Browser

Chrome Profile Stores

Chrome profile directories can contain saved passwords, cookies, local encryption state, autofill data, payment data, and session artifacts.

Metadata

  • id: browser.chrome.profile-stores
  • category: browser
  • sensitivity: critical
  • subcategory: chrome
  • artifact types: password-store, cookie, session, configuration
  • tags: browser, chrome, credentials, cookies

Path Matchers

PathKindPlatforms
%LOCALAPPDATA%\Google\Chrome\User Data\directorywindows
$HOME/.config/google-chrome/directorylinux
$HOME/Library/Application Support/Google/Chrome/directorymacos

Credential Types

  • saved-password
  • session-cookie

Impact

  • credential_access

References

On this page