{
	"id": "1d58de70-f4fe-41ad-9453-a39fd1b7cf52",
	"created_at": "2026-04-06T00:10:10.775747Z",
	"updated_at": "2026-04-10T13:12:08.22931Z",
	"deleted_at": null,
	"sha1_hash": "be913b170d3f40476642c79909e1ee2cbd8cfb0f",
	"title": "View the browsing history of your Web browser",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 158023,
	"plain_text": "View the browsing history of your Web browser\r\nArchived: 2026-04-05 22:34:44 UTC\r\n \r\nBrowsingHistoryView v2.60 - View browsing history of your Web browsers\r\nCopyright (c) 2012 - 2025 Nir Sofer\r\nSee Also\r\nChromeCacheView - Cache viewer for Google Chrome Web browser\r\nDescription\r\nBrowsingHistoryView is a utility that reads the history data of different Web browsers (Mozilla Firefox, Google\r\nChrome, Internet Explorer, Microsoft Edge, Opera) and displays the browsing history of all these Web browsers in\r\none table. The browsing history table includes the following information: Visited URL, Title, Visit Time, Visit\r\nCount, Web browser and User Profile. BrowsingHistoryView allows you to watch the browsing history of all user\r\nprofiles in a running system, as well as to get the browsing history from external hard drive.\r\nYou can also export the browsing history into csv/tab-delimited/html/xml file from the user interface, or from\r\ncommand-line, without displaying any user interface.\r\nVersions History\r\nVersion 2.60:\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 1 of 14\n\nAdded 'Black Background' option (Under the View menu). When it's turned on, the main table is\r\ndisplayed in black background and white text, instead of default system colors.\r\nVersion 2.59:\r\nFixed bug: BrowsingHistoryView crashed when trying to read the IE database (WebCacheV01.dat)\r\non Windows 11 24H2.\r\nVersion 2.58:\r\nFixed issue: When copying data to the clipboard or exporting to tab-delimited file, every line\r\ncontained an empty field in the end of the line.\r\nVersion 2.57:\r\nUpdated to read the history file of the latest Opera versions.\r\nVersion 2.56:\r\nAdded option to choose another font (name and size) to display in the main window.\r\nVersion 2.55:\r\nAdded 'Sort By' toolbar button.\r\nVersion 2.54:\r\n'Copy QR Code' option - Added white space around the QR Code.\r\nVersion 2.53:\r\nFixed to read the history of multiple profiles in Yandex and Vivaldi Web browsers.\r\nUpdated to stop the Web browsers history scan when you press the Esc key.\r\nVersion 2.52:\r\nThe status bar now displays the current scanned history filename.\r\nFixed the quick-filter text-box to copy to the clipboard when pressing Ctrl+C.\r\nVersion 2.51:\r\nAdded 'Visit Duration' column. This column is available only for Chrome and Chromium-based\r\nWeb browsers.\r\nImproved the 'Visited From' column in new versions of Chrome.\r\nVersion 2.50:\r\nAdded option to change the sorting column from the menu (View -\u003e Sort By). Like the column\r\nheader click sorting, if you click again the same sorting menu item, it'll switch between ascending\r\nand descending order. Also, if you hold down the shift key while choosing the sort menu item, you'll\r\nget a secondary sorting.\r\nVersion 2.48:\r\nAdded toolbar button to the 'Display QR Code' option.\r\nFixed bug: When using the /SaveDirect command-line option, the 'Visited From' column contained\r\nincorrect value.\r\nVersion 2.47:\r\nAdded 'Copy QR Code' option (Under the Edit menu), which allows you to copy the QR Code\r\nimage to the clipboard.\r\nUpdated to work properly in high DPI mode.\r\nVersion 2.46:\r\nAdded support for Brave Web browser.\r\nVersion 2.45:\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 2 of 14\n\nAdded 'Display QR Code' option (Under the View menu): When it's turned on, QR Code of the\r\nselected URL is displayed in the lower pane, and you can use QR Code Reader app on your\r\nSmartphone to instantly open the URL in the Web browser of your Smartphone.\r\nVersion 2.41:\r\nFixed the /cfg command-line option to load the .cfg file from the current directory if full path is not\r\nspecified.\r\nVersion 2.40:\r\nAdded new date/time filter: 'Load history items from the following time range and date range\r\n(separately)'. For example... You can search browsing history items that their modified date is\r\nbetween 01/01/2019 - 01/01/2020 and their modified time is between 02:00 - 04:00.\r\nVersion 2.36:\r\nAdded button on the toolbar to delete Chrome / Firefox history records.\r\nVersion 2.35:\r\nAdded 'Delete Selected History Records' option (Ctrl+Delete), which allows you to delete\r\nindividual history records of Chrome and Firefox Web browsers (Including Web browsers that use\r\nthe same history database of Chrome/Firefox, like Waterfox, SeaMonkey, Vivaldi, and so on...)\r\nOther Web browsers are not supported.\r\nVersion 2.30:\r\nAdded new columns: 'History File' and 'Record ID'.\r\nVersion 2.26:\r\nAdded 'Double-Click Action' option, which allows you to choose what to do when you double-click\r\non history item - Open properties window or open the URL in Web browser.\r\nVersion 2.25:\r\nAdded support for Waterfox Web browser.\r\nVersion 2.21:\r\nAdded option to specify the time range in local time (Instead of GMT).\r\nVersion 2.20:\r\nBrowsingHistoryView now automatically detects the Chromium-based Edge Web browser.\r\nVersion 2.17:\r\nYou can now specify environment variables in the history files of the 'Load history from the\r\nspecified history files' option.\r\nVersion 2.16:\r\nFixed to work with Firefox 61.0\r\nVersion 2.15:\r\nAdded support for Pale Moon Web browser.\r\nVersion 2.12:\r\nAdded new options to the 'Quick Filter' feature.\r\nVersion 2.11:\r\nThe remote computer name ('Load history from remote computer' option ) is now saved in the .cfg\r\nfile. Also, you can set the remote computer from command-line with /ComputerName command-line option.\r\nVersion 2.10:\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 3 of 14\n\nAdded new option: 'Automatically stop the cache task of IE10/IE11/Edge for unlocking the database\r\nfile.' If this option is turned on - BrowsingHistoryView automatically stops the 'CacheTask'\r\nScheduled task to unlock the database file of IE10/IE11/Edge (WebCacheV01.dat).\r\nWhen you use the 'Load history from remote computer' option, BrowsingHistoryView will stop the\r\n'CacheTask' Scheduled task on the remote computer, so you'll be able to view the history of\r\nIE10/IE11/Edge remotely.\r\nVersion 2.05:\r\nAdded 'Load history from remote computer' option in 'Advanced Options' window. Be aware that\r\nthis option works only when you have full admin access to the remote computer. Also, the history of\r\nIE10/IE11 is only available before the user logged-on to the system, because after the log-on the\r\nhistory database of IE10/IE11 is locked.\r\nFixed bug: 'Copy Selected Items' worked improperly when setting the 'Unicode/Ascii Save Mode' to\r\n'Always UTF-8'.\r\nVersion 2.00:\r\nAdded 'Visit Type' column for Chrome and Firefox Web browsers. (Link, Typed URL, Bookmark,\r\nand so on)\r\nVersion 1.95:\r\nAdded 'Quick Filter' feature (View -\u003e Use Quick Filter or Ctrl+Q). When it's turned on, you can\r\ntype a string in the text-box added under the toolbar and BrowsingHistoryView will instantly filter\r\nthe history table, showing only lines that contain the string you typed.\r\nVersion 1.91:\r\nFix bug: When using /SaveDirect command-line option, the file was always saved according to the\r\ndefault encoding, instead of using the selected encoding in Options -\u003e Save File Encoding.\r\nVersion 1.90:\r\nAdded support for Vivaldi Web browser.\r\nWhen 'Load history from the specified profiles folder' option is selected, the folders combo-box is\r\nfilled with the profiles folders stored in shadow copies of your hard drive. When loading history\r\nfrom shadow copies, you may find history items older than what you can find in your current\r\nsystem.\r\nVersion 1.87:\r\nAdded secondary sorting support: You can now get a secondary sorting, by holding down the shift\r\nkey while clicking the column header. Be aware that you only have to hold down the shift key when\r\nclicking the second/third/fourth column. To sort the first column you should not hold down the Shift\r\nkey.\r\nFixed bug: BrowsingHistoryView crashed when using the find option while the last item was\r\nselected.\r\nVersion 1.86:\r\nYou can now choose the desired encoding (ANSI, UTF-8, UTF-16) to save the csv/xml/text/html\r\nfiles. (Under the Options menu)\r\nVersion 1.85:\r\nAdded new option to the 'Advanced Options' window: Load only URLs contain one of the specified\r\nstrings (comma-delimited list).\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 4 of 14\n\nAdded new option to the 'Advanced Options' window: Don't load URLs that contain one of the\r\nspecified strings (comma-delimited list).\r\nVersion 1.81:\r\nThe 'Web Browser' column now displays 'Internet Explorer 10/11 / Edge' for items of\r\nIE10/IE11/Edge (In previous versions it displayed 'Internet Explorer 10')\r\nVersion 1.80:\r\nAdded support for Yandex Web browser.\r\nVersion 1.77:\r\nThe properties window is now larger and resizable.\r\nVersion 1.76:\r\nAdded option to skip duplicate URLs that their visit time difference is less than xx seconds. (In\r\n'Advanced Options' window) Sometimes, A web browser may record a Web page visit multiple\r\ntimes with a difference of a few seconds, even when the Web page was visited only once. This\r\noption allows you to hide these duplicate history records.\r\nVersion 1.75:\r\nAdded support for Microsoft Edge/Project Spartan (On Windows 10).\r\nFixed issue: When Internet Explorer 10/11 was opened by multiple users, BrowsingHistoryView\r\ndisplayed all history records of IE 10/11 multiple times.\r\nVersion 1.71:\r\nFixed issue: When loading large amount of history items, some actions, like selecting items and\r\ncopying selected items to the clipboard were very slow.\r\nVersion 1.70:\r\nAdded 'Typed Count' column (Only relevant to Chrome Web browser).\r\nVersion 1.69:\r\nFixed issue: On some systems, BrowsingHistoryView failed to read the history of IE10/IE11 from\r\nWebCacheV01.dat\r\nVersion 1.68:\r\nBrowsingHistoryView now detects the portable version of Firefox if it's running in the background.\r\nVersion 1.67:\r\nAdded 'URL Length' column.\r\nVersion 1.66:\r\nAdded 'Load history items from the last xx minutes' to the 'Advanced Options' window.\r\nFixed bug: BrowsingHistoryView failed to remember the last size/position of the main window if it\r\nwas not located in the primary monitor.\r\nVersion 1.65:\r\nAdded support for Opera (Version 15 or later).\r\nVersion 1.60:\r\nAdded 'Browser Profile' column, which displays the folder name of the Web browser profile (For\r\nFirefox and Chrome Web browsers).\r\nVersion 1.55:\r\nAdded 'Save Configuration To File' and 'Load Configuration From File' options.\r\nVersion 1.52:\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 5 of 14\n\nFixed bug: When getting history information from a remote computer and both local computer and\r\nremote computer have IE10 or IE11, BrowsingHistoryView displayed the IE10/IE11 history of the\r\nlocal computer... (Be aware that BrowsingHistoryView cannot display the IE10/IE11 history of a\r\nremote computer while the WebCacheV01.dat file on the remote computer is locked)\r\nVersion 1.51:\r\nFixed to find the correct item when typing the string you want to search into the main List View.\r\nVersion 1.50:\r\nAdded 'Load history from the specified history files' option in the 'Advanced Options' window.\r\nVersion 1.44:\r\nFixed bug from v1.43: BrowsingHistoryView stopped working on Windows 2000.\r\nVersion 1.43:\r\nFixed to display date/time values according to daylight saving time settings.\r\nVersion 1.42:\r\nAdded /cfg command-line option, which instructs BrowsingHistoryView to use a config file in\r\nanother location instead if the default config file, for example:\r\nBrowsingHistoryView.exe /cfg \"%AppData%\\BrowsingHistoryView.cfg\"\r\nVersion 1.41\r\nFixed a bug with displaying IDN URLs (URLs containing non-English characters) from Firefox\r\nhistory.\r\nVersion 1.40\r\nAdded new data source in the 'Advanced Options' window: Load history from the specified custom\r\nfolders. In this option, you can select the correct AppData folder, Local AppData folder, and the\r\nHistory folder of the profile you want to inspect.\r\nVersion 1.36\r\nFixed the problem with the 'Advanced Options' window on Windows 2000.\r\nVersion 1.35\r\nAdded 'Show Advanced Options On Start' option. You can turn off this option if you don't want that\r\nthe 'Advanced Options' window will appear on every time that you run BrowsingHistoryView.\r\nVersion 1.33\r\nImproved the detection of AppData and Local AppData folders when reading the history from\r\nexternal drive.\r\nVersion 1.32\r\nAdded secondary sorting: When clicking the 'Web Browser' column header, the list is sorted by the\r\n'Web Browser' column, and then by the 'Visit Time' column.\r\nVersion 1.31\r\nAdded option to get the history from Internet Explorer API, instead of reading the file directly.\r\n(Available only when loading the history of the current user).\r\nVersion 1.30\r\nAdded improved support for Internet Explorer 10, which works smoothly and doesn't require to run\r\nBrowsingHistoryView as administrator. There is no need to execute BrowsingHistoryView with any\r\nadditinal command-line option in order to read the locked file of IE10 (WebCacheV24.dat or\r\nWebCacheV01.dat), and the /UseVolumeShadowCopy command-line option added on v1.15 was\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 6 of 14\n\nremoved from this version.\r\nBe aware that during browsing on IE10, you may get corrupted history result, because the database\r\nis not fully flushed to the disk.\r\nAlso, be aware that BrowsingHistoryView cannot read a locked IE10 file on a remote network\r\nsystem.\r\nVersion 1.27\r\nFixed bug: BrowsingHistoryView failed to load Firefox profile located on a drive letter which is\r\ndifferent from the drive letter where the Windows profiles (c:\\users ...) are located.\r\nFixed the flickering appeared while scrolling the history items.\r\nVersion 1.26\r\nFixed bug: When exporting browser history data with /SaveDirect command-line option,\r\nBrowsingHistoryView added byte order mark of Unicode, while the file was saved as Ascii.\r\nVersion 1.25\r\nBrowsingHistoryView now reads the history of all profiles from Chrome and Chrome Canary Web\r\nbrowsers.\r\nVersion 1.21\r\nFixed bug: BrowsingHistoryView displayed corrupted URLs from partially deleted records of\r\nInternet Explorer history file.\r\nVersion 1.20\r\nAdded support for Chrome Canary and SeaMonkey Web browsers.\r\nAdded 'Mark Odd/Even Rows' option, under the View menu. When it's turned on, the odd and even\r\nrows are displayed in different color, to make it easier to read a single line.\r\nVersion 1.16\r\nFixed bug: BrowsingHistoryView failed to read some of the history items of Internet Explorer 10.\r\nVersion 1.15\r\nAdded support for Internet Explorer 10 (WebCacheV24.dat or WebCacheV01.dat). There are some\r\nlimitations and problems with this version of Internet Explorer. See the 'Internet Explorer 10\r\nSupport' section for more information.\r\nVersion 1.10\r\nAdded 'Visited From' column (Only for Firefox and Chrome), which displays the URL that the user\r\nhas visited prior to the Web page specified under the URL column.\r\nVersion 1.06\r\nFixed BrowsingHistoryView to display the Web page title for Internet Explorer Web browser.\r\nVersion 1.05\r\nAdded 'Copy URLs' option (Ctrl+U)\r\nAdded 'Open URL In Web Browser' option.\r\nVersion 1.01\r\nBrowsingHistoryView now reads the profiles.ini file of Firefox to get the correct profile folders.\r\nVersion 1.00 - First release.\r\nSystem Requirements\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 7 of 14\n\nThis utility works on any version of Windows, starting from Windows 2000, and up to Windows 11. Both 32-bit\r\nand x64 systems are supported.\r\nThe following Web browsers are supported:\r\nInternet Explorer (Version 4.00 and greater)\r\nMozilla Firefox (Version 3.00 and greater)\r\nMicrosoft Edge\r\nGoogle Chrome\r\nSafari\r\nOpera (Version 15 or later, which is based on Chrome Web browser)\r\nYandex Web browser\r\nVivaldi Web browser\r\nSeaMonkey Web browser\r\nBrave Web browser\r\nKnown Limitations and Problems\r\n'Visit Count' on Internet Explorer Web browser: The 'Visit Count' column is taken \"as is\" from the history\r\nfile of Internet Explorer. Unfortunately, Internet Explorer tend to extremely bloat the 'Visit Count' number,\r\nwhich means that you cannot assume that the 'Visit Count' number represents the actual number of times\r\nthat the user visited the specified Web site. This remark is only relevant for Internet Explorer. Other Web\r\nbrowsers count the number of visits properly, as far as I know.\r\nLimitations and problems with reading the history of IE10, IE11 and Microsoft Edge: Version 10 and 11 of\r\nInternet Explorer stores the history data inside WebCacheV01.dat, and this file is locked by the operating\r\nsystem most of the time, even when IE is closed.\r\nIn order to unlock the history database file, you should turn on the 'Automatically stop the cache task of\r\nIE10/IE11/Edge' option. If you use the 'Load history from remote computer' option - BrowsingHistoryView\r\nwill stop the cache task of IE10/IE11/Edge on the specified remote system, so you'll be able to see the\r\nhistory of IE10/IE11/Edge remotely.\r\nStart Using BrowsingHistoryView\r\nBrowsingHistoryView doesn't require any installation process or additional dll files. In order to start using it,\r\nsimply run the executable file - BrowsingHistoryView.exe\r\nAfter you run BrowsingHistoryView, the 'Advanced Options' window is displayed. By default,\r\nBrowsingHistoryView offers you to load the history of all Web browsers and all user profiles in the last 10 days,\r\nbut you can change the options according to your needs.\r\nAfter pressing 'Ok' in the 'Advanced Options' window, BrowsingHistoryView loads and displays the browsing\r\nhistory according to the options you chose.\r\nThe 'Advanced Options' Window\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 8 of 14\n\nFilter by visit date/time: Allows you to load the history from the last number of days/hours, or from\r\nspecific date/time range.\r\nWeb Browsers: BrowsingHistoryView will load the history only from the selected Web browsers. For\r\nexample, if you want to only get the browsing history of Internet Explorer, then you need to select the\r\n'Internet Explorer' check-box and deselect all others.\r\nLoad history from: Allows you to choose the data source of the browsing history:\r\nLoad history from the current running system (All users): If you choose this option,\r\nBrowsingHistoryView scans all the user profiles on your system (C:\\Documents and Settings or\r\nC:\\Users) and loads the history data from them.\r\nBe aware that the Registry file of every user profile (NTUSER.DAT) should be readable, because\r\nBrowsingHistoryView uses the Registry file to locate the correct history file/folder of every Web\r\nbrowser. If BrowsingHistoryView cannot read NTUSER.DAT, it'll try to locate the correct folders in\r\nother less reliable ways.\r\nLoad history from the current running system (Only current user): If you choose this option,\r\nBrowsingHistoryView loads only the browsing history of the current logged-on user.\r\nLoad history from the specified profiles folder: If you choose this option, BrowsingHistoryView\r\nscans all the user profiles under the specified folder. The specified folder should be something like\r\nH:\\Documents and Settings (On Windows XP) or H:\\Users (On Windows 7/2008/Vista/8).\r\nBe aware that the Registry file of every user profile (NTUSER.DAT) should be readable, because\r\nBrowsingHistoryView uses the Registry file to locate the correct history file/folder of every Web\r\nbrowser. If BrowsingHistoryView cannot read NTUSER.DAT, it'll try to locate the correct folders in\r\nother less reliable ways.\r\nLoad history from the specified profile: If you choose this option, BrowsingHistoryView loads the\r\nhistory from the specified profile folder. The specified profile folder should be something like\r\nH:\\Documents and Settings\\Administrator (On Windows XP) or H:\\Users\\Administrator (On\r\nWindows 7/2008/Vista/8).\r\nLoad history from the specified custom folders: If you choose this option, you should specify the\r\nfollowing folders of the user profile you want to load: History (e.g:\r\nC:\\Users\\user01\\AppData\\Local\\Microsoft\\Windows\\History ), App Data (e.g:\r\nC:\\Users\\user01\\AppData\\Roaming), Local App Data (e.g: C:\\Users\\user01\\AppData\\Local)\r\nLoad history from the specified history files: If you choose this option, you have to specify the\r\nhistory file of every Web browser that you want to load.\r\nLoad history from remote computer: Allows you to load the browsing history from remote computer\r\non your network. Be aware that this option works only when you have full admin access to the\r\nremote computer. If you want to view the history of IE10/IE11/Edge Web browser, you have to turn\r\non the following option: 'Automatically stop the cache task of IE10/IE11/Edge for unlocking the\r\ndatabase file.'\r\nReading Older History From Shadow Copies\r\nIf your hard drive has one or more shadow copies, you can view the history stored inside these shadow copies by\r\nselecting the 'Load history from the specified profiles folder' option in the 'Advanced Options' window and then\r\nchoosing the desired shadow copy path (I'll be something like '\\\\?\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 9 of 14\n\n\\GLOBALROOT\\Device\\HarddiskVolumeShadowCopy2\\users') from the path combo-box.\r\nInside shadow copies you may find old history items that don't exist in the current system as well as history items\r\nthere were deleted by clearing the Web browser history.\r\nBe aware that the shadow copies feature only works starting from Windows Vista (XP is not supported).\r\nCommand-Line Options\r\n/cfg \u003cFilename\u003e\r\nStart BrowsingHistoryView with the specified configuration file. For\r\nexample:\r\nBrowsingHistoryView.exe /cfg \"c:\\config\\bhv.cfg\"\r\nBrowsingHistoryView.exe /cfg\r\n\"%AppData%\\BrowsingHistoryView.cfg\"\r\n/stext \u003cFilename\u003e Save the browsing history into a regular text file.\r\n/stab \u003cFilename\u003e Save the browsing history into a tab-delimited text file.\r\n/scomma \u003cFilename\u003e Save the browsing history into a comma-delimited text file (csv).\r\n/stabular \u003cFilename\u003e Save the browsing history into a tabular text file.\r\n/shtml \u003cFilename\u003e Save the browsing history into HTML file (Horizontal).\r\n/sverhtml \u003cFilename\u003e Save the browsing history into HTML file (Vertical).\r\n/sxml \u003cFilename\u003e Save the browsing history into XML file.\r\n/sort \u003ccolumn\u003e\r\nThis command-line option can be used with other save options for\r\nsorting by the desired column. If you don't specify this option, the list\r\nis sorted according to the last sort that you made from the user\r\ninterface. The \u003ccolumn\u003e parameter can specify the column index (0\r\nfor the first column, 1 for the second column, and so on) or the name\r\nof the column, like \"Title\" and \"URL\". You can specify the '~' prefix\r\ncharacter (e.g: \"~Visit Time\") if you want to sort in descending order.\r\nYou can put multiple /sort in the command-line if you want to sort by\r\nmultiple columns.\r\nExamples:\r\nBrowsingHistoryView.exe /shtml \"f:\\temp\\history.html\" /sort 2 /sort\r\n~1\r\nBrowsingHistoryView.exe /shtml \"f:\\temp\\history.html\" /sort \"URL\"\r\n/sort \"Visit Time\"\r\n/nosort\r\nWhen you specify this command-line option, the list will be saved\r\nwithout any sorting.\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 10 of 14\n\n/SaveDirect\r\nSave the browsing history in SaveDirect mode. For using with the\r\nother save command-line options ( /scomma, /stab, /sxml, and so\r\non...) When you use the SaveDirect mode, the history lines are saved\r\ndirectly to the disk, without loading them into the memory first. This\r\nmeans that you can save a list with large amount of history lines into\r\nyour disk without any memory problem, as long as you have enough\r\ndisk space to store the saved file. The drawback of this mode: You\r\ncannot sort the lines according to the column you choose with /sort\r\ncommand-line option.\r\n/HistorySource \u003cSource\u003e\r\nSpecifies the type of history data source:\r\n1 - Load history from the current running system (All users).\r\n2 - Load history from the current running system (Only current\r\nuser).\r\n3 - Load history from the specified profiles folder\r\n(/HistorySourceFolder command-line parameter).\r\n4 - Load history from the specified profile\r\n(/HistorySourceFolder command-line parameter).\r\n5 - Load history from the specified custom folders\r\n(/CustomFolderAppData , /CustomFolderIEHistory ,\r\n/CustomFolderLocalAppData).\r\n6 - Load history from the specified history files\r\n(/CustomFiles.IEFolders , /CustomFiles.IE10Files ,\r\n/CustomFiles.FirefoxFiles, /CustomFiles.ChromeFiles ,\r\n/CustomFiles.SafariFiles ).\r\n7 - Load history from remote computer (Use with\r\n/ComputerName command-line parameter).\r\n/HistorySourceFolder \u003cFolder\u003e Specifies the folder path if /HistorySource is 3 or 4.\r\n/ComputerName \u003cComputer Name\u003e Specifies the remote computer name if /HistorySource is 7.\r\n/VisitTimeFilterType \u003cFilter Type\u003e\r\nSpecifies the type of date/time filter:\r\n1 - Load history from any date/time.\r\n2 - Load history from the last xx hours (xx specified in\r\n/VisitTimeFilterValue)\r\n3 - Load history from the last xx days (xx specified in\r\n/VisitTimeFilterValue)\r\n4 - Load history from the specified date/time range (The time\r\nrange is specified in /VisitTimeFrom and /VisitTimeTo)\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 11 of 14\n\n/VisitTimeFilterValue \u003cFilter Value\u003e Specifies the filter value when /VisitTimeFilterType is 2 or 3\r\n/VisitTimeFrom \u003cTime\u003e\r\n/VisitTimeTo \u003cTime\u003e\r\nSpecifies the date/time range when /VisitTimeFilterType is 4.\r\ndate/time value must be in the following format: dd-mm-yyyy\r\nhh:nn:ss\r\nFor example:\r\nBrowsingHistoryView.exe /VisitTimeFrom \"10-01-2012 12:00:00\"\r\n/VisitTimeTo \"18-02-2012 10:00:00\"\r\n/LoadIE \u003c0 | 1\u003e\r\n/LoadFirefox \u003c0 | 1\u003e\r\n/LoadChrome \u003c0 | 1\u003e\r\n/LoadSafari \u003c0 | 1\u003e\r\nSpecifies whether to load the history of IE/Firefox/Chrome/Safari\r\nWeb browser. 0 = Don't load, 1 = Load.\r\n/StopIECacheTask \u003c0 | 1\u003e\r\nSpecifies whether to stop the cache task of IE10/IE11/Edge (0 = No, 1\r\n= Yes).\r\nHere's some command-line examples:\r\nBrowsingHistoryView.exe /HistorySource 4 /HistorySourceFolder \"H:\\Documents and Settings\\User01\" /stab\r\n\"c:\\temp\\history.txt\"\r\nBrowsingHistoryView.exe /HistorySource 3 /HistorySourceFolder \"G:\\Documents and Settings\"\r\n/VisitTimeFilterType 3 /VisitTimeFilterValue 10 /scomma \"c:\\temp\\history.csv\"\r\nBrowsingHistoryView.exe /HistorySource 1 /LoadIE 1 /LoadFirefox 0 /LoadChrome 0 /LoadSafari 0 /shtml\r\n\"c:\\temp\\history.html\"\r\nBrowsingHistoryView.exe /HistorySource 2 /VisitTimeFilterType 4 /VisitTimeFrom \"01-01-2011 00:00:00\"\r\n/VisitTimeTo \"01-01-2012 00:00:00\" /stab \"c:\\temp\\history.txt\"\r\nBe aware that you can use any variable stored in tne .cfg file as command-line parameter, even if it's not specified\r\nin the above command-line list.\r\nTranslating BrowsingHistoryView to other languages\r\nIn order to translate BrowsingHistoryView to other language, follow the instructions below:\r\n1. Run BrowsingHistoryView with /savelangfile parameter:\r\nBrowsingHistoryView.exe /savelangfile\r\nA file named BrowsingHistoryView_lng.ini will be created in the folder of BrowsingHistoryView utility.\r\n2. Open the created language file in Notepad or in any other text editor.\r\n3. Translate all string entries to the desired language. Optionally, you can also add your name and/or a link to\r\nyour Web site. (TranslatorName and TranslatorURL values) If you add this information, it'll be used in the\r\n'About' window.\r\n4. After you finish the translation, Run BrowsingHistoryView, and all translated strings will be loaded from\r\nthe language file.\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 12 of 14\n\nIf you want to run BrowsingHistoryView without the translation, simply rename the language file, or move\r\nit to another folder.\r\nLicense\r\nThis utility is released as freeware. You are allowed to freely distribute this utility via floppy disk, CD-ROM,\r\nInternet, or in any other way, as long as you don't charge anything for this and you don't sell it or distribute it as a\r\npart of commercial product. If you distribute this utility, you must include all files in the distribution package,\r\nwithout any modification !\r\nDisclaimer\r\nThe software is provided \"AS IS\" without any warranty, either expressed or implied, including, but not limited to,\r\nthe implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any\r\nspecial, incidental, consequential or indirect damages due to loss of data or any other reason.\r\nFeedback\r\nIf you have any problem, suggestion, comment, or you found a bug in my utility, you can send a message to\r\nnirsofer@yahoo.com\r\nBrowsingHistoryView is also available in other languages. In order to change the language of\r\nBrowsingHistoryView, download the appropriate language zip file, extract the 'browsinghistoryview_lng.ini', and\r\nput it in the same folder that you Installed BrowsingHistoryView utility.\r\nLanguage Translated By Date Version\r\nArabic Shanaab! 10/07/2015 1.70\r\nBrazilian Portuguese Paulo Guzmán 03/11/2022 2.52\r\nBulgarian Nider Karlov 25/11/2020 2.45\r\nCroatian Tihomir Šibalić 10/04/2020 2.40\r\nCzech Jakub Šindelář 06/11/2017 2.10\r\nDutch Jan Verheijen 27/03/2025 2.60\r\nFinnish Arzer 21/03/2013 1.00\r\nFrench Alain NOGUES 12/09/2012 1.01\r\nFrench Largo 27/03/2025 2.60\r\nGerman «Latino» 21/04/2025 2.60\r\nGreek geogeo.gr 21/01/2018 2.15\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 13 of 14\n\nHungarian Timinoun 18/04/2025 2.60\r\nItalian Jaff (Oprea Nicolae) 30/12/2018 2.17\r\nItalian Giacomo Margarito e R.B. 27/03/2025 2.56\r\nJapanese coolvitto 27/03/2025 2.60\r\nPersian ZendegiyeSabz 01/04/2025 2.60\r\nPolish Melonet 01/02/2022 2.51\r\nRomanian Jaff (Oprea Nicolae) 30/12/2018 2.17\r\nRussian Dmitry Yerokhin 26/03/2025 2.60\r\nSimplified Chinese DickMoore 03/10/2024 2.58\r\nSlovak František Fico 02/04/2025 2.60\r\nSpanish Carlos Sánchez 13/12/2020 2.45\r\nTraditional Chinese Danfong Hsieh 27/03/2025 2.60\r\nTraditional Chinese Hulen (破滅刃) 05/05/2013 1.30\r\nTurkish HARUN ARI 12/11/2023 2.57\r\n  \r\nSource: https://www.nirsoft.net/utils/browsing_history_view.html\r\nhttps://www.nirsoft.net/utils/browsing_history_view.html\r\nPage 14 of 14",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://www.nirsoft.net/utils/browsing_history_view.html"
	],
	"report_names": [
		"browsing_history_view.html"
	],
	"threat_actors": [
		{
			"id": "9f101d9c-05ea-48b9-b6f1-168cd6d06d12",
			"created_at": "2023-01-06T13:46:39.396409Z",
			"updated_at": "2026-04-10T02:00:03.312816Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"CHROMIUM",
				"ControlX",
				"TAG-22",
				"BRONZE UNIVERSITY",
				"AQUATIC PANDA",
				"RedHotel",
				"Charcoal Typhoon",
				"Red Scylla",
				"Red Dev 10",
				"BountyGlad"
			],
			"source_name": "MISPGALAXY:Earth Lusca",
			"tools": [
				"RouterGod",
				"SprySOCKS",
				"ShadowPad",
				"POISONPLUG",
				"Barlaiy",
				"Spyder",
				"FunnySwitch"
			],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "18a7b52d-a1cd-43a3-8982-7324e3e676b7",
			"created_at": "2025-08-07T02:03:24.688416Z",
			"updated_at": "2026-04-10T02:00:03.734754Z",
			"deleted_at": null,
			"main_name": "BRONZE UNIVERSITY",
			"aliases": [
				"Aquatic Panda",
				"Aquatic Panda ",
				"CHROMIUM",
				"CHROMIUM ",
				"Charcoal Typhoon",
				"Charcoal Typhoon ",
				"Earth Lusca",
				"Earth Lusca ",
				"FISHMONGER ",
				"Red Dev 10",
				"Red Dev 10 ",
				"Red Scylla",
				"Red Scylla ",
				"RedHotel",
				"RedHotel ",
				"Tag-22",
				"Tag-22 "
			],
			"source_name": "Secureworks:BRONZE UNIVERSITY",
			"tools": [
				"Cobalt Strike",
				"Fishmaster",
				"FunnySwitch",
				"Spyder",
				"njRAT"
			],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "6abcc917-035c-4e9b-a53f-eaee636749c3",
			"created_at": "2022-10-25T16:07:23.565337Z",
			"updated_at": "2026-04-10T02:00:04.668393Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"Bronze University",
				"Charcoal Typhoon",
				"Chromium",
				"G1006",
				"Red Dev 10",
				"Red Scylla"
			],
			"source_name": "ETDA:Earth Lusca",
			"tools": [
				"Agentemis",
				"AntSword",
				"BIOPASS",
				"BIOPASS RAT",
				"BadPotato",
				"Behinder",
				"BleDoor",
				"Cobalt Strike",
				"CobaltStrike",
				"Doraemon",
				"FRP",
				"Fast Reverse Proxy",
				"FunnySwitch",
				"HUC Port Banner Scanner",
				"KTLVdoor",
				"Mimikatz",
				"NBTscan",
				"POISONPLUG.SHADOW",
				"PipeMon",
				"RbDoor",
				"RibDoor",
				"RouterGod",
				"SAMRID",
				"ShadowPad Winnti",
				"SprySOCKS",
				"WinRAR",
				"Winnti",
				"XShellGhost",
				"cobeacon",
				"fscan",
				"lcx",
				"nbtscan"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "d53593c3-2819-4af3-bf16-0c39edc64920",
			"created_at": "2022-10-27T08:27:13.212301Z",
			"updated_at": "2026-04-10T02:00:05.272802Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"Earth Lusca",
				"TAG-22",
				"Charcoal Typhoon",
				"CHROMIUM",
				"ControlX"
			],
			"source_name": "MITRE:Earth Lusca",
			"tools": [
				"Mimikatz",
				"PowerSploit",
				"Tasklist",
				"certutil",
				"Cobalt Strike",
				"Winnti for Linux",
				"Nltest",
				"NBTscan",
				"ShadowPad"
			],
			"source_id": "MITRE",
			"reports": null
		}
	],
	"ts_created_at": 1775434210,
	"ts_updated_at": 1775826728,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/be913b170d3f40476642c79909e1ee2cbd8cfb0f.pdf",
		"text": "https://archive.orkl.eu/be913b170d3f40476642c79909e1ee2cbd8cfb0f.txt",
		"img": "https://archive.orkl.eu/be913b170d3f40476642c79909e1ee2cbd8cfb0f.jpg"
	}
}