ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
Fast Thunder (aka Xunlei) is a download manager developed by Thunder Networking Technologies.
The SuperDownload database can be found at:
C:\Program Files\Thunder Network\Thunder\data\SdInfoDb.dat
This file uses the SQLite database format.
- SuperDownloadInfo.ContentDownloadTime is stored as BIGINT and contains a POSIX timestamp
- SuperDownloadResource.DownloadTime is stored as BIGINT and contains presumably a POSIX timestamp
The Task database can be found at:
C:\Program Files\Thunder Network\Thunder\Profiles\TaskDb.dat
- TaskBase.CreationTime is stored as BIGINT and contains a POSIX timestamp shifted 24-bits to the left, e.g.
printf "0x%x\n" 22090158425767936 0x4e7ae1ce000000 date -d @$(( 22029112998625280 >> 24 )) Thu Aug 11 06:37:35 CEST 2011
Some example queries:
To get an overview of the tasks:
SELECT datetime((TaskBase.CreationTime >> 24), "unixepoch"), datetime((TaskBase.CompletionTime >> 24), TotalReceiveSize, TotalSendSize, Url, ReferenceUrl, Name, Description, SavePath FROM TaskBase;