Skip to content

Amcache Ie Addon Xml

Data Type: amcache_ie_addon_xml
Python Parser: XML

Description

Each row identifies an Internet Explorer add-on found in an Amcache XML report, including its identifier, name, type, and publisher. Use it to inventory browser integrations and pivot on suspicious publishers or identifiers. Report presence does not show that the add-on was enabled or used.

Timeline

Timeline Field Data Field
Description name
Additional Description type
publisher
id

Fields

Output Name Data Type Description
id Python Program identifier
name String Add-on name
type String IE add-on type (e.g., Toolbar, BrowserExtension)
publisher String Add-on publisher name