Browser Cache / reg keys

[Suzie999]

First I hope this is in the correct location, I apologize if it is not.

Here is what I'm talking about
When a browser, or indeed windows crashes, or power is lost to computer
after a restart of computer or application, the browser offers to restore your pages from the last session.

I'm uncertain if its the same as when you save the pages to open next time.

Here is my question
Where can this information be found? Is it in the registry, in a cookie, cache.. or somewhere else?

Appreciate any help.

[PhilliePhan]

Where can this information be found? Is it in the registry, in a cookie, cache.. or somewhere else?
Appreciate any help.

Hi Suzie,

I use Firefox and, on my XP Box, that info is in Sessionstore.js

I think the full path is something like:

%SystemDrive%\Documents and Settings\<user name>\Application Data\Mozilla\Firefox\Profiles\<random>.default\Sessionstore.js

OR:

%APPDATA%\Mozilla\Firefox\Profiles\<random>.default\Sessionstore.js

Cheers :)
PP

[maninaction]

You can find it in Cache . check it once

[Suzie999]

Thanks for reply

Unfortunately that file, or any .js file is not present on my machine, only
XPC.mfl
XUL.mfl
And neither seen to contain the data I'm looking for.

[flagstar]

Which browser you're using right now?
If you used different browser aside from IE, they usually be located somewhere in their temp directory ((%windir%\Doc~\User\AppData\Temp)) and in their installation directory

You need to unhide in folder option to see the folder you want to see...

[Suzie999]

Thanks, I found the .js file for firefox in my roaming folder.

Appreciate the help, still looking for the same data for IE, and Chrome.

[PhilliePhan]

Thanks, I found the .js file for firefox in my roaming folder.

Appreciate the help, still looking for the same data for IE, and Chrome.

You'll probably find this useful:
Web Browser Session Restore Forensics.pdf

It covers IE and Firefox.

Cheers :)
PP

[Suzie999]

Interesting document.

Thanks for all the help.

[PhilliePhan]

Interesting document.

Thanks for all the help.

You're welcome :)