281-0-23-35-13-5-18-16-30032-11-10-21,29-23-24,0"}
{"desc":"Malware Test FP: eitest-rig-ek-3rd-run, rig-ek-sends-cerber-ransomware-after-southcoastdrones.com.au, boleto-malspam-infection-traffic, eitest-rig-ek-sends-vawtrak, eitest-rig-ek-5th-run, malspam-traffic","ja3_hash":"3b483d0b34894548b602e8d18cdc24c5","ja3_str":"771,49192-49191-49172-49171-159-158-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24-25,0"}
{"desc":"Malware Test FP: angler-ek-traffic-02","ja3_hash":"d55e755245ac118f2b1847c1c57b5e03","ja3_str":"771,52244-52243-49195-49199-158-156-49162-49172-57-53-49159-49161-49169-49171-51-50-5-4-47-10,0-65281-10-11-35-13172-16-30032-5-13-18,23-24-25,0"}
{"desc":"Malware Test FP: neutrino-traffic","ja3_hash":"852e7534b3f722d893a7750afb5ecdcc","ja3_str":"771,49195-49187-49196-49188-49161-49162-49191-49171-49172-64-50-106-56-60-47-61-53-19-10-5-255,0-11-10-35-13-15,25-24-23,0-1-2"}
{"desc":"Malware Test FP: dhl-malspam-traffic, st-run-hookads-rig-ek, eitest-rig-ek-sends-dreambot, traffic-from-malspam-pushing-dreambot, nd-run-hookads-rig-ek-sends-dreambot, nd-run-hookads-rig-ek-sends-drembot-with-post-infection-traffic, japanese-malspam-pushing-ursnif-traffic, nd-run-hookads-rig-ek, nd-run-hookads-rig-ek-sends-dreambot-with-post-infection-traffic, st-run-hookads-rig-ek-sends-dreambot, th-run-hookads-rig-ek-sends-dreambot","ja3_hash":"c201b92f8b483fa388be174d6689f534","ja3_str":"769,49162-49172-136-135-57-56-49167-49157-132-53-49159-49161-49169-49171-69-68-51-50-49164-49166-49154-49156-150-65-4-5-47-49160-49170-22-19-49165-49155-65279-10-255,0-11-10-13-15,23-25-28-27-24-26-22-14-13-11-12-9-10,0-1-2"}

# added some JA3S 
{"desc":"JA3S: Apache 2.4.18 Ubuntu 16.04","ja3_hash":"b898351eb5e266aefd3723d466935494","ja3_str":"771,49199,0-65281-11-35-16"}
{"desc":"JA3S: Apache 2.4.18 Ubuntu 16.04","ja3_hash":"7bee5c1d424b7e5f943b06983bb11422","ja3_str":"771,49199,65281-16"}
{"desc":"JA3S: ESF/Golfe2 Google Static",  "ja3_hash":"f93a0b1f80e58bc666e2efad32108aa2","ja3_str":"771,52393,65281-23-35-18-16-30032-11"}
{"desc":"JA3S: ESF/Golfe2 Google Static",  "ja3_hash":"965ecee2ef1d30d9cf7f26ed94c52e3d","ja3_str":"771,52393,65281-23-35-18-16-11"}
{"desc":"JA3S: NGINX unknown ver",         "ja3_hash":"9a31479427499ded4d3656a260298ec7","ja3_str":"771,49200,65281-11-35-5-16"}
{"desc":"JA3S: NGINX unknown ver",         "ja3_hash":"02096378b3237b7e4b9a2cd08715cf34","ja3_str":"771,49200,65281-5-16"}
{"desc":"JA3S: GitHub.com",                "ja3_hash":"860fcf58fd757e26aa8911e5eaff6b53","ja3_str":"771,49199,65281-0-11-35-5-23-16"}
{"desc":"JA3S: GitHub.com",                "ja3_hash":"af90ea6d911dbfbfea950c0fe512e8c4","ja3_str":"771,49199,65281-0-11-23-16"}
{"desc":"JA3S: Akamai Static",             "ja3_hash":"d552d00679649fd11b6def3e9bdf2429","ja3_str":"771,52392,65281-0-11-35-5-16"}
{"desc":"JA3S: OpenResty BigCommerce",     "ja3_hash":"cbb432e9f6c8c1093ca5bb0639db1f66","ja3_str":"771,52392,65281-0-11-35-16"}