Page 1 of 1

How to convert browser cache hex dumps back to original file format?

Posted: Sat Mar 02, 2024 10:26 pm
by Neo_78

Chrome cache hex dumps can be found in /.cache/google-chrome/Profile 1/Cache/Cache_Data. Unfortunately it is not possible to open the individual cache files with a text editor like Geany. However, the file manager is able to recognize original file formats of the cached content, for example images, pearl scripts etc.

Is there a way to read the content of these hex dumps in clear text or recreate the original file format, for example an image, from the cache dump?

Is xxd the right tool for this?

https://linux.die.net/man/1/xxd

Thanks for your feedback! :thumbup:


Re: How to convert browser cache hex dumps back to original file format?

Posted: Sat Mar 02, 2024 11:16 pm
by fatdoguser

@Neo_78

mc is pretty good for peeking into files

Open a terminal, mc, navigate to the file and use F3 (View), F4 (Hex), you see both the hex and any text alongside that that might provide indications of what the file contains. However I don't know what format google use for cached data/files these days, long time since I last looked. There were (are) utilities around that might facilitate what you require such as http://www.nirsoft.net/utils/chrome_cache_view.html


Re: How to convert browser cache hex dumps back to original file format?

Posted: Sun Mar 03, 2024 12:04 am
by Neo_78

Thanks @fatdoguser. Are you referring to Midnight Commander?

https://midnight-commander.org/


Re: How to convert browser cache hex dumps back to original file format?

Posted: Sun Mar 03, 2024 9:31 am
by fatdoguser
Neo_78 wrote: Sun Mar 03, 2024 12:04 am

Thanks @fatdoguser. Are you referring to Midnight Commander?

https://midnight-commander.org/

Yes. It's available in Fatdog by default. Just open a terminal and type mc <enter>


Re: How to convert browser cache hex dumps back to original file format?

Posted: Sun Mar 03, 2024 3:50 pm
by Neo_78

Thanks, MC is able to display the Chrome cache files both in Ascii and hex format. However, both outputs are pretty cryptic and do not provide meaningful results regarding the original file formats.

The mentioned Nirsoft ChromeCacheView tool appears to be able to make the desired binary file conversion back to the original state:

https://www.nirsoft.net/utils/chrome_cache_view.html

But from the tool description I understand that it is only available for Windows:

"This utility works on any version of Windows, starting from Windows 2000, and up to Windows 7/8/2008/10/11."

Is there an alternative tool available in FatDog that can achieve the same result?


Re: How to convert browser cache hex dumps back to original file format?

Posted: Sun Mar 03, 2024 7:03 pm
by fatdoguser

@Neo_78 Control Panel, System, SFS Manager ... has 'wine' as one of the available options (that enables you to run Windows programs). I believe that can run chromecacheviewer. I personally don't know of a Linux equivalent, but that's not saying there aren't equivalents/similar. You used to be able to enter a url of cache:cache or about:cache as a chrome URL, but that no longer seems to work.


Re: How to convert browser cache hex dumps back to original file format?

Posted: Tue Mar 05, 2024 9:30 pm
by Neo_78

Correct, Google unfortunately removed a number of cache analysis functions... :?