Chrome Browsing History

androidWeb ActivityDevice ExtractionCloud Admin Portal

Location

/data/data/com.android.chrome/app_chrome/Default/History

Description

SQLite database containing Chrome browser history including URLs visited, page titles, visit timestamps (in WebKit epoch format), visit duration, transition type (typed, link, redirect), and visit count. The database also includes keyword_search_terms table linking searches to their corresponding URL visits.

Forensic Value

Chrome history on Android provides a detailed record of web activity including search queries, visited sites, and browsing patterns. The visit_source field distinguishes between local visits and those synced from other devices in the same Google account, enabling cross-device activity correlation. The keyword_search_terms table directly associates search engine queries with timestamps, revealing investigative interests, research activity, or pre-offense planning. Redirect chains captured in visit transitions expose the full navigation path including intermediate URLs.

Tools Required

Cellebrite UFEDALEAPPMagnet AXIOMBelkasoftDB Browser for SQLiteHindsight