{
	"id": "14c7b14e-eee1-4bba-ae0f-b24ac0c10652",
	"created_at": "2026-04-06T00:09:19.873299Z",
	"updated_at": "2026-04-10T03:36:47.991007Z",
	"deleted_at": null,
	"sha1_hash": "264fb47c4a290dd0b87c4b11d3d488fea6e999e7",
	"title": "View Google Chrome history on Windows",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 94107,
	"plain_text": "View Google Chrome history on Windows\r\nArchived: 2026-04-05 18:45:26 UTC\r\n \r\nChromeHistoryView v1.53 - View the browsing history of Chrome Web browser on Windows 11 / 10\r\n/ 7 / 8 / Vista\r\nCopyright (c) 2011 - 2023 Nir Sofer\r\nSee Also\r\nBrowsingHistoryView - View the browsing history of popluar Web browsers - Chrome, IE, Firefox, and\r\nSafari.\r\nDescription\r\nChromeHistoryView is a small utility that reads the history data file of Google Chrome Web browser, and displays\r\nthe list of all visited Web pages in the last days. For each visited Web page, the following information is displayed:\r\nURL, Title, Visit Date/Time, Number of visits, number of times that the user typed this address (Typed Count),\r\nReferrer, and Visit ID.\r\nYou can select one or more history items, and them export them into html/xml/csv/text file, or copy the\r\ninformation to the clipboard and paste it into Excel.\r\nYou can also use this tool to read the history of other Chromium-based Web browsers, like Microsoft Edge, Opera,\r\nVivaldi, and others...\r\nVersions History\r\nVersion 1.53\r\nUpdated to read the history file of the latest Opera versions.\r\nVersion 1.52\r\nIf you try to delete history records while the history file is locked by the Web browser,\r\nChromeHistoryView now displays the appropriate message.\r\nVersion 1.51\r\nUpdated to work much faster when there are many Chrome history records.\r\nFixed a few high DPI mode issues.\r\nVersion 1.50\r\nAdded 'Visit Duration' column.\r\nImproved the 'Referrer' column in new versions of Chrome.\r\nVersion 1.46\r\nUpdated to read the history database file of the latest versions of Chrome Web browser.\r\nVersion 1.45\r\nhttps://www.nirsoft.net/utils/chrome_history_view.html\r\nPage 1 of 7\n\nYou can now choose the desired encoding (ANSI, UTF-8, UTF-16) to save the csv/xml/text/html\r\nfiles. (Options -\u003e Save File Encoding )\r\nUpdated to work properly in high DPI mode.\r\nVersion 1.42\r\nFixed bug: ChromeHistoryView crashed if there was an history record with missing URL.\r\nVersion 1.41\r\nAdded 'Edge History File' button to the 'Advanced Options' window. When you click this button,\r\nChromeHistoryView automatically fills the history file of Chromium-based Edge Web browser, and\r\nthen you can view the history of Edge Web browser.\r\nVersion 1.40\r\nAdded new option: 'Delete Selected History Records', which allows you to select one or more items\r\nand then delete the Chrome history records.\r\nAdded 'History File' column.\r\nVersion 1.37\r\nWhen pressing F5 (Refresh) the refresh process is smoother, keeping the selected item and scroll\r\nposition.\r\nVersion 1.36\r\nAdded 'Add Header Line To CSV/Tab-Delimited File' option (Turned on by default).\r\nVersion 1.35\r\nAdded 'Quick Filter' feature (View -\u003e Use Quick Filter or Ctrl+Q). When it's turned on, you can\r\ntype a string in the text-box added under the toolbar and ChromeHistoryView will instantly filter the\r\nhistory table, showing only items that contain the string you typed.\r\nVersion 1.32\r\nAdded 'Auto Size Columns+Headers' option.\r\nVersion 1.31\r\nYou can now specify the base User Data folder of Chrome (e.g:\r\nC:\\Users\\user1\\AppData\\Local\\Google\\Chrome\\User Data ) in 'Advanced Options' window for\r\nloading the history of all profiles.\r\nVersion 1.30\r\nAdded new columns: 'Transition Type' and 'Transition Qualifiers'. You can read about the meaning\r\nof these fields here and here.\r\nVersion 1.25\r\nAdded new buttons to easily choose the history file of Chrome-base Web browsers: 'Vivaldi History\r\nFile', 'Yandex History File' (Advanced Options window).\r\nVersion 1.22\r\nAdded 'URL Length' column.\r\nVersion 1.21\r\nAdded 'Opera History File' button to the 'Advanced Options' window, which allows you to easily\r\nuse this tool to view the history of Opera Web browser. (Opera is now based on the code of Chrome\r\nWeb browser...)\r\nVersion 1.20\r\nChromeHistoryView now displays the history of all Chrome profiles.\r\nhttps://www.nirsoft.net/utils/chrome_history_view.html\r\nPage 2 of 7\n\nAdded 'Profile' column.\r\nYou can now specify environment variables in the history file on the 'Advanced options' window,\r\nfor example: %LocalAppData%\\Google\\Chrome\\User Data\\default\\History\r\nVersion 1.17\r\nFixed to display local date/time values according to daylight saving time settings.\r\nVersion 1.16\r\nYou can now click the URL in the HTML report to open the URL in your Web browser.\r\nVersion 1.15\r\nAdded new command-line options: /UseHistoryFile, /HistoryFile, /UseVisitTimeFilter,\r\n/VisitTimeFilter, /UseTimeRange, /TimeRangeFrom, /TimeRangeTo\r\nVersion 1.11\r\nFixed bug: ChromeHistoryView failed to load the history if the history path contained non-English\r\ncharacters.\r\nVersion 1.10\r\nAdded option to view only the URLs visited in the specified time range. (In Advanced Options\r\nwindow)\r\nAdded option to view only the URLs visited in the last xx days. (In Advanced Options window)\r\nVersion 1.05\r\nFixed ChromeHistoryView to work properly when Chrome is opened and locks the history file.\r\nVersion 1.00 - First release.\r\nUsing ChromeHistoryView\r\nChromeHistoryView doesn't require any installation process or additional DLL files. In order ti start using it,\r\nsimply copy the executable file (ChromeHistoryView.exe) to any folder you like, and run it.\r\nAfter you run it, the main window displays the list of visited Web pages loaded from the history file of Chrome\r\nWeb browser. If you want to load the history file of another profile, simply use the Advanced Options window\r\nhttps://www.nirsoft.net/utils/chrome_history_view.html\r\nPage 3 of 7\n\n(F9) to choose another history file.\r\nYou can select one or more history items, and then export the list into html/xml/csv/text file ('Save Selected Items'\r\noption - Ctrl+S). You can also copy the selected items to the clipboard, and then paste them to Excel or to\r\nOpenOffice spreadsheet.\r\nCommand-Line Options\r\n/stext \u003cFilename\u003e Save the Chrome browsing history into a regular text file.\r\n/stab \u003cFilename\u003e Save the Chrome browsing history into a tab-delimited text file.\r\n/scomma \u003cFilename\u003e Save the Chrome browsing history into a comma-delimited text file (csv).\r\n/stabular \u003cFilename\u003e Save the Chrome browsing history into a tabular text file.\r\n/shtml \u003cFilename\u003e Save the Chrome browsing history into HTML file (Horizontal).\r\n/sverhtml \u003cFilename\u003e Save the Chrome browsing history into HTML file (Vertical).\r\n/sxml \u003cFilename\u003e Save the Chrome browsing history into XML file.\r\n/sort \u003ccolumn\u003e\r\nThis command-line option can be used with other save options for sorting by\r\nthe desired column. If you don't specify this option, the list is sorted according\r\nto the last sort that you made from the user interface. The \u003ccolumn\u003e parameter\r\ncan specify the column index (0 for the first column, 1 for the second column,\r\nand so on) or the name of the column, like \"Title\" and \"URL\". You can specify\r\nthe '~' prefix character (e.g: \"~Visited On\") if you want to sort in descending\r\norder. You can put multiple /sort in the command-line if you want to sort by\r\nmultiple columns.\r\nExamples:\r\nChromeHistoryView.exe /shtml \"f:\\temp\\history.html\" /sort 2 /sort ~1\r\nChromeHistoryView.exe /shtml \"f:\\temp\\history.html\" /sort \"URL\" /sort\r\n\"Visited On\"\r\n/nosort\r\nWhen you specify this command-line option, the list will be saved without any\r\nsorting.\r\n/UseHistoryFile \u003c0 | 1\u003e\r\nIf this value is set to 1, the history file specified in the /HistoryFile parameter\r\nwill be used.\r\n/HistoryFile \u003cFilename\u003e Specifies the history file to load.\r\nExample:\r\nChromeHistoryView.exe /UseHistoryFile 1 /HistoryFile \"C:\\Documents and\r\nhttps://www.nirsoft.net/utils/chrome_history_view.html\r\nPage 4 of 7\n\nSettings\\admin\\Local Settings\\Application Data\\Google\\Chrome\\User\r\nData\\Default\\History\"\r\n/UseVisitTimeFilter \u003c0 | 1\u003e If this value is set to 1, the filter of /VisitTimeFilter parameter will be used.\r\n/VisitTimeFilter \u003cDays\u003e Loads the history items only from the last xx days.\r\n/UseTimeRange \u003c0 | 1\u003e\r\nIf this value is set to 1, /TimeRangeFrom and /TimeRangeTo parameters will\r\nbe used.\r\n/TimeRangeFrom \u003cTime\u003e\r\n/TimeRangeTo \u003cTime\u003e\r\nSpecifies the time range to load the history.\r\nExample:\r\nChromeHistoryView.exe /UseTimeRange 1 /TimeRangeFrom \"15-02-2012\r\n10:50:00\" /TimeRangeTo \"16-02-2012 12:50:00\"\r\nRead more about using ChromeHistoryView\r\nDelete Chrome history records with ChromeHistoryView\r\nTranslating ChromeHistoryView to other languages\r\nIn order to translate ChromeHistoryView to other language, follow the instructions below:\r\n1. Run ChromeHistoryView with /savelangfile parameter:\r\nChromeHistoryView.exe /savelangfile\r\nA file named ChromeHistoryView_lng.ini will be created in the folder of ChromeHistoryView utility.\r\n2. Open the created language file in Notepad or in any other text editor.\r\n3. Translate all string entries to the desired language. Optionally, you can also add your name and/or a link to\r\nyour Web site. (TranslatorName and TranslatorURL values) If you add this information, it'll be used in the\r\n'About' window.\r\n4. After you finish the translation, Run ChromeHistoryView, and all translated strings will be loaded from the\r\nlanguage file.\r\nIf you want to run ChromeHistoryView without the translation, simply rename the language file, or move it\r\nto another folder.\r\nLicense\r\nThis utility is released as freeware. You are allowed to freely distribute this utility via floppy disk, CD-ROM,\r\nInternet, or in any other way, as long as you don't charge anything for this. If you distribute this utility, you must\r\ninclude all files in the distribution package, without any modification !\r\nDisclaimer\r\nhttps://www.nirsoft.net/utils/chrome_history_view.html\r\nPage 5 of 7\n\nThe software is provided \"AS IS\" without any warranty, either expressed or implied, including, but not limited to,\r\nthe implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any\r\nspecial, incidental, consequential or indirect damages due to loss of data or any other reason.\r\nFeedback\r\nIf you have any problem, suggestion, comment, or you found a bug in my utility, you can send a message to\r\nnirsofer@yahoo.com\r\nChromeHistoryView is also available in other languages. In order to change the language of ChromeHistoryView,\r\ndownload the appropriate language zip file, extract the 'chromehistoryview_lng.ini', and put it in the same folder\r\nthat you Installed ChromeHistoryView utility.\r\nLanguage Translated By Date Version\r\nArabic Abu Rehaam 27/01/2022 1.50\r\nBrazilian Portuguese Paulo Guzmán 06/09/2018 1.35\r\nBulgarian Nider Karlov 25/11/2020 1.42\r\nDutch Jan Verheijen 17/11/2023 1.53\r\nFrench Anthony MAGNAN (Netbew) 08/02/2022 1.50\r\nFrench Largo 16/11/2023 1.53\r\nGerman «Latino» 21/04/2025 1.53\r\nGreek geogeo.gr 29/04/2018 1.35\r\nHungarian Timinoun 03/08/2024 1.53\r\nItalian Alessandro Viscone e bovirus 20/10/2022 1.52\r\nJapanese taka 23/11/2025 1.53\r\nLithuanian Mantas Garuckas 03/09/2019 1.37\r\nPersian ZendegiyeSabz 28/11/2023 1.53\r\nRomanian Jaff (Oprea Nicolae) 01/01/2019 1.35\r\nRussian Dmitry Yerokhin 19/10/2022 1.52\r\nSimplified Chinese DickMoore 28/02/2024 1.53\r\nSimplified Chinese bonian 07/12/2019 1.40\r\nSlovak František Fico 13/12/2023 1.53\r\nhttps://www.nirsoft.net/utils/chrome_history_view.html\r\nPage 6 of 7\n\nSpanish Washington Guerrero 22/07/2012 1.00\r\nTraditional Chinese Danfong Hsieh 20/10/2022 1.52\r\nTurkish HARUN ARI 16/11/2023 1.53\r\n  \r\nSource: https://www.nirsoft.net/utils/chrome_history_view.html\r\nhttps://www.nirsoft.net/utils/chrome_history_view.html\r\nPage 7 of 7",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://www.nirsoft.net/utils/chrome_history_view.html"
	],
	"report_names": [
		"chrome_history_view.html"
	],
	"threat_actors": [
		{
			"id": "9f101d9c-05ea-48b9-b6f1-168cd6d06d12",
			"created_at": "2023-01-06T13:46:39.396409Z",
			"updated_at": "2026-04-10T02:00:03.312816Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"CHROMIUM",
				"ControlX",
				"TAG-22",
				"BRONZE UNIVERSITY",
				"AQUATIC PANDA",
				"RedHotel",
				"Charcoal Typhoon",
				"Red Scylla",
				"Red Dev 10",
				"BountyGlad"
			],
			"source_name": "MISPGALAXY:Earth Lusca",
			"tools": [
				"RouterGod",
				"SprySOCKS",
				"ShadowPad",
				"POISONPLUG",
				"Barlaiy",
				"Spyder",
				"FunnySwitch"
			],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "18a7b52d-a1cd-43a3-8982-7324e3e676b7",
			"created_at": "2025-08-07T02:03:24.688416Z",
			"updated_at": "2026-04-10T02:00:03.734754Z",
			"deleted_at": null,
			"main_name": "BRONZE UNIVERSITY",
			"aliases": [
				"Aquatic Panda",
				"Aquatic Panda ",
				"CHROMIUM",
				"CHROMIUM ",
				"Charcoal Typhoon",
				"Charcoal Typhoon ",
				"Earth Lusca",
				"Earth Lusca ",
				"FISHMONGER ",
				"Red Dev 10",
				"Red Dev 10 ",
				"Red Scylla",
				"Red Scylla ",
				"RedHotel",
				"RedHotel ",
				"Tag-22",
				"Tag-22 "
			],
			"source_name": "Secureworks:BRONZE UNIVERSITY",
			"tools": [
				"Cobalt Strike",
				"Fishmaster",
				"FunnySwitch",
				"Spyder",
				"njRAT"
			],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "6abcc917-035c-4e9b-a53f-eaee636749c3",
			"created_at": "2022-10-25T16:07:23.565337Z",
			"updated_at": "2026-04-10T02:00:04.668393Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"Bronze University",
				"Charcoal Typhoon",
				"Chromium",
				"G1006",
				"Red Dev 10",
				"Red Scylla"
			],
			"source_name": "ETDA:Earth Lusca",
			"tools": [
				"Agentemis",
				"AntSword",
				"BIOPASS",
				"BIOPASS RAT",
				"BadPotato",
				"Behinder",
				"BleDoor",
				"Cobalt Strike",
				"CobaltStrike",
				"Doraemon",
				"FRP",
				"Fast Reverse Proxy",
				"FunnySwitch",
				"HUC Port Banner Scanner",
				"KTLVdoor",
				"Mimikatz",
				"NBTscan",
				"POISONPLUG.SHADOW",
				"PipeMon",
				"RbDoor",
				"RibDoor",
				"RouterGod",
				"SAMRID",
				"ShadowPad Winnti",
				"SprySOCKS",
				"WinRAR",
				"Winnti",
				"XShellGhost",
				"cobeacon",
				"fscan",
				"lcx",
				"nbtscan"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "d53593c3-2819-4af3-bf16-0c39edc64920",
			"created_at": "2022-10-27T08:27:13.212301Z",
			"updated_at": "2026-04-10T02:00:05.272802Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"Earth Lusca",
				"TAG-22",
				"Charcoal Typhoon",
				"CHROMIUM",
				"ControlX"
			],
			"source_name": "MITRE:Earth Lusca",
			"tools": [
				"Mimikatz",
				"PowerSploit",
				"Tasklist",
				"certutil",
				"Cobalt Strike",
				"Winnti for Linux",
				"Nltest",
				"NBTscan",
				"ShadowPad"
			],
			"source_id": "MITRE",
			"reports": null
		}
	],
	"ts_created_at": 1775434159,
	"ts_updated_at": 1775792207,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/264fb47c4a290dd0b87c4b11d3d488fea6e999e7.pdf",
		"text": "https://archive.orkl.eu/264fb47c4a290dd0b87c4b11d3d488fea6e999e7.txt",
		"img": "https://archive.orkl.eu/264fb47c4a290dd0b87c4b11d3d488fea6e999e7.jpg"
	}
}