Unknown user agent fragments

The main web browser detection work is done based on the User Agent provided by web browsers.

For the most part, between common sense and a Google search or two it's possible to figure out what 90% of the various User Agent fragments mean (and thus what should be displayed for users when they come along).

But every now and again I encounter User Agent fragments that I can't figure out, nor does it seem anyone else on the internet can figure out.

So since I'm regularly looking at them and I want to share the knowledge, I figured this would be a good place to post all the ones that I can't figure out and perhaps someone out there in Internet Land knows what it means or can figure it out.

So, if you're trying to figure out "what does this user agent fragment mean"... then you've come to the right spot. If you can tell me what any of these mean, I'll happily give you credit for it.

New feature: Asking our visitors..!

There's a few user agent fragments that continue elude us in their meaning, and no amount of web searches seem to shed light on them... so to help find out what these fragments are, we've started asking visitors who have those fragments in their user agents. The homepage of whatismybrowser.com will now show a prompt to users who's useragents contain any of a certain list of fragments.

What better way to understand more about an unknown fragment than to ask a person who has a browser with that fragment present in their user agent, right?! Some people may not be able to give any insight, but as there's a few which keep appearing, maybe by asking users if they know anything about it we might learn something. We'll keep you posted on our progress with it.

Facebook App User Agent fragments

The Facebook App (on both iOS and Android) contains a number of known and unknown fragments. We would love it if anyone can shed light on what the unknown ones refer to.

Here are two recent (September 2019) Facebook user agents, for iPhone and Android - version 238:

iOS

Mozilla/5.0 (iPhone; CPU iPhone OS 12_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [FBAN/FBIOS;FBAV/238.0.0.50.115;FBBV/171859800;FBDV/iPhone9,3;FBMD/iPhone;FBSN/iOS;FBSV/12.4.1;FBSS/2;FBID/phone;FBLC/en_US;FBOP/5;FBRV/172564136;FBCR/AT&T]

Android

Mozilla/5.0 (Linux; Android 9; SM-G960U Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.132 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/238.0.0.41.116;]

Fragment Meaning Example Value
FBAV Facebook App Version FBAV/114.0.0.21.71;
FBAN Appears to indicate the platform? Much less common on recent versions of Android but still present for iOS?
  • FBAN/FBIOS
  • FBAN/FB4A
  • FBAN/GamesWindowsDesktopApp
FBSN The following fragment indicates that it's on iOS - but FBSN doesn't appear for Android. FBSN/iOS
FBDV Device - only seems to be present in the iOS App. FBDV/iPhone9,3
FBMD "Main Device"? - Similar to "FBDV" but less info. only seems to be present in the iOS App. FBMD/iPhone
FBSV Coincides with the operating system version. FBSV/12.4.1
FBID Indicates device type, but only appears on iOS versions. update: the desktop seems to refer to "Windows Desktop"
  • FBID/phone
  • FBID/tablet
  • FBID/desktop
FBSS Unknown FBSS/2
FBOP Unknown FBOP/5
FB_IAB Interactive Advertising Bureau (https://www.iab.com/). Only appears on Android devices? FB_IAB/FB4A
FBLC Language Code FBLC/en_US
FBBV An internal build version? Only present on iOS. FBBV/171859800
FBRV Possibly "Revision" of the code? Only present on iOS. FBRV/172564136
FBCR The mobile carrier in use - eg AT&T. May not always be present. FBCR/AT&T
FB4A Might stand for the American Association of Advertising Agencies (4A’s). Ref. FB4A

April 2024: Thanks to Ivan for help with the FB_IAB and FB4A fragments.

Yandex Browser's "Yowser" fragment

Yandex's browser uses the "YaBrowser" fragment to indicate that it's the Yandex Browser (eg. YaBrowser/17.6.1.749), however we've seen lots of these user agents with another fragment: "Yowser", (eg. Yowser/2.5). We're not sure what Yowser refers to. It sounds like a portmanteau of "Yandex" and "Browser"... however the low version numbers (eg "2.5") imply that it's not referring to the browser itself but rather something else. Do you know what Yowser means in the Yandex user agent? Let us know!

Operating Platform/Vendor Fragments

Update: March 2013 - Confirmed that these four character fragments are actually Windows Vendor fragments and not anything else.

Update 2013/2014: We are continually updating these with new ones.

I have finally satisfied my strict burden of proof regarding these fragments. I now understand and can prove that these are "vendor id" or "OEM id" strings.

Recently, a helpful user contacted me to suggest that the MATBJS string may be related to the GreenBrowser browser, as he had noticed it in his own user agent when using GreenBrowser. I investigated, including installing a copy of it on a virtual machine, but my copy of GreenBrowser didn't come up with the MATBJS string. Since I'd finally gotten in touch with someone who actually had one of these strings in their user agent, I pressed on and asked the helpful soul to search their registry for the string (if they were comfortable doing that!). He did, and found it appeared in a special place in the registry dealing with common OS information.

He sent me a screenshot, here is the relevant part:

Screenshot of Windows Registry showing MATBJS is an OEMID string

You can see "MATBJS" in the "OEMID" key (OEM meaning "Original Equipment Manufacturer"). To me, this confirms that MATBJS and most if not all of the similar strings are also Manufacturer IDs. I had found one or two posts from years ago on online forums which suggested this, but I aim to have the detection on this site be as authoritive as possible, so I wasn't just going to take a guess on it based on one person's opinion on a forum, especially on such a popular fragment.

Since I hadn't looked at this question in a while, reinvigorated with this bit of information, I then took to searching the web for more hints about the other strings. This is what I have come up with. Note that the strings that end in JS are almost certainly related to the ones that don't and so I have grouped them together.

FragmentDescription & opinion
MDDR / MDDRJS Dell
MDDC / MDDCJS Dell - "http://dell.msn.com/?pc=MDDC" is a default search string
MDDS / MDDSJS Dell - This thread shows a log file linking "MDDSJS" and Dell
MAAR / MAARJS Acer
MASP / MASPJS Sony - This thread shows a log file linking "MASPJS" and Sony
MASA / MASAJS Sony - This thread shows a log file linking "MASAJS" and Sony
MAAU Asus
NP06 / NP07 / NP08 / NP09 Asus - This thread shows a log file linking "NP06" to Asus
ASJB / ASU2 / ASU2JS Asus - This thread shows a log file linking "ASJB" and Asus
MASM / MASMJS Samsung
MALC / MALCJS Lenovo
MALN / MALNJS Lenovo
LCJB Lenovo - This thread shows a log file linking "LCJB" and Lenovo
LEN2 Lenovo
MIDP This is not a Operating Platform fragment; it indicates "Mobile Information Device Profile"
MATM / MATMJS Toshiba - This thread shows a log file linking "MATMJS" and Toshiba
MATB / MATBJS Toshiba
MATP / MATPJS Toshiba - This thread shows a log file linking "MATPJS" and Toshiba
TNJB Toshiba - This thread shows a log file linking "TNJB" and Toshiba
TAJB Toshiba
MAMD Medion - This thread shows a log file linking "MAMD" and Medion
MAMI / MAMIJS MSI - This thread shows a log file linking "MAMIJS" and MSI
MAM3 MSI - This bug report shows log files linking "MAM3" and MSI
MAEM Currently unknown
MAGW / MAGWJS Gateway - This thread shows a log file linking "MAGWJS" and Gateway
MASE / MASEJS Sony - This thread shows a log file linking "MASEJS" and Sony
MANM / MANMJS Hyrican
MAFS / MAFSJS Fujitsu - This thread shows a log file linking "MAFSJS" and Fujitsu
MASB / MASBJSDefault "Microsoft System Builder" token. Reference
MAPB / MAPBJSCurrently unknown
CPDTDF Compaq - "http://compaq-desktop.us.msn.com/?pc=CPDTDF" is a default search string
CPNTDF Compaq - "http://compaq-notebook.us.msn.com/?pc=CPNTDF is a default search string
CMNTDF / CMDTDFJS Compaq
HPCMHP Hewlett Packard
HPNTDF / HPNTDFJS Hewlett Packard
HPDTDF / HPDTDFJS Hewlett Packard

A big thanks to "Dr. Omni" for contacting me about MATBJS and re-sparking the hunt!

Thanks to Andrew for the "MATP" fragment

Thanks to Calvin for the "MASMJS" fragment

Thanks to Donald for the "MALNJS" fragment

Thanks to JB for the "FSJB" fragment

Do you know what any of the unknown fragments mean? Here are sample user agents that have the strings in them:

MASP - Solved: It's Sony

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; BTRS129225; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.2; MASP)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; MASP; Avant Browser)

MAAR - Solved: It's Acer

  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 3.5.30729; Media Center PC 6.0; BRI/2; MAAR; .NET4.0C; .NET4.0E; InfoPath.3)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; GTB7.3; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MAAR; .NET4.0C; .NET4.0E)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MAAR; .NET4.0C; .NET4.0E; Zune 4.7)

MATM - Solved: It's Toshiba

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATM)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; MATM)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; InfoPath.3; MATM)

MATP - Solved: It's Toshiba

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MATP; MATP)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MATP)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATP; chromeframe/21.0.1180.79)

MASM - Solved - It's Samsung

  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MASM; .NET4.0C; .NET4.0E)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; MASM; .NET4.0C; InfoPath.3; .NET4.0E)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; BRI/1; MASM)

MDDC - Solved: It's Dell

  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDC)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; BTRS86028; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MDDC; .NET CLR 1.1.4322; .NET4.0C; BRI/1; .NET4.0E)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MDDC; .NET4.0C)

MANM - Solved: It's Hyrican

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; InfoPath.2; MANM)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; MANM)

MALC - Solved: It's Lenovo

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MALC)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALC)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)

MAFS - Solved: It's Fujitsu

  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; MAFS; .NET4.0C; .NET4.0E)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MAFS)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MAFS; .NET CLR 1.1.4322; AskTbORJ/5.15.1.22229)

MAMD - Solved: It's Medion

  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB7.3; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MAMD; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; .NET4.0C)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MAMD)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MAMD),gzip(gfe) (via translate.google.com)

MAMI - Solved; It's MSI

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAMI)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; GTB7.2; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; MAMI)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; FunWebProducts; MAMI)

MDDR - Solved: It's Dell

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MDDRJS)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MDDRJS)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDRJS)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MDDR; MS-RTC LM 8)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; MDDR; InfoPath.2; MS-RTC LM 8; .NET4.0E)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/5.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.21022; .NET CLR 3.5.30729; MDDR; .NET CLR 3.0.30729; .NET4.0C)

MASM/MASMJS - Solved: It's Samsung

  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MASMJS)
  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MASMJS; WebView/1.0)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; BRI/2; MASM; .NET4.0C; InfoPath.2)

MDDC/MDDCJS - Solved: It's Dell

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MDDCJS)
  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDCJS)

MALC/MALCJS - Solved: It's Lenovo

  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MALCJS)
  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MALCJS)

MAFSJS - Solved: It's Fujitsu

  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; MAFS; .NET4.0C; .NET4.0E)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MAFS)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MAFS; .NET CLR 1.1.4322; A

MAMIJS - Solved: It's MSI

  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAMIJS)

NP02 / NP06 / NP07 / NP08 / NP09 - Solved: These are for Asus

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP06)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP06; chromeframe/20.0.1132.47)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/5.0; SLCC2; Media Center PC 6.0; NP06; .NET4.0C)

Update: NP02, NP07 and NP08 are now being seen in user agents as well.

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP02)
  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; Avant Browser; NP02)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP02; Avant Browser; Sleipnir/2.9.9)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP02; Avant Browser; SlimBrowser)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; NP07; NP07; Browzar)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP08; NP08; MAAU)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; NP08; .NET4.0C; .NET4.0E; NP08; MAAU; Creative AutoUpdate v1.41.06)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP08; NP08; MAAU)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP08; NP08; MAAU),gzip(gfe) (via translate.google.com)

Update Feb 2014: I'm now noticing it with IE 10:

  • Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAAU; NP09)

LEN/LEN2 - Solved: It's Lenovo

  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; LEN2)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; LEN2)
  • Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; LEN2; chromeframe/24.0.1312.52)

As discussed, the above fragments are all referred to as "operating platform" fragments.

MS STORE DMC2.x

This is seen in User Agent strings like:

  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MS STORE DMC2.6.3411.2)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; BRI/1; MS STORE DMC2.6.3411.2)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; MS STORE DMC2.9.4919.1; chromeframe/20.0.1132.57)

This first appeared in February 2012.

Update: November 2023. This has been identified as being Microsoft Store Download Manager Component. Thanks to Jimbo for the heads up on this one!

IPH

This is seen in User Agent strings like:

  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET4.0C; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1; InfoPath.3; .NET4.0E; IPH 1.1.21.4019)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 1.0.3705; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E; IPH 1.1.21.4019; chromeframe/24.0.1312.52)

The obvious guess would be that it's iPhone; but note that they're all on Windows NT with MSIE 8, so it's not that. My guess is that it's either some kind of iPhone add on utility or more likely some kind of IP Phone/handset addition. But which one?!

Do you know what IPH means in a User Agent? Contact me.

SRC 2.7.1 E1

This is seen in User Agent strings like:

  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; MS-RTC S; SRC 2.7.1 E1; InfoPath.2; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MS-RTC LM 8)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2; MS-RTC S; SRC 2.7.1 E1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MS-RTC LM 8)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; MS-RTC S; SRC 2.7.1 E1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; MS-RTC LM 8; .NET4.0C; .NET4.0E)

All the instances of this that I've seen have been for MSIE 7 on Windows XP. I also notice that they're always grouped right next to MS-RTC S which is a part of Microsoft Live Meeting. Perhaps it's something that gets installed at the same time as Live Meeting.

Hemit

This appears without a version number, typically right at the end of the user agent. For example:

  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; .NET CLR 1.1.4322; Hemit)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; .NET CLR 1.1.4322; .NET CLR 2.0.50727; Hemit)
  • Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; .NET CLR 1.1.4322; Hemit)

Do you know what any of these mean? Contact me.

F9J

A quick Google for "F9J" strongly suggests that it refers to an Asus F9J laptop; however I've only ever seen this string in user agents which also have the "CMDTDFJS" string; which I've previously identified as relating to Compaq devices.

Obviously these are completely different manufactorers, so I can't explain this at this point. I have thousands and thousands of entries in my database for variations of this user agent, so I don't believe it's a simple quirk in someone's user agent (as which happens occasionally).

Does anyone have any ideas about this?

ACHEETAHI

I've noticed a fragment similar to: ACHEETAHI/2100502020.

Google reveals there's a company called "CheetahPhone" but it doesnt seem related.

It seems to be an Android related thing:

  • Mozilla/5.0 (Linux; Android 4.4.4; Nexus 4 Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36 ACHEETAHI/2100050034
  • Mozilla/5.0 (Linux; Android 4.4.2; SM-N900T Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36 ACHEETAHI/2100050074
  • Mozilla/5.0 (Linux; Android 5.0.2; XT1068 Build/LXB22.99-16.3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/46.0.2490.76 Mobile Safari/537.36 ACHEETAHI/2100502012
  • Mozilla/5.0 (Linux; Android 5.0.1; Lenovo TAB 2 A10-70F Build/LRX21M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/44.0.2403.117 Safari/537.36 ACHEETAHI/2100502008
  • Mozilla/5.0 (Linux; Android 4.4.4; XT1032 Build/KXB21.14-L1.40) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36 ACHEETAHI/2100502020
  • Mozilla/5.0 (Linux; Android 4.4.2; HTC Desire 610 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36 ACHEETAHI/2100050072

Any ideas what this is? Because it's called "cheetah" it suggests it might be some kind of internet speed enhancer.

Update: June 2017. This has been identified as being added by Cheetah Mobile. Thanks to Thomas M for the heads up on this one!

Creative ZENcast

Fragments like Creative ZENcast v1.02.12 appear in lots of user agents; they're obviously related to Creative's "ZENcast" software, but it doesn't seem to actually be from the ZENcast app itself; there are thousands of variations of this user agent; some look like Firefox, some look like Internet Explorer etc.

My hunch is that ZENcast has appended its string to the main web browser's user agent, so that when you see a user agent with "Creative ZENcast v1.02.12" in it, it is actually the normal web browser but ZENcast is trying to advertise that it's been installed on this computer. This was a somewhat common practice in the 2000s; unrelated software (or even hardware drivers!) adding fragments to the user agent.

If this was just seen with Internet Explorer user agents I'd conclude that this is exactly what it is (it's common that the software would only change Internet Explorer's user agent (done fairly easily via the Windows Registry), but the fact that it appears in Firefox user agents too suggests that it's still possibly something else (or that the ZENcast developers went to a lot of trouble to also override Firefox's user agent too!).

If anyone can confirm what causes this fragment to appear in user agents, I'd love to know! For now, I'm detecting it as an add-on.

  • Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4 Creative ZENcast v1.02.12
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; Creative ZENcast v1.02.08)
  • Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Creative ZENcast v1.01.06)