Difference between revisions of "Fast Thunder"
From Forensics Wiki
Joachim Metz (Talk | contribs) (→Example queries) |
Joachim Metz (Talk | contribs) (→Task database) |
||
| Line 25: | Line 25: | ||
The timestamp: | The timestamp: | ||
| − | * TaskBase.CreationTime | + | * TaskBase.CreationTime and TaskBase.CompletionTime are stored as BIGINT and contains a POSIX timestamp shifted 24-bits to the left, e.g. |
<pre> | <pre> | ||
printf "0x%x\n" 22090158425767936 | printf "0x%x\n" 22090158425767936 | ||
Revision as of 10:47, 21 March 2012
Fast Thunder (aka Xunlei) is a download manager developed by Thunder Networking Technologies.
Contents |
SuperDownload database
The SuperDownload database can be found at:
On Windows
C:\Program Files\Thunder Network\Thunder\data\SdInfoDb.dat
This file uses the SQLite database format.
The timestamp:
- SuperDownloadInfo.ContentDownloadTime is stored as BIGINT and contains a POSIX timestamp
- SuperDownloadResource.DownloadTime is stored as BIGINT and contains presumably a POSIX timestamp
Task database
The Task database can be found at:
On Windows
C:\Program Files\Thunder Network\Thunder\Profiles\TaskDb.dat
The timestamp:
- TaskBase.CreationTime and TaskBase.CompletionTime are stored as BIGINT and contains a POSIX timestamp shifted 24-bits to the left, e.g.
printf "0x%x\n" 22090158425767936 0x4e7ae1ce000000 date -d @$(( 22029112998625280 >> 24 )) Thu Aug 11 06:37:35 CEST 2011
Example queries
Some example queries:
To get an overview of the tasks:
SELECT datetime((TaskBase.CreationTime >> 24), "unixepoch"), datetime((TaskBase.CompletionTime >> 24), TotalReceiveSize, TotalSendSize, Url, ReferenceUrl, Name, Description, SavePath FROM TaskBase;
