| Retrieving Chrome’s Temp Files |

Objective

Find content stored in Chrome’s temporary files – in this article we will be finding the bing favicon.

Prerequisites

  • SQLite database browser

Internet Explorer

It might seem weird to discuss IE in an article about Chrome, but it represents a relevant contrast for the different ways web browsers store temporary files. In IE it’s relatively easy to get to the files, since they are stored as flat files in a directory. The trade-off is that it is harder to find what you are searching for.

1) Internet options
2) Browsing history settings

1) Temporary Internet Files
2) View Files

1) “C:\Users\%username%\AppData\Local\Microsoft\Windows\Temporary Internet Files”
2) Internet Address
3) File type

Chrome Settings

If we try and follow similar steps in Chrome we get the following results…



All this accomplishes is a rather cryptic listing of the temporary files. Even worse, in most cases, the inability to actually retrieve the content stored.

SQLite

Chrome stores temporary files in SQLite databases. My preferred program for exploring these databases is the “DB Browser for SQLite“; however, any program with similar features will do.

1) Open Database
2) C:\Users\%username%\AppData\Local\Google\Chrome\User Data\Default
3) “All files” – since Chrome does not use the “.sqlite” extension
4) Temporary file categories

1) Browse Data
2) Execute SQL
3) Database structure (similar to DB Schema)
4) DB Schema
Per wikipedia, “the organization of data as a blueprint of how the database is constructed”

1) Browse Data
2) Type selector for previewing the content
3) Selecting a database cell to view content
4) Content

1) Execute SQL
2) DB Schema
3) SQL Script

SELECT [i].page_url,
       [f].image_data
FROM   icon_mapping [i]
INNER JOIN
       favicon_bitmaps [f]
       ON [i].icon_id = [f].icon_id
WHERE  [i].page_url LIKE '%bing%'
ORDER BY 
[f].width DESC,
[f].height DESC;

4) Results
5) Content type selector
6) Content

Conclusion

While retrieving Chrome’s temporary files is a bit more complex than browsing files in a directory. Once you get used to it, the highly organized structure makes it easier to find what you are searching for.