How to convert browser cache hex dumps back to original file format?

versatile 64-bit multi-user Linux distribution

Moderators: kirk, jamesbond, p310don, JakeSFR, step, Forum moderators

Post Reply
Neo_78
Posts: 407
Joined: Wed Dec 29, 2021 10:45 pm
Has thanked: 232 times
Been thanked: 11 times

How to convert browser cache hex dumps back to original file format?

Post by Neo_78 »

Chrome cache hex dumps can be found in /.cache/google-chrome/Profile 1/Cache/Cache_Data. Unfortunately it is not possible to open the individual cache files with a text editor like Geany. However, the file manager is able to recognize original file formats of the cached content, for example images, pearl scripts etc.

Is there a way to read the content of these hex dumps in clear text or recreate the original file format, for example an image, from the cache dump?

Is xxd the right tool for this?

https://linux.die.net/man/1/xxd

Thanks for your feedback! :thumbup:

fatdoguser
Posts: 176
Joined: Sat Aug 05, 2023 10:54 am
Has thanked: 22 times
Been thanked: 79 times

Re: How to convert browser cache hex dumps back to original file format?

Post by fatdoguser »

@Neo_78

mc is pretty good for peeking into files

Open a terminal, mc, navigate to the file and use F3 (View), F4 (Hex), you see both the hex and any text alongside that that might provide indications of what the file contains. However I don't know what format google use for cached data/files these days, long time since I last looked. There were (are) utilities around that might facilitate what you require such as http://www.nirsoft.net/utils/chrome_cache_view.html

Neo_78
Posts: 407
Joined: Wed Dec 29, 2021 10:45 pm
Has thanked: 232 times
Been thanked: 11 times

Re: How to convert browser cache hex dumps back to original file format?

Post by Neo_78 »

Thanks @fatdoguser. Are you referring to Midnight Commander?

https://midnight-commander.org/

fatdoguser
Posts: 176
Joined: Sat Aug 05, 2023 10:54 am
Has thanked: 22 times
Been thanked: 79 times

Re: How to convert browser cache hex dumps back to original file format?

Post by fatdoguser »

Neo_78 wrote: Sun Mar 03, 2024 12:04 am

Thanks @fatdoguser. Are you referring to Midnight Commander?

https://midnight-commander.org/

Yes. It's available in Fatdog by default. Just open a terminal and type mc <enter>

Neo_78
Posts: 407
Joined: Wed Dec 29, 2021 10:45 pm
Has thanked: 232 times
Been thanked: 11 times

Re: How to convert browser cache hex dumps back to original file format?

Post by Neo_78 »

Thanks, MC is able to display the Chrome cache files both in Ascii and hex format. However, both outputs are pretty cryptic and do not provide meaningful results regarding the original file formats.

The mentioned Nirsoft ChromeCacheView tool appears to be able to make the desired binary file conversion back to the original state:

https://www.nirsoft.net/utils/chrome_cache_view.html

But from the tool description I understand that it is only available for Windows:

"This utility works on any version of Windows, starting from Windows 2000, and up to Windows 7/8/2008/10/11."

Is there an alternative tool available in FatDog that can achieve the same result?

fatdoguser
Posts: 176
Joined: Sat Aug 05, 2023 10:54 am
Has thanked: 22 times
Been thanked: 79 times

Re: How to convert browser cache hex dumps back to original file format?

Post by fatdoguser »

@Neo_78 Control Panel, System, SFS Manager ... has 'wine' as one of the available options (that enables you to run Windows programs). I believe that can run chromecacheviewer. I personally don't know of a Linux equivalent, but that's not saying there aren't equivalents/similar. You used to be able to enter a url of cache:cache or about:cache as a chrome URL, but that no longer seems to work.

Neo_78
Posts: 407
Joined: Wed Dec 29, 2021 10:45 pm
Has thanked: 232 times
Been thanked: 11 times

Re: How to convert browser cache hex dumps back to original file format?

Post by Neo_78 »

Correct, Google unfortunately removed a number of cache analysis functions... :?

Post Reply

Return to “FatDog64”