Chromium Downloads

Overview

Evidence: Chromium Downloads Description: Collect Chromium Downloads Category: Browser Platform: Linux Short Name: cmdwnlds Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Chromium downloads include file paths, times, and referrers, enabling analysis of file ingress events.

Data Collected

This collector gathers structured data about downloads.

Chromium Downloads Data

Field	Description	Example
ID	Primary key (auto-increment)	1
CurrentPath	Temporary/current path	/home/user/Downloads/file.exe
TargetPath	Final target path	/home/user/Downloads/file.exe
StartTime	Download start time	2023-10-15 14:30:25
EndTime	Download finish time	2023-10-15 14:31:10
DangerType	Browser risk classification	0
Opened	Opened after download	0
Referrer	Referrer URL	https://example.com
URL	Download URL	https://example.com/file.exe
HistoryFilePath	Source database path	/home/user/.config/chromium/Default/History

Collection Method

This collector parses the necessary data from the browser_downloads table.

Usage

Correlate with other evidence to determine delivery mechanisms and user interaction.

Notes

Executables may be modified by security tools; verify on disk.