Anyone here knows a program, that can extract the data from the file "web data" from the browser Google Chrome?
1) ChromeAnalysis - can't it
2) Chrome Forensics - can't it.
3) Nirsoft Tools - can't it.
Thanks.
If I recall correctly it is a SQLite database, so you will be able to use one of the free SQLite browsers out on the web .
We wrote code in OSForensics to pull and decode data from the following Chrome files.
History
Bookmarks
Login Data
Cookies
My understanding (maybe wrong?) is that the "web data" file has been replaced by "login data" on newer version of Chrome, at least for password details.
And that if you update Chrome then the data is automatically migrated from "web data" to "login data". So this would be one solution to get the login data, just update Chrome.
Opening up the "web data" file this morning however would seem to indicate that it is still used. It seems to contain a bunch of data related to auto-completion of web forms. e.g. address information and maybe credit card details if the user was silly enough to allow their browser to store all this.
I can also confirm what Shep47 suggested. It is definitely SQlLite format.
Thanks, boys! I know that it's SQLite database. I was just looking for a solution that treats the whole thing automatically (as FoxAnalysis). Web data is the analog of formhistory.sqlite of Firefox. Unfortunately this database is not considered from Chromeanlysis.
Try Web Historian from Mandiant -> http//